Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8501dac9-dfba-3137-876d-f1b2b70dd762.roa
File:                     8501dac9-dfba-3137-876d-f1b2b70dd762.roa (raw, json)
Hash identifier:          eOt8wh2dh4rRMgfv0DIWmh4/7AwfAF9u3bbO2q0/zvY=
Subject key identifier:   CD:0F:68:E4:9E:8F:DC:9E:B9:4E:0F:AD:A9:20:4A:16:92:9B:68:63
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BC7464490D6CB3EF8B0C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8501dac9-dfba-3137-876d-f1b2b70dd762.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        35.206.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:c7:46:44:90:d6:cb:3e:f8:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=0a2e84ef-e260-4a3f-ac4c-c2c754b4b2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:85:50:73:b6:ee:ff:bd:c1:3d:2f:89:52:
                    68:9e:72:7d:78:39:52:bc:46:03:f2:ba:2c:ff:eb:
                    0f:57:f2:10:a6:75:08:77:54:e6:14:10:3a:aa:b7:
                    a8:88:07:cf:d8:cb:df:c5:b1:2e:2c:96:d3:1b:af:
                    53:c7:a2:83:5b:f4:f2:18:4f:19:e0:b5:e6:29:10:
                    66:83:b2:a8:7a:fc:ce:72:c0:46:bb:20:a5:0f:95:
                    b3:74:c6:23:1a:50:21:63:0c:56:74:d8:13:46:56:
                    be:95:42:e6:19:f3:b8:48:09:48:7c:92:2d:09:57:
                    82:8a:78:be:b0:45:ba:05:49:ab:39:49:ad:e2:e4:
                    46:ff:43:99:1c:23:1d:50:4d:e1:eb:a6:9e:99:c0:
                    a8:53:c2:fd:8c:fd:db:eb:e9:21:84:68:18:fd:f7:
                    7d:e0:8b:22:3a:41:cc:65:b7:5e:92:9e:e9:62:4f:
                    49:21:8b:94:f5:2c:b4:48:ef:d6:72:d7:e9:54:7e:
                    17:8f:c0:74:44:5c:aa:c6:4a:c9:c3:3a:fb:b9:ef:
                    57:e3:f3:c5:26:53:fa:a1:2d:bf:28:38:8e:2d:5a:
                    df:86:f0:4c:99:61:c6:ff:4e:c9:8a:5f:60:76:04:
                    2d:b0:7b:3d:c3:14:a3:65:34:2b:c4:c6:b1:cc:19:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0F:68:E4:9E:8F:DC:9E:B9:4E:0F:AD:A9:20:4A:16:92:9B:68:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8501dac9-dfba-3137-876d-f1b2b70dd762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.206.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c2:77:09:49:a6:38:bf:21:7e:e3:6c:20:a4:dc:5b:bc:61:
         f4:ab:9b:c8:e1:22:1f:98:36:2b:22:47:b9:7a:7b:df:78:81:
         21:09:c1:43:04:7d:26:00:c8:ed:9c:69:53:fc:d9:f5:ea:40:
         cf:e6:c6:39:b1:37:3f:d9:62:7f:d3:de:95:07:b6:d7:f4:39:
         b2:da:a7:cb:43:a1:9a:a7:6b:e7:a4:90:7c:bb:01:58:e0:11:
         6e:e0:40:27:c8:95:66:36:69:8f:97:9e:9b:e5:15:2d:02:4d:
         ae:55:0c:3c:37:2a:4d:25:62:a3:8b:67:7c:e0:69:e9:df:cb:
         f9:5f:db:79:82:32:2f:14:a5:82:a9:df:ab:1e:64:3d:5b:8e:
         66:bd:4a:cd:96:57:83:8d:e2:b9:b4:08:65:2f:08:ae:ab:b4:
         d7:17:37:b7:75:a8:dc:ed:24:95:21:a7:82:7d:22:0f:4b:a7:
         8c:f5:ef:32:f0:a7:05:25:13:82:82:bb:44:12:ec:d0:8f:ac:
         c8:4e:e8:b3:b5:af:a5:9b:a3:a0:91:ae:2c:e8:4d:8e:9e:36:
         db:40:6c:ca:00:ef:ca:c2:1c:8c:ba:bf:56:f7:b2:c2:ee:41:
         a3:07:25:87:a5:e5:54:c6:2f:4c:1e:a9:70:19:b8:9e:91:d2:
         87:e4:af:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:01:49 2025 by rpki-client