Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/5aed4a27-a83b-3383-9a26-1b6aa5e372cb.roa
File:                     5aed4a27-a83b-3383-9a26-1b6aa5e372cb.roa (raw, json)
Hash identifier:          3a8GQT+kDRq2IbiE/4mo5VBhvzdofzZnRYQCti+imUk=
Subject key identifier:   D1:62:CA:07:7A:53:4A:72:D2:FB:CB:87:E7:BB:54:B7:18:A4:6D:AA
Certificate issuer:       /CN=2ac961ff-f406-4f80-b06d-e1284358815a
Certificate serial:       010D0C9F4328584AAF5614B98C7C8C8ADDA7D8C0
Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/5aed4a27-a83b-3383-9a26-1b6aa5e372cb.roa
Signing time:             Wed 30 Jul 2025 01:00:32 +0000
ROA not before:           Wed 30 Jul 2025 01:00:32 +0000
ROA not after:            Tue 28 Oct 2025 01:00:32 +0000
asID:                     11096
IP address blocks:        35.128.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:56:14:b9:8c:7c:8c:8a:dd:a7:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a
        Validity
            Not Before: Jul 30 01:00:32 2025 GMT
            Not After : Oct 28 01:00:32 2025 GMT
        Subject: CN=56ef3e21-49eb-44fd-8fab-2b0ad3eccbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:76:dd:fc:8d:5a:47:9b:8d:02:ae:83:ad:
                    6c:e6:32:76:ee:8a:3d:53:75:cd:c3:a8:ec:1e:35:
                    a0:68:63:58:c0:6d:6f:cb:3a:dc:cf:75:e4:64:2d:
                    3c:9a:c9:54:45:0d:6b:c9:cc:13:76:06:f3:a6:ef:
                    fd:ae:6e:55:7c:16:f9:71:13:58:e7:97:f7:70:e6:
                    7d:36:1c:bb:2c:e3:de:42:4d:b5:86:e2:c7:23:3a:
                    23:9e:83:eb:b6:16:66:60:01:c5:bf:44:28:25:78:
                    1a:0c:b7:90:0c:04:51:08:c9:c8:85:e6:d6:79:86:
                    a9:a2:b1:c3:3d:58:ad:72:9e:73:37:83:5f:5c:89:
                    35:85:5b:8e:2b:5a:48:f7:82:0a:9a:43:fa:3b:3e:
                    d1:6b:fe:bb:03:74:f2:eb:ef:84:ce:df:d6:8a:60:
                    86:b2:83:cc:3c:09:4a:0d:06:bb:86:e1:b0:85:b2:
                    23:51:c5:26:b6:cc:9c:aa:b5:70:20:6e:ea:d2:4c:
                    e6:74:f6:e9:5e:21:2a:6c:9d:0a:08:d5:5c:36:cb:
                    68:b7:66:2a:3c:80:43:3f:1a:1f:b1:10:85:3f:0f:
                    dd:14:d4:78:03:b6:a8:42:59:14:58:bf:22:2a:f3:
                    f8:67:74:3f:b6:85:90:2a:82:4e:4f:02:81:49:e7:
                    89:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:62:CA:07:7A:53:4A:72:D2:FB:CB:87:E7:BB:54:B7:18:A4:6D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/5aed4a27-a83b-3383-9a26-1b6aa5e372cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.128.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:57:77:7f:7a:6d:5e:44:5d:33:ad:73:25:0f:66:e9:5b:64:
         da:20:b4:8b:6f:7d:25:96:1a:92:4d:28:40:74:f6:61:df:ab:
         a5:e4:85:08:aa:4a:3a:ed:d3:3c:59:d3:29:2c:c0:16:fa:2f:
         4a:f8:9a:2f:45:7d:fa:fe:bc:1a:f3:4b:b7:4d:e1:39:a1:37:
         22:4f:ca:ed:53:32:39:c4:84:d6:3d:c0:b7:0d:7e:a5:0d:6d:
         87:39:a1:db:7b:0b:2c:79:29:a8:c9:7b:b1:11:73:c8:93:99:
         aa:5e:11:db:1d:ba:ae:f3:c9:cc:01:58:3a:7b:40:8e:cd:de:
         e0:c2:db:c6:9c:7a:09:c6:65:18:9c:ee:7b:b5:a0:41:4a:82:
         ce:10:6b:d1:89:76:71:c7:79:ad:13:b5:c7:bc:70:9b:05:1d:
         ed:88:83:e9:8d:ea:c6:d8:ad:08:96:51:3d:dd:0f:04:aa:aa:
         0c:e3:86:37:3c:40:fc:c9:67:2d:4b:0e:4e:89:de:05:9e:b7:
         2e:b7:60:c0:4e:65:68:fc:c3:c4:ce:b6:f8:d0:26:e1:5b:70:
         b3:c7:fb:f2:b8:17:3c:4e:37:de:1d:e2:2a:0a:93:5c:65:96:
         9e:0e:9b:c8:61:69:85:14:9a:c7:94:a3:6c:9b:c5:00:cf:16:
         12:20:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 05:15:19 2025 by rpki-client