Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e96499bd-b9b5-3389-97f3-fc0758cb6e2f.roa
File:                     e96499bd-b9b5-3389-97f3-fc0758cb6e2f.roa (raw, json)
Hash identifier:          fw9IHF89g5l+i74reewx5j14Zse+qwgbj4PH9DexTlg=
Subject key identifier:   2F:71:98:8A:F2:A1:3A:8B:2D:29:75:EE:FC:ED:53:F5:19:5D:9C:FC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BCE85E90AA1BAECBB0180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e96499bd-b9b5-3389-97f3-fc0758cb6e2f.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.204.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:ce:85:e9:0a:a1:ba:ec:bb:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=c4eaa993-8b97-4a36-93d5-3a7040f0de57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:39:b0:94:5a:51:07:50:33:33:2a:08:bf:
                    3e:3e:8f:86:35:1c:dd:9c:aa:0c:b3:40:a0:85:91:
                    a4:18:8c:8f:71:7f:eb:21:2f:9d:e7:5a:22:94:fa:
                    70:89:5d:ee:08:47:f7:c4:37:62:24:22:2f:a9:98:
                    d6:89:1d:1c:42:f1:24:e0:ca:b2:0c:dc:21:df:1d:
                    c7:f0:cc:d3:1b:60:b1:ad:62:0b:03:b2:29:6b:7e:
                    db:73:8b:18:46:a3:90:5d:c7:55:54:f2:5c:2b:a5:
                    bc:27:82:2b:33:66:a1:ed:76:31:22:67:2b:dc:e8:
                    64:82:ff:55:f8:a9:cc:94:7d:fe:51:66:ae:73:5e:
                    8d:a3:35:76:08:0e:7a:b6:c4:a0:f7:2a:a4:56:63:
                    1d:02:03:c3:c2:95:31:b0:cf:0e:cb:d5:fa:e2:d4:
                    60:53:8f:bd:55:96:52:22:82:26:82:b8:6a:a1:17:
                    6f:3d:a5:2e:61:40:1f:53:5f:31:71:c9:77:2d:cd:
                    45:66:c4:55:33:9b:c3:42:50:9b:98:52:da:1b:20:
                    c8:03:5a:15:71:52:68:27:c0:c2:61:bd:86:1f:4c:
                    13:7f:46:95:f2:2f:ce:5e:c1:96:e2:ce:07:1c:4c:
                    36:2d:de:f0:83:28:a5:e9:48:9e:9a:0d:12:88:a6:
                    8b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:71:98:8A:F2:A1:3A:8B:2D:29:75:EE:FC:ED:53:F5:19:5D:9C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e96499bd-b9b5-3389-97f3-fc0758cb6e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.204.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:33:2a:b9:0d:bb:1e:db:d3:90:34:43:23:e6:da:3f:8b:ea:
         d0:f5:98:c0:41:ed:62:37:a5:21:a2:bd:70:94:83:c6:5b:9f:
         85:a9:34:5b:27:fb:31:17:e1:8b:42:6a:cd:61:10:17:7c:17:
         bb:2c:09:d3:16:0b:a8:e6:84:db:01:89:36:2e:3d:6a:df:b0:
         f3:ef:43:4c:f4:2d:c6:9f:cf:3e:54:a3:14:33:36:0e:c3:ee:
         02:c5:7c:ae:c6:f1:39:f1:6b:e5:a2:33:55:fb:1b:09:85:9f:
         61:f1:e5:0d:64:6b:b6:6b:b9:af:51:51:79:fe:8d:c5:20:0a:
         46:3b:1c:15:0d:d5:f2:78:7c:4e:ce:db:4d:67:57:75:a7:a6:
         17:5d:51:a9:91:a0:ff:b4:d3:a1:d5:ac:35:11:57:d8:5b:d5:
         6b:0b:64:f2:0f:ac:1d:d9:43:6b:01:86:ac:5f:12:b3:bc:9a:
         fe:07:94:5c:11:6e:3e:d0:b0:57:e3:8d:91:94:2d:f0:94:5b:
         a1:6a:ec:b3:79:61:1b:bd:92:bd:f9:00:78:ae:23:6a:ad:a8:
         5f:48:f4:fa:da:14:6f:c6:bd:98:05:32:c4:c0:6e:54:76:da:
         50:79:a0:2c:26:b0:8f:56:6a:9e:45:c0:41:1a:6f:cf:43:a5:
         9c:de:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:58 2025 by rpki-client