Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad15311d-c39d-317e-ac0d-df159490b2c8.roa
File:                     ad15311d-c39d-317e-ac0d-df159490b2c8.roa (raw, json)
Hash identifier:          Y5BwfBdjG65TCMX58vrwz9Fu4H/2+qfjiCIqfdNkPXk=
Subject key identifier:   C6:61:B5:40:C0:39:51:40:C8:AF:1D:7D:2E:91:D6:CA:5E:E2:61:A4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BB270018D201F9D53C040
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad15311d-c39d-317e-ac0d-df159490b2c8.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.195.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:b2:70:01:8d:20:1f:9d:53:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=08f0854f-1ab0-4f4a-9ce7-ceed9cd5b07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:96:70:18:4f:31:d4:ec:89:21:d6:9e:ed:30:
                    56:e2:ed:5a:fe:e3:5c:8d:88:e5:77:b8:d4:69:90:
                    db:bc:33:23:6d:fc:3c:26:7c:a8:ab:3c:81:80:60:
                    d8:3e:e5:39:b0:dc:a0:7a:f8:d7:b8:13:b4:1b:b8:
                    ab:0c:45:34:f9:42:21:77:0b:45:c8:65:0e:be:a6:
                    9e:44:87:c6:47:39:d8:87:6a:a5:d6:7a:e2:92:31:
                    3e:06:5d:bb:ea:c3:06:ec:44:2a:cf:ef:aa:5c:66:
                    75:21:fa:14:48:67:82:cf:0d:9a:69:52:7d:ee:f7:
                    b7:be:08:a6:9e:a6:40:04:a7:ce:83:56:26:c5:fd:
                    ff:43:e4:23:4b:c9:e0:36:88:72:6f:f9:09:da:25:
                    a1:8d:0c:84:c8:85:a0:4b:0e:45:5e:3b:c9:97:4e:
                    75:77:ad:d7:7f:95:7b:eb:bc:5a:69:b7:8d:d8:3a:
                    e4:00:01:9d:cc:a9:f6:bd:71:10:0f:6b:b6:cb:89:
                    26:83:07:15:1a:bf:44:00:d4:52:0d:ff:c6:0b:87:
                    00:d1:d1:b6:1c:c7:34:66:f1:13:8c:a9:15:5c:36:
                    e5:31:c2:87:57:1a:56:02:ea:4a:a8:70:f1:cb:9c:
                    64:07:e7:c5:ae:49:d9:66:1a:ed:95:f4:f9:5e:2d:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:61:B5:40:C0:39:51:40:C8:AF:1D:7D:2E:91:D6:CA:5E:E2:61:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad15311d-c39d-317e-ac0d-df159490b2c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.195.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:bc:5a:58:d9:2a:08:c9:2e:5a:e3:4a:f8:9f:a4:93:72:16:
         44:08:d7:60:de:45:18:25:f7:94:9d:bb:7c:69:d2:64:59:f5:
         d8:45:fc:63:d4:23:3b:21:47:9c:31:f7:9e:1b:04:5a:7e:e8:
         1e:55:53:2f:f0:ee:74:84:47:7f:a2:1b:7e:8c:69:74:af:63:
         e4:9e:6f:1d:e4:2e:0e:b0:51:11:b6:10:e7:e6:c1:c4:44:70:
         fd:66:8f:9c:cb:01:7f:75:fb:1a:da:e9:b5:dc:7e:19:fa:c8:
         e6:d0:ef:ac:e8:9d:18:dd:cc:f5:12:16:4a:35:41:ee:60:e5:
         5c:e7:3c:71:c8:39:07:16:2e:b3:dd:97:ef:af:c3:e2:60:01:
         eb:34:a1:27:67:21:b4:fb:2d:77:c4:e2:d9:37:97:5a:58:11:
         ce:b3:01:64:6b:05:33:19:dd:2d:95:45:1c:6c:87:64:27:b6:
         7f:12:ee:56:65:38:e6:06:64:00:5f:4e:16:c3:19:9d:0e:7a:
         3e:6a:d9:e5:42:73:af:34:24:8c:71:2f:af:a1:ea:f0:01:43:
         cd:0a:70:cc:d8:4d:06:ef:be:c0:cd:e1:05:a0:4a:e6:34:0d:
         fa:df:1d:a3:fc:a0:b1:b2:10:73:13:44:79:2a:29:a9:1b:6d:
         46:31:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:13 2025 by rpki-client