Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/385d47b1-0370-3054-b644-469ef922a638.roa
File:                     385d47b1-0370-3054-b644-469ef922a638.roa (raw, json)
Hash identifier:          kd7oNa0Jj+u+3/wViLiTuGph2Qe60nJbWGBX/lXFk5Y=
Subject key identifier:   80:B6:E2:99:FF:B6:FC:E9:54:44:33:12:4D:DE:CC:82:9E:C9:F2:A3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AB6703172A355627A6400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/385d47b1-0370-3054-b644-469ef922a638.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     400676
IP address blocks:        35.131.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:b6:70:31:72:a3:55:62:7a:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=6a0a469e-efaf-4866-98bf-7e735dfd6c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:ce:26:8f:01:67:75:d3:64:38:b0:4c:8f:
                    6f:80:b0:21:9a:e1:2f:f3:69:a4:06:2a:03:47:e2:
                    52:eb:04:e2:0a:80:74:de:2f:c9:2e:7f:8c:34:93:
                    6f:23:30:e5:2c:b3:3a:92:1d:82:96:27:86:72:d6:
                    a2:25:da:04:67:73:72:8a:5b:e9:d2:07:af:3e:bf:
                    d3:d3:24:6e:06:8c:3c:45:b5:77:6b:ff:88:1d:07:
                    09:14:ee:f7:6e:e4:b4:39:97:6a:bf:fb:24:11:d8:
                    09:7d:f0:b3:37:39:a6:62:3c:e3:ba:f6:59:3a:07:
                    3f:8b:ba:fa:09:b8:76:65:5e:a4:c1:10:a9:71:28:
                    ad:7d:05:8f:66:11:91:15:80:07:36:e2:1e:53:55:
                    4b:d0:5c:93:29:ae:ab:34:2a:53:f7:5d:fb:88:3a:
                    85:e6:c8:59:65:6d:71:60:56:29:6c:e0:60:9d:17:
                    c0:64:75:55:e6:cc:26:5b:ee:08:75:f6:be:8f:2a:
                    01:af:9d:a2:97:98:df:c4:41:cf:1f:56:f5:b6:77:
                    e5:ab:47:95:35:68:86:97:93:58:33:5f:a1:d1:32:
                    40:a6:5c:b1:95:45:ef:cf:e1:30:2f:6d:bd:a7:93:
                    1f:f0:57:95:0c:6e:56:3c:8a:13:6d:38:17:30:a1:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B6:E2:99:FF:B6:FC:E9:54:44:33:12:4D:DE:CC:82:9E:C9:F2:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/385d47b1-0370-3054-b644-469ef922a638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.131.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:cd:3c:b9:4b:fd:54:74:90:ef:14:b3:48:c6:40:42:d4:41:
         02:1c:e4:a5:b0:78:30:ba:c9:9d:92:c0:f2:46:bc:ed:83:1d:
         4c:67:67:4a:d8:ad:3b:58:08:5f:9d:e4:8c:37:c8:5c:94:a7:
         6e:6e:69:e7:5c:30:28:37:51:e4:57:86:f4:d2:72:dd:7f:f4:
         d6:ca:47:d0:fb:11:a8:46:d4:6a:6b:c9:39:bd:61:69:2c:6b:
         49:fe:29:d5:52:55:85:ac:4c:cc:40:5b:f6:90:b2:fc:6c:34:
         6a:93:8e:72:de:f4:fb:15:5e:c9:fe:32:9e:2b:17:0d:e8:6f:
         f9:d3:4b:67:9c:74:71:e7:0d:ad:b6:97:40:fc:93:1f:43:3b:
         95:bb:fc:df:70:1b:9b:7d:80:05:23:80:de:5b:29:8d:5d:6d:
         12:bd:22:89:dd:a0:d2:b8:35:c7:38:8f:08:b1:74:0f:7f:50:
         aa:3f:37:25:49:2a:52:a7:50:67:bc:90:c5:32:cc:71:05:42:
         b6:74:12:37:b9:9e:d4:26:9e:26:0b:f8:4b:4f:15:49:49:b1:
         33:51:d2:b5:0c:42:bb:00:06:70:5b:79:69:5a:7c:d1:d7:c3:
         43:24:cd:74:7a:ca:e1:f6:c0:3c:7e:23:73:ad:e7:05:3b:d3:
         af:51:c1:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCrZwMXKjVWJ6ZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
NmEwYTQ2OWUtZWZhZi00ODY2LTk4YmYtN2U3MzVkZmQ2YzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8rOJo8BZ3XTZDiwTI9vgLAhmuEv82mkBioD
R+JS6wTiCoB03i/JLn+MNJNvIzDlLLM6kh2ClieGctaiJdoEZ3Nyilvp0gevPr/T
0yRuBow8RbV3a/+IHQcJFO73buS0OZdqv/skEdgJffCzNzmmYjzjuvZZOgc/i7r6
Cbh2ZV6kwRCpcSitfQWPZhGRFYAHNuIeU1VL0FyTKa6rNCpT9137iDqF5shZZW1x
YFYpbOBgnRfAZHVV5swmW+4Idfa+jyoBr52il5jfxEHPH1b1tnflq0eVNWiGl5NY
M1+h0TJAplyxlUXvz+EwL229p5Mf8FeVDG5WPIoTbTgXMKEDcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIC24pn/tvzpVEQzEk3ezIKeyfKjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzg1ZDQ3YjEtMDM3MC0z
MDU0LWI2NDQtNDY5ZWY5MjJhNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4OYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjNPLlL/VR0kO8Us0jGQELUQQIc5KWweDC6yZ2SwPJGvO2DHUxnZ0rY
rTtYCF+d5Iw3yFyUp25uaedcMCg3UeRXhvTSct1/9NbKR9D7EahG1GpryTm9YWks
a0n+KdVSVYWsTMxAW/aQsvxsNGqTjnLe9PsVXsn+Mp4rFw3ob/nTS2ecdHHnDa22
l0D8kx9DO5W7/N9wG5t9gAUjgN5bKY1dbRK9IondoNK4Ncc4jwixdA9/UKo/NyVJ
KlKnUGe8kMUyzHEFQrZ0Eje5ntQmniYL+EtPFUlJsTNR0rUMQrsABnBbeWlafNHX
w0MkzXR6yuH2wDx+I3Ot5wU7069Rwds=
-----END CERTIFICATE-----
Generated at Sun May 11 13:34:26 2025 by rpki-client