Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9512f80-0b34-36af-8a67-2fbb99cb3c0f.roa
File:                     b9512f80-0b34-36af-8a67-2fbb99cb3c0f.roa (raw, json)
Hash identifier:          fAh+SKQbSlMOt1+G3cyDnb/ZJFr/YTJhENIuOalERf0=
Subject key identifier:   D4:EE:46:57:D8:0F:BA:67:33:24:89:CD:9C:B2:BD:27:E0:9A:1F:21
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B0F76A6F91517E00C95C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9512f80-0b34-36af-8a67-2fbb99cb3c0f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        35.130.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:0f:76:a6:f9:15:17:e0:0c:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=21f91ef3-935c-4d2a-a49f-25a151403756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:86:51:e9:ad:54:99:13:57:01:4b:f0:b5:
                    f0:82:d0:9e:3f:f6:89:54:a7:7d:dd:bb:d3:d5:7f:
                    95:90:b0:42:ab:d9:77:72:cf:79:d3:71:d7:c4:eb:
                    73:9b:59:2c:98:1b:cd:dd:5b:c0:21:84:c2:f6:4c:
                    d7:6a:04:9e:9d:ba:c6:c1:c3:c4:d1:be:97:66:49:
                    3f:84:e9:5f:c2:fa:1d:48:80:e0:88:fc:dd:ff:f8:
                    41:6c:a0:48:04:bf:9a:75:51:b9:a3:56:ed:67:f1:
                    25:65:7f:33:e1:a8:cf:eb:58:1c:b7:a3:08:a4:82:
                    c2:40:3f:8b:74:40:21:54:54:10:c7:88:af:1f:af:
                    1f:40:22:d1:ef:e0:f8:aa:8f:9a:af:81:9b:e0:99:
                    c5:b4:aa:a5:7f:48:88:e2:bb:f6:ab:fb:20:b1:af:
                    e2:5e:75:19:27:fb:6c:c0:24:90:8d:59:b5:ee:e2:
                    11:cb:68:77:c2:11:67:83:37:1d:73:55:73:40:f1:
                    fc:c9:ab:d8:2a:e0:40:da:f6:32:ea:3c:44:c8:26:
                    c9:d8:5b:91:06:b4:b8:50:2f:0c:fe:0c:25:d2:2c:
                    c3:55:c6:1b:1d:a1:9c:45:72:ce:51:0c:57:ba:6e:
                    6a:a2:3b:e1:06:8a:05:cc:f7:c2:4b:0b:78:7b:3c:
                    b4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EE:46:57:D8:0F:BA:67:33:24:89:CD:9C:B2:BD:27:E0:9A:1F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9512f80-0b34-36af-8a67-2fbb99cb3c0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.130.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:08:31:d1:71:5e:28:79:fc:d9:cc:45:25:96:6a:d4:23:8f:
         92:05:54:7e:8a:d1:98:fd:36:a9:d6:fa:48:2c:4a:fa:bf:1a:
         92:02:e8:07:22:e6:d8:f2:d6:ec:74:7e:25:55:14:51:ff:09:
         07:35:ba:75:82:7a:ce:ab:ec:2b:ad:3a:dd:af:ca:f1:3b:75:
         36:98:a6:8f:32:49:52:67:6b:d9:1c:5d:42:aa:36:77:fd:d3:
         8a:51:30:16:e0:55:4e:29:ac:75:bb:ce:fe:22:a3:7a:c6:01:
         24:aa:9e:4c:8f:d9:e2:05:5b:e9:df:1d:9f:8b:5f:56:d2:bf:
         99:67:9e:64:5d:2f:0a:d2:57:db:06:d7:26:43:53:be:c3:a5:
         fb:7b:dc:a8:8b:04:91:9c:5a:9f:a7:5e:1d:53:4f:71:db:19:
         f2:fd:30:6a:0c:3e:0a:6a:ca:40:ba:4a:fc:71:0b:4b:35:f5:
         07:6c:3a:6d:05:ad:0d:52:2d:9c:98:44:56:49:c5:29:de:42:
         12:ab:29:03:7f:13:37:d1:4f:3b:8b:ea:95:07:b2:d7:ab:ba:
         46:b9:24:58:97:91:5f:f8:78:bf:2c:30:79:94:16:50:d8:ae:
         0c:ea:3b:35:5a:0f:b4:47:e0:36:05:d3:9c:b8:9b:05:61:64:
         6e:38:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:44:56 2025 by rpki-client