Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
File:                     bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa (raw, json)
Hash identifier:          WlIWO0jxfxPrZF/94AbR76lc5TW8/BfJJGvB1T0laQ4=
Subject key identifier:   6D:E5:47:28:FD:E8:8E:30:BD:70:66:EC:84:72:AC:CE:6D:B9:6C:99
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584A5335A870AF33DB8986C4D600
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     237
IP address blocks:        35.38.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a8:70:af:33:db:89:86:c4:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=9cfa320b-60f8-41c5-803c-d827c88efbe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:af:3a:4a:bc:b0:11:c5:16:e0:f9:07:69:7e:
                    11:08:af:94:a5:4f:9b:79:9b:2a:d7:4e:ff:e3:7a:
                    ba:08:15:5a:98:00:0a:54:82:df:ce:16:a3:05:eb:
                    f1:a6:fc:a9:32:03:e0:32:92:52:0e:8d:b2:49:a0:
                    76:04:17:40:2c:d9:e0:15:93:a4:9b:e6:20:58:26:
                    de:13:ca:a4:5c:bf:26:f9:34:6f:1e:dd:ab:56:63:
                    0e:a8:41:87:cc:3a:d6:6a:74:f5:e2:17:eb:b1:a2:
                    4d:87:b6:b0:1c:a3:48:b1:70:f7:39:38:26:b8:1e:
                    9e:88:a1:5f:52:39:0e:ed:6c:99:48:58:d8:93:49:
                    ba:50:a6:92:b7:b8:fe:6d:c5:b9:4d:d6:d6:48:b6:
                    a2:cd:79:87:aa:32:07:56:12:92:d2:95:2c:9f:3b:
                    fc:87:4f:db:2d:34:ae:ba:3d:d8:cf:7a:e8:11:a0:
                    cd:1d:ec:15:aa:a3:83:83:63:f9:21:da:42:84:64:
                    49:3a:44:8d:42:e6:4d:36:59:3d:e9:e9:0a:7c:f8:
                    d3:f1:1a:23:60:9a:8c:99:68:be:d1:56:3c:04:34:
                    2e:6e:ae:70:b5:c4:2e:82:82:e9:5b:a9:9b:cf:c7:
                    99:5d:61:b9:a5:f6:b2:52:20:b2:b8:9e:f5:60:2e:
                    a7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E5:47:28:FD:E8:8E:30:BD:70:66:EC:84:72:AC:CE:6D:B9:6C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.38.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:3a:11:6d:d1:37:93:76:6f:e8:77:1b:5f:33:b0:9f:27:6d:
         a6:80:6f:03:c5:ad:f3:ec:73:18:4f:2e:ed:f1:84:e2:55:d6:
         d5:00:ec:e5:bd:14:c9:f1:83:af:ac:0e:49:a6:0c:82:d1:d3:
         42:36:5d:da:6c:ab:55:50:f4:27:49:1d:0f:7d:12:1d:d8:24:
         bd:0b:1c:f9:36:74:c7:77:fd:be:62:35:dd:a2:01:02:3a:5b:
         de:54:50:5b:2c:47:f1:65:40:1d:de:a8:8f:d8:f6:4d:e4:2b:
         b9:d7:40:64:de:99:2d:56:a6:99:db:dc:a2:22:05:9e:ef:36:
         df:91:32:0c:90:9b:4a:92:ec:c6:24:29:6b:94:43:63:41:73:
         4c:b0:d0:e6:3b:96:fe:c4:7e:29:1e:10:9c:9c:fd:1a:52:f4:
         e7:16:f0:88:18:b0:b6:0c:35:b4:ee:31:08:1d:15:dc:e2:ad:
         f2:ab:df:bf:4d:2f:a7:eb:bf:a3:10:42:af:bb:0a:b8:ee:e4:
         5a:33:51:31:39:2e:39:f9:7c:eb:95:2f:53:a2:74:35:7e:30:
         00:5f:fc:f7:7d:5d:9f:b9:81:53:50:23:8b:fa:0b:a8:88:a4:
         85:01:42:5f:b5:a9:71:c8:a6:52:49:a7:d2:0e:1c:64:7b:ba:
         58:7b:2b:0a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEpTNahwrzPbiYbE1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk
ZWZlMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk
OWNmYTMyMGItNjBmOC00MWM1LTgwM2MtZDgyN2M4OGVmYmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha86SrywEcUW4PkHaX4RCK+UpU+beZsq107/
43q6CBVamAAKVILfzhajBevxpvypMgPgMpJSDo2ySaB2BBdALNngFZOkm+YgWCbe
E8qkXL8m+TRvHt2rVmMOqEGHzDrWanT14hfrsaJNh7awHKNIsXD3OTgmuB6eiKFf
UjkO7WyZSFjYk0m6UKaSt7j+bcW5TdbWSLaizXmHqjIHVhKS0pUsnzv8h0/bLTSu
uj3Yz3roEaDNHewVqqODg2P5IdpChGRJOkSNQuZNNlk96ekKfPjT8RojYJqMmWi+
0VY8BDQubq5wtcQugoLpW6mbz8eZXWG5pfayUiCyuJ71YC6nxwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG3lRyj96I4wvXBm7IRyrM5tuWyZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz
MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvYmQ2MjJjOGMtOThjNC0z
MzE5LWE2OTAtZDUyYTI3YmMyZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz
MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4
ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm
ODc1OGRlZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIyYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsToRbdE3k3Zv6HcbXzOwnydtpoBvA8Wt8+xzGE8u7fGE4lXW1QDs5b0U
yfGDr6wOSaYMgtHTQjZd2myrVVD0J0kdD30SHdgkvQsc+TZ0x3f9vmI13aIBAjpb
3lRQWyxH8WVAHd6oj9j2TeQruddAZN6ZLVammdvcoiIFnu8235EyDJCbSpLsxiQp
a5RDY0FzTLDQ5juW/sR+KR4QnJz9GlL05xbwiBiwtgw1tO4xCB0V3OKt8qvfv00v
p+u/oxBCr7sKuO7kWjNRMTkuOfl865UvU6J0NX4wAF/8931dn7mBU1Aji/oLqIik
hQFCX7WpccimUkmn0g4cZHu6WHsrCg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 06:32:13 2025 by rpki-client