Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db35952e-567d-39ce-a88f-21fabb596fdc.roa
File:                     db35952e-567d-39ce-a88f-21fabb596fdc.roa (raw, json)
Hash identifier:          p36W5KQREg2ZVuKxISuUYv078ORDbUlryKQQUQEWVIQ=
Subject key identifier:   BF:D1:E3:7D:93:35:A2:CB:26:7E:BE:9D:47:1C:74:D2:F3:08:17:EF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BD67D417F11A16D05EEE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db35952e-567d-39ce-a88f-21fabb596fdc.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.201.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:d6:7d:41:7f:11:a1:6d:05:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=5321bbab-8b1f-4528-a507-7661598ecf0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9c:08:e8:c7:2c:c5:88:36:08:a9:6b:92:31:
                    44:e8:f5:bb:71:9d:77:9e:37:c6:c0:ed:6a:e3:c6:
                    23:58:86:07:eb:5a:37:9f:e0:b2:18:67:b9:1a:68:
                    0a:e8:e6:fb:ab:e2:3e:20:ce:8e:cc:f2:8e:82:66:
                    0f:e3:bf:82:f2:dd:37:ba:3a:1a:c5:fb:62:5f:fb:
                    9b:a3:2b:66:f0:17:20:c4:a9:25:2f:e8:45:88:72:
                    3e:c5:ff:74:c8:ac:25:15:ad:52:9d:f5:c0:b9:fd:
                    d8:e1:38:3a:e7:8a:ac:87:c7:f2:e4:70:cd:18:d8:
                    25:99:ba:56:81:80:a1:a0:c0:1d:af:8f:3f:ab:31:
                    53:d3:cc:06:1c:b5:ab:51:1d:92:fe:4e:1b:7c:2b:
                    2b:10:8d:53:5f:28:22:c2:55:d5:ff:0a:a3:d4:fa:
                    a8:c6:90:93:b7:60:27:17:71:f9:b7:71:49:66:df:
                    35:c2:dc:49:0e:0a:10:91:51:78:d6:8a:d2:33:3f:
                    8c:f9:74:1a:42:3d:35:48:24:03:4f:b5:f0:e0:49:
                    2e:96:70:5e:15:83:03:c2:c1:f6:e5:5f:f6:c9:b6:
                    b9:ec:18:04:c5:7a:9f:4d:d6:0e:fd:f8:02:bc:88:
                    64:37:0e:ef:9e:10:f6:e9:d3:89:15:8d:94:fe:32:
                    55:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D1:E3:7D:93:35:A2:CB:26:7E:BE:9D:47:1C:74:D2:F3:08:17:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db35952e-567d-39ce-a88f-21fabb596fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.201.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:4b:ce:b4:79:c1:ee:c2:11:ef:9c:4d:d5:77:80:9b:bf:
         a3:98:94:43:e9:ad:20:61:df:e0:ff:44:b0:c4:fc:d8:13:2d:
         3e:e1:e3:6f:74:46:13:3f:11:e0:c7:97:27:ec:0b:ad:8a:d0:
         b5:a6:82:02:ee:6c:a8:10:62:16:22:2f:46:53:77:53:69:98:
         fc:ae:03:3f:ea:d4:fd:2f:8d:aa:9b:f0:dc:b3:29:8e:49:75:
         05:2f:8f:82:db:e7:47:3c:71:82:4c:11:b5:67:9f:74:b4:96:
         3f:ca:1b:c3:08:8d:82:5b:64:65:57:75:5c:00:fb:58:0f:cf:
         b1:ad:d1:5d:e7:dc:c9:f4:f1:6b:a6:fa:20:70:43:85:c3:8e:
         92:19:62:c9:4c:9d:43:e9:fe:3e:b9:73:eb:f0:e2:f5:b4:bc:
         f6:70:9f:9b:29:3a:b1:27:00:26:23:8f:35:d6:7b:43:53:c0:
         19:b5:6c:69:31:75:29:c0:f6:d6:31:54:8c:c9:d7:55:81:35:
         b8:11:1f:88:6b:ff:65:c7:c4:1c:bb:bf:64:f4:e4:05:7a:33:
         2b:e0:27:7d:91:27:f3:cc:26:ea:03:dc:20:81:2c:d0:60:45:
         94:18:cc:d7:40:99:8c:e9:f3:9a:0c:a3:b4:2a:79:ad:74:24:
         2c:23:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:15 2025 by rpki-client