Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2b4ede0e-78db-329b-bb3a-cae48bab600d.roa
File:                     2b4ede0e-78db-329b-bb3a-cae48bab600d.roa (raw, json)
Hash identifier:          TjU1PxmxnpE0rFUm38WvlNLbCcoTeiZ9SEVR7lPDfXc=
Subject key identifier:   5B:B0:AD:D2:9C:5D:2A:2F:04:69:24:96:F7:13:A4:F5:FF:19:57:47
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AF71685E1204CD34AFC00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2b4ede0e-78db-329b-bb3a-cae48bab600d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        35.129.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:f7:16:85:e1:20:4c:d3:4a:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=c3f2af78-ea74-436f-848d-ddf88bbea692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:2d:bb:0d:7c:40:cd:7f:b4:8e:10:07:1e:
                    64:28:bf:b9:10:a6:a1:6d:a1:64:4d:db:85:7e:41:
                    e7:ca:cc:63:c5:a7:f5:8b:d1:b4:63:c4:3e:4b:bc:
                    eb:c1:5d:cf:67:4e:0c:e6:7f:41:4d:e9:fa:8b:c7:
                    87:1e:e7:07:f4:20:7e:3a:bc:cd:cf:09:ba:49:6e:
                    f7:00:ce:b2:25:1c:ff:8e:0a:b8:f0:a3:0e:8b:b6:
                    d6:e8:70:b5:7e:fd:df:0c:3a:99:2a:78:55:d3:4b:
                    69:3b:54:ed:ba:f9:60:96:0b:e1:7b:27:0e:03:32:
                    e9:e4:ef:a7:b3:40:b0:84:15:54:a1:16:1f:3d:e1:
                    17:27:c4:81:e3:65:dc:68:15:94:d2:98:fa:ac:db:
                    cb:42:ab:90:aa:29:5e:3a:21:93:a2:8a:d2:9a:02:
                    c0:72:0c:64:f4:d0:1b:30:a9:3c:13:15:f9:b6:07:
                    b6:f4:20:1c:88:f0:e3:99:41:5e:0f:cf:07:f0:d4:
                    fc:99:93:f1:97:6e:ca:c8:1a:7a:0e:01:a7:9b:85:
                    59:2f:be:aa:2a:e2:c9:10:6a:1b:0f:19:17:98:16:
                    3a:b4:ed:0c:61:9a:07:a0:4b:95:96:e0:63:20:84:
                    a2:32:a2:68:c8:c8:d8:13:da:88:2b:da:bf:44:ee:
                    04:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B0:AD:D2:9C:5D:2A:2F:04:69:24:96:F7:13:A4:F5:FF:19:57:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2b4ede0e-78db-329b-bb3a-cae48bab600d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.129.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9b:5e:0a:df:2c:b9:63:4c:69:c5:62:ab:d0:70:82:87:f7:
         9e:5b:35:fa:a3:e9:dd:f1:bf:a3:6b:b3:99:3f:54:60:fe:15:
         44:ae:55:39:38:e1:a2:d8:8d:d5:44:ba:53:52:f4:36:71:75:
         14:63:af:91:98:2f:52:3f:9d:05:e5:e2:24:e2:3f:ee:76:27:
         46:48:85:e6:51:cf:57:30:29:7c:b3:fa:aa:a8:47:88:1c:f9:
         57:cd:0c:29:4e:59:0f:79:51:5e:10:c9:d9:65:ec:e4:99:dc:
         49:10:55:15:b7:cf:af:1e:d8:d2:e2:4b:41:f5:1a:91:67:94:
         55:f7:b9:91:80:19:42:b9:4e:0b:88:1d:83:1b:3e:d0:02:e6:
         ae:dc:bd:ce:a1:af:2f:6a:86:ef:24:71:ce:f1:a6:55:35:b3:
         cd:15:33:99:3f:8e:24:83:db:ac:ef:e8:2b:69:d5:72:ae:44:
         45:da:e6:29:d6:23:ee:4f:87:56:60:62:fe:e6:bb:58:d2:46:
         32:35:07:a1:ae:83:81:f6:84:c4:5f:e5:5c:fb:e0:25:2b:0b:
         f6:20:97:f1:b3:05:61:7d:cc:7b:bf:aa:e8:b5:4f:2d:e9:fc:
         09:ca:5f:94:05:c8:84:22:c6:b1:6a:ef:0c:fe:85:b3:1b:77:
         0e:d2:f4:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCvcWheEgTNNK/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YzNmMmFmNzgtZWE3NC00MzZmLTg0OGQtZGRmODhiYmVhNjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Mtuw18QM1/tI4QBx5kKL+5EKahbaFkTduF
fkHnysxjxaf1i9G0Y8Q+S7zrwV3PZ04M5n9BTen6i8eHHucH9CB+OrzNzwm6SW73
AM6yJRz/jgq48KMOi7bW6HC1fv3fDDqZKnhV00tpO1TtuvlglgvheycOAzLp5O+n
s0CwhBVUoRYfPeEXJ8SB42XcaBWU0pj6rNvLQquQqileOiGToorSmgLAcgxk9NAb
MKk8ExX5tge29CAciPDjmUFeD88H8NT8mZPxl27KyBp6DgGnm4VZL76qKuLJEGob
DxkXmBY6tO0MYZoHoEuVluBjIISiMqJoyMjYE9qIK9q/RO4EHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFuwrdKcXSovBGkklvcTpPX/GVdHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmI0ZWRlMGUtNzhkYi0z
MjliLWJiM2EtY2FlNDhiYWI2MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI4FgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFubXgrfLLljTGnFYqvQcIKH955bNfqj6d3xv6Nrs5k/VGD+FUSuVTk4
4aLYjdVEulNS9DZxdRRjr5GYL1I/nQXl4iTiP+52J0ZIheZRz1cwKXyz+qqoR4gc
+VfNDClOWQ95UV4Qydll7OSZ3EkQVRW3z68e2NLiS0H1GpFnlFX3uZGAGUK5TguI
HYMbPtAC5q7cvc6hry9qhu8kcc7xplU1s80VM5k/jiSD26zv6Ctp1XKuREXa5inW
I+5Ph1ZgYv7mu1jSRjI1B6Gug4H2hMRf5Vz74CUrC/Ygl/GzBWF9zHu/qui1Ty3p
/AnKX5QFyIQixrFq7wz+hbMbdw7S9Cs=
-----END CERTIFICATE-----
Generated at Fri May 9 17:32:16 2025 by rpki-client