Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e8209fd-a99a-3fef-80cd-4615e1f121e0.roa
File:                     5e8209fd-a99a-3fef-80cd-4615e1f121e0.roa (raw, json)
Hash identifier:          jGCc1TEPGKelUlGU97KZ3UOtQgYI+9Q3N9jDmv4xgLs=
Subject key identifier:   C2:9D:DA:24:1E:D0:54:74:E4:9A:1C:44:9C:DE:9F:67:23:D3:87:F8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BF9D234E08200DFE25178
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e8209fd-a99a-3fef-80cd-4615e1f121e0.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.224.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:f9:d2:34:e0:82:00:df:e2:51:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=121cb36e-37f6-4341-b080-9a902908d7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:46:b6:57:1c:6e:04:ac:b3:fb:d6:97:6a:
                    29:52:66:f7:cf:4e:07:31:4f:ed:66:fd:fb:c5:69:
                    9b:13:9c:dd:63:58:5a:c6:28:29:e8:6a:2f:bd:8b:
                    f7:1c:4b:d4:ac:1e:19:7f:1f:8b:c7:ba:4f:05:54:
                    90:aa:6c:78:55:c7:c2:30:6d:16:32:5c:b8:70:bb:
                    9a:d6:4a:2c:d5:bd:29:1d:d2:88:ed:07:97:e1:b7:
                    a0:37:ac:b0:08:87:0d:fd:73:33:22:b3:a8:f0:40:
                    cd:66:e3:a5:2c:c8:bc:9b:03:8b:e9:c4:7f:42:ab:
                    ba:af:05:ad:b1:fd:f9:f3:20:7f:86:a9:85:57:b1:
                    df:c9:a3:ab:81:43:94:99:2f:fd:8c:32:43:84:42:
                    95:9b:0e:59:23:39:a5:6f:c8:ce:d1:56:72:c8:3a:
                    a2:de:0b:b5:56:c5:41:03:7e:3c:99:2a:eb:63:49:
                    95:63:13:a1:ba:b1:3d:31:6d:ac:89:2e:c3:7c:70:
                    2b:e9:3a:bb:3b:23:2d:eb:ee:80:79:1e:44:42:68:
                    20:f8:64:3d:ce:c3:d6:4e:c2:d6:a4:40:6a:cb:53:
                    50:9f:7e:09:bb:c8:4b:ff:95:bc:f1:84:18:1c:ed:
                    85:92:0c:81:6b:82:14:0d:a0:94:c7:23:7a:b2:d0:
                    bc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9D:DA:24:1E:D0:54:74:E4:9A:1C:44:9C:DE:9F:67:23:D3:87:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e8209fd-a99a-3fef-80cd-4615e1f121e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.224.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:36:8f:ee:38:e2:5b:63:df:03:b5:80:a5:cd:95:85:b4:69:
         7b:d5:3b:97:e7:5d:7c:0f:02:26:f4:fb:ab:39:65:cf:f8:ad:
         18:60:e8:55:62:97:ec:b1:0b:48:22:b1:26:76:c2:12:7a:8b:
         49:c0:08:59:01:e3:26:5f:50:69:b5:bf:5c:cf:2e:1a:c3:3a:
         00:21:e1:84:da:c4:94:57:a6:e8:33:95:7f:ac:6e:79:00:c3:
         ae:57:20:e3:b0:7d:7c:18:9c:15:be:05:d3:4d:72:9d:a5:1c:
         c3:53:c8:ef:63:54:0a:33:22:13:90:47:0e:f6:d2:7c:04:57:
         e5:54:ec:68:0b:70:66:bb:f6:09:1d:a7:e8:ee:78:8c:ac:f6:
         d9:87:30:45:62:ec:6d:5d:cb:7a:34:a4:e4:82:33:42:cd:20:
         be:4a:22:82:c0:f2:cc:28:c9:45:1a:18:cc:e7:59:13:28:1b:
         6a:f5:95:3a:9a:45:02:c3:20:15:a7:0a:ed:69:09:2f:64:c6:
         a4:0b:91:0c:d8:44:f7:9d:1d:ef:79:19:ab:7a:0e:58:43:cf:
         1c:4c:4c:9f:c5:b3:09:7a:db:a1:f8:2a:62:d1:3f:ee:e9:20:
         93:c5:cf:9a:fb:f4:0a:51:bf:eb:f2:82:65:27:c1:fe:57:4a:
         7b:ac:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:11 2025 by rpki-client