Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa
File:                     8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa (raw, json)
Hash identifier:          c65Awx3090ALw9XL2B7OZZ4qIuOsgcOwoNG9v8OsmFY=
Subject key identifier:   A5:31:FC:DE:98:10:9B:3D:74:AF:B6:FA:51:55:D9:B8:E5:87:8D:FB
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285849A61F3F4B0C8FF8B2C36D5680
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     2914
IP address blocks:        174.35.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:3f:4b:0c:8f:f8:b2:c3:6d:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=f7074d47-e020-48f9-81d6-77a4fc5ab519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:df:d8:9b:7e:a0:36:e5:dc:4b:d8:f7:99:
                    fb:aa:81:b3:89:a0:ca:1a:19:b6:cd:6d:b6:93:85:
                    d6:da:90:2f:9a:2b:44:f3:1d:0b:e3:62:54:63:a7:
                    61:ca:8a:6c:d8:1f:3e:b2:16:5d:0d:22:4d:d1:ba:
                    73:f5:3c:ae:e8:15:a6:43:9e:b4:bf:ec:b8:bd:82:
                    73:0e:e0:86:0f:ed:5b:b5:be:ff:c5:7f:5d:af:36:
                    e7:d6:ad:92:4f:bc:98:17:99:76:34:d7:22:bd:2a:
                    a1:36:bd:2c:43:52:0b:d0:2e:41:33:76:51:6f:da:
                    39:53:9d:8e:c4:dd:13:6d:ff:71:47:aa:24:3d:34:
                    a8:a7:a2:55:eb:cf:0e:74:f1:a8:1e:35:d9:c0:3e:
                    d3:5e:e6:7b:40:2c:2f:6c:12:9a:09:ce:c2:e0:8d:
                    37:b7:04:82:7a:ff:0c:af:bf:58:be:f9:88:aa:fc:
                    4e:8a:98:77:3b:ff:04:69:f7:82:a8:6e:70:c5:29:
                    87:43:db:e5:10:0a:85:39:57:95:10:c5:61:ed:13:
                    7b:a3:60:b6:64:25:da:40:f7:11:db:56:91:12:81:
                    11:83:0d:24:3b:f9:a8:b2:bb:dc:17:f9:07:b1:ce:
                    f7:e2:57:13:a2:a8:7c:4f:e2:cc:a4:bd:d0:12:dd:
                    d3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:31:FC:DE:98:10:9B:3D:74:AF:B6:FA:51:55:D9:B8:E5:87:8D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ea:f8:61:57:1a:bf:d4:c0:4e:8c:4e:0d:bf:bb:87:b2:1a:
         e9:3b:39:94:db:f3:3e:f4:74:1b:67:26:94:20:4e:a0:cd:73:
         a8:9a:a0:76:a5:e1:a6:41:80:06:ae:25:e9:68:2d:63:f7:fa:
         8a:66:29:75:3b:8c:aa:3e:17:f5:21:96:79:64:b5:58:73:99:
         95:85:04:dd:55:05:d0:6c:09:34:a5:1d:68:c0:91:f6:0c:a5:
         ca:f2:02:ad:74:b1:02:0e:ac:74:91:28:b8:2e:f5:88:cd:18:
         43:c6:3f:dd:b4:3a:45:50:08:08:d3:b9:1e:0d:c0:ee:2e:28:
         9a:54:f6:b2:95:91:9b:3e:92:7b:00:aa:69:23:5f:4b:b8:92:
         48:b7:a2:f3:8b:81:41:90:2a:c2:78:fb:31:91:7f:cc:aa:af:
         bf:6a:c3:e8:7b:79:a9:7e:67:d9:2d:61:b7:ee:0e:bf:c8:c4:
         cb:00:72:14:84:8f:64:1b:12:ba:f1:73:0c:ca:6c:7c:db:3b:
         1b:c4:51:40:6f:7f:a9:13:9c:40:97:c2:26:1c:fc:ed:80:6a:
         c4:64:af:29:84:bc:bf:4f:77:56:8b:e4:d4:f1:bd:1d:f5:e3:
         b6:8f:22:94:94:2d:53:98:98:a2:70:ac:ec:36:8d:55:b3:61:
         6c:32:9c:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz9LDI/4ssNtVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk
ZjcwNzRkNDctZTAyMC00OGY5LTgxZDYtNzdhNGZjNWFiNTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKHf2Jt+oDbl3EvY95n7qoGziaDKGhm2zW22
k4XW2pAvmitE8x0L42JUY6dhyops2B8+shZdDSJN0bpz9Tyu6BWmQ560v+y4vYJz
DuCGD+1btb7/xX9drzbn1q2ST7yYF5l2NNcivSqhNr0sQ1IL0C5BM3ZRb9o5U52O
xN0Tbf9xR6okPTSop6JV688OdPGoHjXZwD7TXuZ7QCwvbBKaCc7C4I03twSCev8M
r79YvvmIqvxOiph3O/8EafeCqG5wxSmHQ9vlEAqFOVeVEMVh7RN7o2C2ZCXaQPcR
21aREoERgw0kO/mosrvcF/kHsc734lcToqh8T+LMpL3QEt3TTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKUx/N6YEJs9dK+2+lFV2bjlh437MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvOGVkNGQwZjItNDNmZS0z
ZjMzLTk2NmQtNTNjZjMyMzQ5ODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriMJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLq+GFXGr/UwE6MTg2/u4eyGuk7OZTb8z70dBtnJpQgTqDNc6iaoHal
4aZBgAauJeloLWP3+opmKXU7jKo+F/UhlnlktVhzmZWFBN1VBdBsCTSlHWjAkfYM
pcryAq10sQIOrHSRKLgu9YjNGEPGP920OkVQCAjTuR4NwO4uKJpU9rKVkZs+knsA
qmkjX0u4kki3ovOLgUGQKsJ4+zGRf8yqr79qw+h7eal+Z9ktYbfuDr/IxMsAchSE
j2QbErrxcwzKbHzbOxvEUUBvf6kTnECXwiYc/O2AasRkrymEvL9Pd1aL5NTxvR31
47aPIpSULVOYmKJwrOw2jVWzYWwynLo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:20:43 2025 by rpki-client