Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5cf2d84-533f-325b-b505-edd0dab7d371.roa
File:                     a5cf2d84-533f-325b-b505-edd0dab7d371.roa (raw, json)
Hash identifier:          1LdPko4mogPqqvoUMP5LNCN+9KllJdroC1RgNGfEWpQ=
Subject key identifier:   C0:DB:6C:16:7D:32:B4:51:91:29:E5:63:BA:0C:42:52:15:92:B3:A3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C118ADC21EFE75437A080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5cf2d84-533f-325b-b505-edd0dab7d371.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        35.187.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:11:8a:dc:21:ef:e7:54:37:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=5b89662c-abc8-417f-aa27-8b9386136d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:c3:10:9f:b7:1e:08:15:5e:1d:90:b2:22:
                    f0:e7:02:fc:c3:41:40:6d:3b:81:6b:a0:cc:78:d4:
                    36:a5:61:5f:ba:47:82:45:80:50:35:3e:4c:11:49:
                    c3:4b:df:58:5a:ff:99:cc:31:54:62:cf:87:54:12:
                    a3:41:28:ed:63:fb:38:2c:b8:90:76:b1:e3:24:84:
                    c1:85:8e:39:9b:fc:74:a8:84:b3:79:0d:01:98:74:
                    70:09:ed:cb:6a:50:ce:bc:66:b8:47:28:f4:4c:ae:
                    8f:d2:4b:9e:00:ad:bf:5a:8e:44:da:3e:53:0b:49:
                    2f:fe:b4:c5:7b:d9:08:47:c6:6b:b6:ab:17:ba:d5:
                    ff:02:e9:d1:d9:73:d9:6d:8e:57:74:e3:3b:3c:8b:
                    7e:db:5b:ea:ad:4c:24:06:7c:00:ca:f3:b3:78:2f:
                    21:2b:f4:74:27:60:25:45:55:f1:35:f9:37:e2:87:
                    6b:e0:96:ae:06:6e:09:e2:61:c6:f3:69:2a:3b:dd:
                    0c:a4:a9:f2:7a:45:f3:7c:85:47:85:27:18:7f:95:
                    34:ed:f4:68:e6:7c:fb:3b:01:70:f6:9c:fe:89:cf:
                    96:13:7a:e0:2f:4a:10:36:e3:7f:cd:a2:5a:be:08:
                    a2:29:24:0f:83:0c:91:eb:93:c2:79:17:7b:e2:92:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DB:6C:16:7D:32:B4:51:91:29:E5:63:BA:0C:42:52:15:92:B3:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5cf2d84-533f-325b-b505-edd0dab7d371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.187.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0c:cd:70:7d:be:fc:20:7f:7a:5c:0c:30:ba:43:a9:96:fd:
         aa:4c:ce:91:1b:78:47:dc:24:e4:4b:c0:8d:7a:9c:99:65:7f:
         7a:b0:73:08:83:32:38:65:ce:8b:34:61:19:3f:2e:03:26:38:
         84:d0:8c:b9:41:93:b9:8e:6e:b8:ad:a0:2c:57:3e:34:cb:d1:
         6c:23:ec:54:92:ea:c3:10:ea:72:2a:e2:4b:d9:70:29:81:71:
         ef:0f:fe:60:1b:c5:ba:25:a8:70:7f:b0:9e:39:0c:71:3c:26:
         ce:cd:23:ed:85:e5:8f:f9:43:23:00:39:b8:bc:ec:ea:2d:c6:
         e3:7b:82:b4:f1:a2:d0:3a:b2:2a:a9:7e:38:26:f6:a5:67:7c:
         e2:a1:db:c9:bb:67:7c:65:ef:47:67:78:02:1f:97:9c:d1:12:
         ef:e1:0a:30:16:44:f0:1e:bc:eb:2c:0e:a3:7b:13:80:8b:d9:
         91:60:b0:03:8a:c4:32:12:7c:6f:32:0c:1c:b6:f7:7c:dd:e0:
         35:e7:f5:d5:32:2d:24:e2:51:c9:51:78:26:46:bd:83:6f:1c:
         37:df:97:cf:33:a7:6b:55:e2:1b:e0:98:8e:45:0d:2d:1f:5e:
         b3:a3:59:78:d6:c2:fa:a4:58:8f:a6:a2:4a:d0:a1:d7:e0:51:
         56:7d:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:03:46 2025 by rpki-client