Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/547c2322-2fe0-3125-b66d-28a4dd970098.roa
File:                     547c2322-2fe0-3125-b66d-28a4dd970098.roa (raw, json)
Hash identifier:          h50+Dc+4XXPwEz/3hdJCr1BatPmhHclH5x6em9q9Fdk=
Subject key identifier:   CE:3B:1B:9A:7C:75:A1:F2:D8:6D:D2:EE:44:A7:61:17:28:86:A4:EF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A878A485740556A4BEDC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/547c2322-2fe0-3125-b66d-28a4dd970098.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        35.130.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:87:8a:48:57:40:55:6a:4b:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=9e90f8aa-8d96-4336-b38e-609bbaa9921c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:b2:8b:20:1c:e5:62:a7:02:97:b4:b8:12:
                    1a:75:9d:b4:49:ac:c4:d2:1d:8b:a0:bf:6b:c2:59:
                    a4:8f:5f:e9:c9:eb:06:35:eb:1f:d6:47:19:73:e4:
                    b9:9f:3d:58:48:c5:6f:6b:a6:04:d4:c8:b2:25:32:
                    b3:93:cf:e2:35:3a:14:fa:56:2a:c5:c3:9e:ad:1a:
                    fc:f4:03:0c:90:71:2a:27:76:83:0c:c9:b9:a2:1f:
                    3f:7a:0e:be:e6:db:0a:e0:42:37:31:e1:ae:c1:48:
                    4a:75:4e:60:31:ad:52:40:4b:f7:75:fa:6e:0c:d0:
                    18:6e:a5:01:df:5c:cf:df:c0:d4:45:45:47:ad:fe:
                    7f:9f:3b:4d:a1:ad:d3:1c:59:2c:5e:1f:51:54:22:
                    53:3f:32:7a:80:b2:dd:d2:c2:df:6b:95:39:4d:25:
                    a2:bf:d9:84:1e:db:73:23:f5:b2:45:64:e4:81:a1:
                    fd:57:75:ab:65:6d:3c:22:dc:a7:3d:b6:fb:63:96:
                    0f:82:04:cb:1c:94:40:bd:ad:7b:0b:af:49:0e:51:
                    33:37:fb:b7:97:ff:7c:41:6f:04:65:ec:e4:5a:44:
                    6a:48:48:70:63:c2:45:c0:a2:53:c1:ee:e3:79:7f:
                    2b:88:76:3b:64:d2:31:7e:94:db:34:82:f1:0f:aa:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3B:1B:9A:7C:75:A1:F2:D8:6D:D2:EE:44:A7:61:17:28:86:A4:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/547c2322-2fe0-3125-b66d-28a4dd970098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.130.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:36:30:a4:af:13:f8:3e:13:22:4b:42:c0:8c:46:2a:ae:e1:
         e2:8d:62:2b:ee:a3:e5:02:32:eb:27:90:48:7c:22:be:10:b7:
         fa:75:b0:4b:24:76:75:ef:42:52:92:bd:df:34:a6:d7:13:c3:
         6b:e2:48:3d:fb:27:a4:a5:49:ea:5e:7f:34:1c:87:45:5a:89:
         f2:17:e5:79:fd:f0:80:6e:50:cf:62:d5:b1:ba:64:59:a4:45:
         7a:a8:06:1b:92:fc:8a:a2:01:18:81:b5:9c:87:c2:66:31:67:
         e3:25:85:cb:2f:a1:f6:78:83:94:30:3e:fa:2d:c4:23:3a:80:
         df:4f:0a:d5:db:5b:73:27:f1:20:c9:8b:c8:0d:e8:d9:f8:1a:
         69:05:1f:dd:66:cd:12:ba:aa:e9:94:10:7c:da:df:90:ba:5d:
         a3:fc:32:89:d1:ab:12:8f:05:fb:92:db:b4:01:5f:96:24:93:
         5a:d8:a0:46:af:ad:c0:49:b8:c2:f6:99:d0:00:42:5b:49:56:
         08:d2:fd:ea:d6:fc:fa:3c:ce:51:aa:d6:84:87:bf:6a:48:5b:
         a8:9b:ee:b7:64:5a:f4:d4:b4:cd:36:9c:ca:cc:45:2e:3f:9c:
         fc:50:93:58:03:a7:fd:5b:46:f2:ac:3d:2d:03:16:0a:09:51:
         80:13:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:49:17 2025 by rpki-client