Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd1da0e7-c104-31de-9278-54b4327a6491.roa
File:                     fd1da0e7-c104-31de-9278-54b4327a6491.roa (raw, json)
Hash identifier:          X+qQV1WRzKeijowSskANOzV7ABUhDKAQ8LtQCatQ6dE=
Subject key identifier:   4B:0A:13:ED:F3:A0:34:CF:9E:13:50:B2:61:59:FD:EE:1D:A0:AA:DC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BF720AB9D805871EDF800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd1da0e7-c104-31de-9278-54b4327a6491.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.242.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:f7:20:ab:9d:80:58:71:ed:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=cb1be639-db56-407b-bd9c-9396ddc5d2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b3:a9:13:19:02:84:cf:31:8a:13:6c:ef:60:
                    fa:e8:fc:cc:be:77:36:e7:db:97:4e:84:fb:2c:82:
                    af:72:ca:1a:c2:10:65:e8:de:ac:1d:f5:71:22:1e:
                    0f:ae:b9:47:22:7b:e1:dd:88:ba:4c:fa:8e:5d:56:
                    cc:3e:9f:3e:c6:96:74:d3:47:e4:d0:fc:bd:89:1f:
                    df:70:6a:74:16:a7:17:dc:a8:fa:33:d3:f0:76:d9:
                    61:43:38:90:77:f6:94:94:03:3b:cd:c9:8a:22:10:
                    76:e0:f2:b9:45:1d:bf:84:d6:ac:98:4d:7c:41:07:
                    fc:92:dc:26:e1:23:cf:8a:25:10:30:58:5c:7e:84:
                    54:4a:45:5f:62:1c:81:fb:fc:54:81:ec:aa:a6:63:
                    ce:3d:0d:96:1e:d9:08:87:ec:f2:c4:f1:2d:b5:fb:
                    d9:c9:02:b0:9b:0e:84:47:97:15:ea:85:d8:e0:31:
                    4e:5c:f5:6c:7c:e2:83:0e:d1:33:9b:c4:2f:5d:ef:
                    80:40:63:c8:69:ca:d2:d8:3d:79:c7:5c:37:a1:f8:
                    d7:52:d8:aa:e8:69:47:50:53:7b:af:e9:ac:ee:5c:
                    f2:00:ef:d0:ed:02:54:9f:ac:ab:91:fc:16:35:c1:
                    c2:b5:b3:9f:3a:2a:c0:e6:ca:ce:aa:0d:ed:ae:5d:
                    de:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0A:13:ED:F3:A0:34:CF:9E:13:50:B2:61:59:FD:EE:1D:A0:AA:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd1da0e7-c104-31de-9278-54b4327a6491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.242.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ff:b6:bb:eb:6a:56:d1:50:dd:f1:5b:87:48:ae:bc:a5:43:
         62:c3:2a:d0:22:71:58:33:ca:62:d4:e5:97:a0:e8:1c:e4:14:
         03:1e:8c:ea:b5:76:97:2c:b2:df:ba:54:60:66:76:7a:54:aa:
         19:ff:49:6c:16:a3:4a:5a:0e:b7:75:50:a0:55:6e:d1:1c:1b:
         6c:cb:3a:cb:dd:1b:f9:3e:eb:a5:6f:61:2a:a5:12:6a:06:d7:
         86:35:28:11:a8:b4:77:bb:d2:72:a8:8d:05:dd:8f:61:b1:0f:
         a5:39:21:3c:04:31:8a:4e:ab:42:47:85:4d:b8:7b:6b:c9:00:
         b8:05:31:4c:95:20:cd:be:1f:2f:ec:ab:78:1f:8d:e7:aa:32:
         59:33:3f:fe:9e:17:e0:17:85:8e:9b:5a:26:f2:56:e1:c3:30:
         89:70:f6:51:74:0a:05:d6:49:8f:56:e3:45:66:64:d3:09:7a:
         18:12:35:f0:79:e8:af:9e:ea:13:3d:de:e8:41:8b:8f:41:39:
         f5:9f:60:69:34:b9:96:ee:fc:23:76:d2:c6:11:67:ee:6b:46:
         63:4f:c7:11:05:cb:37:96:0b:71:33:d7:5c:d5:1f:8a:49:56:
         f8:63:5c:7a:a9:ce:9c:d5:d8:c5:da:aa:38:af:e7:0f:12:e8:
         df:e1:b4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:45:51 2025 by rpki-client