Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5a488ffa-08d0-311c-8602-95f83243860f.roa
File:                     5a488ffa-08d0-311c-8602-95f83243860f.roa (raw, json)
Hash identifier:          /RkRXxUQ12Fjk+gnO6MyDJCWFHxW0DzKCQskmGLeQUw=
Subject key identifier:   80:22:CA:A6:12:83:A1:5D:74:CB:40:39:AA:A9:6B:1C:CF:66:26:FC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BFD5F5A53AE6694007D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5a488ffa-08d0-311c-8602-95f83243860f.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.194.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:fd:5f:5a:53:ae:66:94:00:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=50757f70-d4ed-48a2-bea2-01e802507555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8a:47:5b:93:6b:14:db:46:4c:41:6b:31:46:
                    14:ef:de:8f:d3:9d:f9:76:dd:e0:e4:f8:e6:0c:dd:
                    5f:4f:ca:d4:54:4e:79:9e:1b:e2:64:30:58:08:d3:
                    dc:63:5d:b0:bb:09:fc:c5:06:b1:3f:7f:c4:5e:3e:
                    0b:d1:5e:85:39:87:cb:df:16:e5:41:c5:2c:fa:70:
                    53:3b:e9:90:25:c0:8a:5d:c3:30:8c:68:d4:9d:97:
                    40:18:1a:25:fb:41:7b:92:33:fd:ac:c8:1b:ce:8a:
                    58:46:4f:25:90:6a:e1:8f:05:42:19:b5:4c:57:58:
                    26:29:f6:5a:ac:c6:6a:b0:0f:ec:c6:77:86:26:21:
                    30:eb:50:c1:b3:2b:d9:a4:67:a1:c3:18:c1:ad:72:
                    34:29:a1:2f:7b:32:08:80:22:af:b0:98:98:93:fd:
                    ac:99:7d:b1:3f:43:8c:d8:a2:fd:90:c2:84:37:ea:
                    ce:62:6f:5f:51:a6:00:e6:4b:4b:83:38:d0:fb:bd:
                    7a:35:fa:6a:21:62:55:bb:17:b2:57:e2:db:64:84:
                    d9:cd:26:70:d9:7f:f7:c1:5d:b7:35:36:71:f5:63:
                    17:c1:e8:59:d7:03:87:d8:93:ba:bf:94:d4:18:77:
                    c2:81:82:ab:4d:3d:36:73:0d:b0:1b:c9:96:99:51:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:22:CA:A6:12:83:A1:5D:74:CB:40:39:AA:A9:6B:1C:CF:66:26:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5a488ffa-08d0-311c-8602-95f83243860f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.194.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0c:31:12:30:42:92:38:bc:ae:26:60:ed:56:ab:46:23:19:
         18:7d:ff:56:e7:17:1d:95:fa:a1:28:ff:7e:98:30:86:34:86:
         62:34:13:43:8f:dd:a7:a2:4f:0c:ea:68:fe:4e:c3:2f:ef:4d:
         9c:5e:b0:16:76:9d:b7:f2:3f:35:5e:40:23:41:d4:35:8c:7c:
         0e:4e:16:c9:01:59:17:3e:8c:b5:27:ad:47:6c:27:75:ca:0b:
         b3:95:a4:c9:f2:8d:67:72:b4:31:e3:61:64:89:6c:23:9e:0b:
         9c:c0:d1:49:c5:3b:28:74:a6:65:f6:2f:24:c9:99:7f:16:6c:
         31:ac:20:62:94:e2:22:59:21:51:41:12:fd:2f:d7:e4:48:6a:
         eb:68:89:76:23:68:af:e3:9c:60:d2:aa:3d:81:ed:bd:ff:4e:
         2a:dd:fe:8e:34:43:0c:08:57:b9:97:bd:8a:a0:21:61:3c:6c:
         f7:17:75:04:b6:ac:a6:bf:a8:6e:d7:57:bd:eb:20:73:b9:b0:
         d6:bb:03:f5:88:cf:48:69:94:6a:aa:69:95:9c:71:5e:14:46:
         66:de:da:d0:31:e4:36:40:d9:b2:39:57:92:93:b9:1a:4a:6b:
         1a:4d:6b:fe:cb:5c:2d:18:53:ef:0b:9f:e5:d0:ff:bd:e3:d2:
         99:f6:66:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:48:10 2025 by rpki-client