Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3776020d-59a1-3de4-89cd-a55f5939bd22.roa
File:                     3776020d-59a1-3de4-89cd-a55f5939bd22.roa (raw, json)
Hash identifier:          Z2fuZuBEzUuugltGytpL2pQfR+OVm22BX9xix6FUB24=
Subject key identifier:   EC:FB:06:E1:31:AC:2A:CB:10:19:47:38:BE:FC:08:FA:E3:E2:5F:9B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1614E3B0DAB55155E65FD80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3776020d-59a1-3de4-89cd-a55f5939bd22.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        35.130.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:4e:3b:0d:ab:55:15:5e:65:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=880ece0c-1b5d-4f21-829f-4c9c03c878b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:08:90:1e:04:2d:44:9b:3b:76:d1:a9:0d:fe:
                    06:28:42:b2:93:71:39:90:69:3b:17:1f:2d:4f:ef:
                    fc:e6:43:98:dd:a6:2f:a5:64:25:15:a2:0d:ce:b9:
                    51:a7:07:ba:90:6c:81:95:09:71:76:83:bd:5e:5b:
                    9f:56:4e:22:52:8e:6f:2e:45:8b:26:9b:9d:ed:50:
                    7e:1c:26:e1:f5:8b:18:78:63:1f:9f:11:b2:67:27:
                    ad:b0:c9:26:89:bf:5d:e7:d4:eb:0c:07:59:b5:96:
                    cf:0c:66:36:32:51:b5:7a:3d:c0:97:ad:fe:c2:cd:
                    3e:7c:2b:a1:dd:09:a3:04:53:d8:43:31:03:5b:4b:
                    57:57:ef:98:e1:3a:92:f4:ae:22:67:d5:c0:97:7c:
                    cd:bc:38:56:27:6a:ff:ac:ab:78:de:f2:51:b1:b1:
                    cd:50:2b:90:ed:16:e5:aa:5e:0a:8b:69:15:2e:fc:
                    61:84:d3:0a:45:d4:83:b4:a1:12:50:cd:a1:1c:b0:
                    fc:b9:b7:77:d1:6d:57:26:d5:6c:87:77:95:84:36:
                    7e:34:5f:8e:84:e1:f8:fb:59:a3:37:87:00:6d:00:
                    0f:e0:5d:f9:b0:e4:da:6e:6d:f6:3e:c1:e6:74:cb:
                    41:0d:13:08:83:c1:c8:bf:84:4b:73:04:99:aa:6a:
                    5a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FB:06:E1:31:AC:2A:CB:10:19:47:38:BE:FC:08:FA:E3:E2:5F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3776020d-59a1-3de4-89cd-a55f5939bd22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.130.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:22:ce:7e:9a:6e:00:b9:9b:f0:7f:c7:47:6e:fc:d7:f2:19:
         f3:6f:53:0c:9f:25:25:29:c6:ea:b1:cb:39:a2:b1:f5:44:92:
         62:18:57:39:c4:57:53:b1:dd:92:3d:bd:c5:24:54:4a:8c:94:
         b2:7b:9e:fa:aa:6b:58:89:cd:0d:5e:d4:e7:65:70:54:9b:4c:
         55:33:5f:97:13:cc:00:b6:24:96:72:d7:9d:93:49:4d:e5:75:
         df:58:7b:85:d5:51:c5:e1:ec:42:a3:2d:b5:36:b3:98:ee:3d:
         35:35:31:13:00:31:5e:7c:1c:9e:09:b9:d3:13:72:08:ad:75:
         13:9c:f0:cc:c6:8f:10:92:dc:06:9b:28:a2:a0:5c:bd:bc:a6:
         59:37:37:65:15:c3:7e:8f:d5:67:65:31:0e:45:00:cb:98:db:
         4e:73:65:1f:fa:ff:b6:e5:a1:57:c5:b9:f4:a3:c2:86:87:05:
         af:43:f0:35:ce:9f:25:e9:8a:68:b6:c6:14:0f:39:1c:6e:d8:
         a6:77:8e:78:cc:46:1f:57:3b:82:81:7e:01:67:b8:12:32:d0:
         d8:2a:43:bc:45:35:34:4d:e6:94:1e:41:fd:ec:7c:07:f2:37:
         25:6c:c0:43:a4:fb:ec:16:3d:07:76:bf:21:85:34:59:85:d7:
         27:fe:8f:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYU47DatVFV5l/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
ODgwZWNlMGMtMWI1ZC00ZjIxLTgyOWYtNGM5YzAzYzg3OGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QiQHgQtRJs7dtGpDf4GKEKyk3E5kGk7Fx8t
T+/85kOY3aYvpWQlFaINzrlRpwe6kGyBlQlxdoO9XlufVk4iUo5vLkWLJpud7VB+
HCbh9YsYeGMfnxGyZyetsMkmib9d59TrDAdZtZbPDGY2MlG1ej3Al63+ws0+fCuh
3QmjBFPYQzEDW0tXV++Y4TqS9K4iZ9XAl3zNvDhWJ2r/rKt43vJRsbHNUCuQ7Rbl
ql4Ki2kVLvxhhNMKRdSDtKESUM2hHLD8ubd30W1XJtVsh3eVhDZ+NF+OhOH4+1mj
N4cAbQAP4F35sOTabm32PsHmdMtBDRMIg8HIv4RLcwSZqmpaCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOz7BuExrCrLEBlHOL78CPrj4l+bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzc3NjAyMGQtNTlhMS0z
ZGU0LTg5Y2QtYTU1ZjU5MzliZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI4KAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkizn6abgC5m/B/x0du/NfyGfNvUwyfJSUpxuqxyzmisfVEkmIYVznE
V1Ox3ZI9vcUkVEqMlLJ7nvqqa1iJzQ1e1OdlcFSbTFUzX5cTzAC2JJZy152TSU3l
dd9Ye4XVUcXh7EKjLbU2s5juPTU1MRMAMV58HJ4JudMTcgitdROc8MzGjxCS3Aab
KKKgXL28plk3N2UVw36P1WdlMQ5FAMuY205zZR/6/7bloVfFufSjwoaHBa9D8DXO
nyXpimi2xhQPORxu2KZ3jnjMRh9XO4KBfgFnuBIy0NgqQ7xFNTRN5pQeQf3sfAfy
NyVswEOk++wWPQd2vyGFNFmF1yf+jzw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:13:43 2025 by rpki-client