Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/88da796f-bcea-36ad-bf67-994c30a05601.roa
File:                     88da796f-bcea-36ad-bf67-994c30a05601.roa (raw, json)
Hash identifier:          aEl0GnYTxOha4nzl2jWX1dIPQVm2Jfaka4kqL6q7kq8=
Subject key identifier:   A4:6D:71:2F:E4:D7:5D:4A:9B:79:DD:78:04:11:20:0C:BB:7F:3A:58
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584A23C00BB64C677FEF151BD900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/88da796f-bcea-36ad-bf67-994c30a05601.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     397752
IP address blocks:        35.131.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0b:b6:4c:67:7f:ef:15:1b:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=a9a7f853-98e4-4a65-8bfd-a903d359cfe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:c7:95:01:0e:a4:e3:32:3d:1b:f7:41:12:
                    2d:c5:97:06:26:b3:9a:bf:63:f9:68:54:b4:17:27:
                    ea:b6:d5:01:3c:a9:70:76:28:c0:8d:f4:8c:31:c0:
                    97:33:81:4c:6c:e1:26:f1:46:d4:72:06:d4:8a:29:
                    44:92:e4:ab:5e:fa:13:5b:4c:46:43:9a:ca:11:22:
                    a6:b1:ff:33:6d:1a:6a:d9:fd:04:3e:49:61:49:38:
                    70:2e:4f:54:34:e6:7e:74:c2:16:42:d1:b2:ad:70:
                    4d:ca:b3:df:1a:96:27:61:b5:11:31:7c:f7:1f:ab:
                    2e:33:42:cc:5a:12:db:23:39:12:25:2c:3b:c7:69:
                    8e:8f:a0:93:e1:d2:bb:ce:18:e7:26:43:75:dc:35:
                    1a:c2:f5:46:61:df:0d:e1:aa:4a:2f:79:bd:4c:d6:
                    b6:9e:fd:fd:a6:15:16:e4:15:6e:0e:0b:35:8d:7c:
                    d0:d6:b4:9b:0a:97:06:cd:f6:36:8e:e3:cf:04:40:
                    f9:a9:5b:0b:30:57:ff:8b:8d:7e:7e:ee:3b:28:34:
                    ad:2d:a8:3d:1b:eb:dc:66:c4:02:7c:5f:7a:3e:c6:
                    65:c6:0c:e6:c4:1f:e1:1b:d2:9c:6a:b3:6b:76:a2:
                    df:58:56:0d:4f:ec:64:68:38:5b:5b:ed:3a:3a:ac:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6D:71:2F:E4:D7:5D:4A:9B:79:DD:78:04:11:20:0C:BB:7F:3A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/88da796f-bcea-36ad-bf67-994c30a05601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.131.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:78:25:62:27:f0:97:51:64:53:e4:21:52:d7:19:23:9d:fa:
         da:a3:d7:0e:07:fc:06:c9:04:69:a1:d3:70:73:5f:64:ae:dd:
         96:b4:e8:ec:e9:7a:63:ff:3d:1e:65:da:ce:fd:61:a8:c9:98:
         c7:a6:e7:5e:54:1d:dc:3a:96:7d:3f:b5:4e:21:1d:8f:16:0d:
         79:25:54:9b:e1:fe:29:ca:62:90:af:41:28:94:ae:0b:30:71:
         2c:73:b5:7d:f5:b5:e1:07:41:58:03:fb:d9:10:c8:c9:ee:26:
         02:3d:40:aa:5c:ff:5a:3b:6b:bd:44:45:33:32:d9:a5:5f:b8:
         4b:3d:55:39:4e:42:b5:bd:40:bd:77:f8:20:09:0c:60:37:88:
         41:c5:69:0a:18:48:7d:f0:b1:b4:04:1f:e9:ab:f1:a1:6e:cc:
         4c:b5:38:ed:88:48:39:70:48:a3:2d:23:32:ff:3b:eb:67:67:
         ab:65:4f:dc:7d:d2:f3:dc:9d:be:91:07:07:e6:09:6c:16:d1:
         36:04:23:12:56:11:19:64:b8:6a:70:32:61:4a:be:57:b2:33:
         14:fa:1c:af:f6:da:aa:c6:18:28:08:b5:db:33:35:8a:eb:68:
         15:82:0a:ea:dd:ff:2e:a0:0d:89:a2:60:58:63:62:2b:c9:3d:
         41:fb:fe:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:31:51 2025 by rpki-client