Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9915f73c-2789-3483-88c9-d1c9257fb289.roa
File:                     9915f73c-2789-3483-88c9-d1c9257fb289.roa (raw, json)
Hash identifier:          5n4A3h0cqxsRWmDpurUZW+/B1zx1JEMk4bIDnCd8ZhI=
Subject key identifier:   4C:3E:45:D9:FA:B0:B1:BE:91:44:16:78:CA:15:8B:4E:ED:FE:34:B7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C124072B4C164193D3BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9915f73c-2789-3483-88c9-d1c9257fb289.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        35.188.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:12:40:72:b4:c1:64:19:3d:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=fb126c9d-2e53-4d03-adb5-f22a1cab39d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f7:5f:dd:bd:38:80:86:55:ff:5a:08:85:2c:
                    34:d9:a3:5b:71:8b:71:3f:5d:39:d3:8b:8b:43:82:
                    31:0a:66:9b:df:b9:02:d7:11:8e:e9:ae:2c:d8:29:
                    2a:45:ae:3f:01:50:9c:46:4a:0f:1c:9b:86:34:e2:
                    90:8e:c4:3f:11:15:af:14:be:4f:d5:f6:e4:2f:a0:
                    16:56:a6:b3:76:22:a7:95:a7:4f:99:d6:f8:13:36:
                    c2:4b:4d:fe:f5:4f:56:68:2d:ad:e3:cb:b0:4e:e6:
                    45:33:d6:6a:b7:fc:18:b6:f9:ae:bf:56:10:74:5c:
                    31:a0:6e:58:ec:97:db:c7:ef:83:c4:16:ce:cf:d9:
                    bd:9f:6b:ec:92:3d:8f:0a:ef:a7:90:f9:b7:b8:d4:
                    d7:41:2c:c5:8f:0b:6c:97:27:4b:e2:fc:38:83:ee:
                    2b:8b:70:82:61:b7:7c:20:45:f0:95:3a:dd:55:85:
                    53:a4:f8:87:1c:e0:cc:33:74:50:d8:5b:67:ad:29:
                    68:73:c2:f0:e7:5b:eb:04:f4:ed:3b:da:53:20:4d:
                    ba:a1:fe:e2:22:c4:9e:c9:a1:59:d2:ed:74:ae:5b:
                    72:da:bc:3b:cd:7c:e8:b9:b3:f0:ce:12:2e:e7:5c:
                    4c:59:19:2a:e0:af:40:1d:02:f6:93:df:89:78:d4:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3E:45:D9:FA:B0:B1:BE:91:44:16:78:CA:15:8B:4E:ED:FE:34:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9915f73c-2789-3483-88c9-d1c9257fb289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.188.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c4:77:18:26:44:5e:2e:25:a3:77:a8:91:4e:da:04:9e:9f:
         b3:91:4a:77:6d:8f:cf:b6:76:41:60:47:b3:b4:fc:ab:94:d7:
         b6:c2:66:83:f0:48:20:8e:ff:53:47:40:06:ef:f8:3c:bc:68:
         8d:e4:b1:b5:02:43:ad:85:cc:2e:60:b5:37:d2:43:6c:59:5b:
         32:87:1d:ec:b2:bf:43:90:29:78:8c:ac:e4:8f:60:d1:c5:ec:
         56:26:c8:5a:9c:d4:38:d7:7a:2d:5d:e7:8e:46:a4:23:f3:bb:
         9c:da:5d:e0:3c:9c:9a:58:75:30:cc:6a:9b:16:a2:09:5a:51:
         03:7d:ca:a4:b7:7b:fb:fe:a8:0b:a5:04:a8:77:36:2c:46:d9:
         bd:76:27:f9:35:27:75:9a:18:95:e6:b2:d5:fe:30:ee:ec:ce:
         b1:a5:81:bf:9f:29:d8:b4:54:26:0c:a3:73:b1:05:30:e0:99:
         82:69:79:e0:06:df:eb:4a:46:7e:25:d6:85:cf:b6:07:ee:56:
         c5:0d:63:f7:c4:a9:cb:74:02:e9:e1:f2:5f:f3:4d:4f:48:0a:
         63:76:51:b7:c8:9f:fa:7d:36:99:ee:90:9c:65:aa:1a:c7:4e:
         05:a2:73:88:b5:dd:33:d2:96:95:04:69:5b:94:ab:9a:14:08:
         63:b0:39:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:14:57 2025 by rpki-client