Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9512f80-0b34-36af-8a67-2fbb99cb3c0f.roa
File:                     b9512f80-0b34-36af-8a67-2fbb99cb3c0f.roa (raw, json)
Hash identifier:          KX7mHuUc/gVfx6TmvCT9JEw1h4oYFE4Y6z+L6uYRzZM=
Subject key identifier:   02:22:F3:E2:B4:D6:82:3A:F1:13:3B:E8:72:00:1D:8E:BB:2C:CA:30
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161E04CA460FC40BFBB9D80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9512f80-0b34-36af-8a67-2fbb99cb3c0f.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        35.130.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:e0:4c:a4:60:fc:40:bf:bb:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=24f03b28-c8bd-415b-9e50-e77223422016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:00:7f:3e:bc:fe:07:f5:6f:3e:9b:37:15:
                    97:34:f6:92:0f:f5:0a:30:c3:62:e3:3d:77:60:05:
                    74:63:86:29:73:bd:91:8e:05:78:80:0f:0b:a0:52:
                    5f:93:14:d2:a8:ea:d2:59:18:4f:06:d1:1f:87:ab:
                    81:6f:da:5e:1c:87:12:cc:4e:9a:22:02:49:ac:1b:
                    91:bf:74:67:02:e9:3e:c4:b2:e6:47:0e:a8:c6:a0:
                    c8:22:55:a7:87:5a:f6:70:f5:e3:01:38:a9:04:d0:
                    c7:04:0c:f9:84:d6:29:65:79:aa:45:5a:1b:c9:aa:
                    ed:e5:41:03:b8:a8:bf:5d:81:4a:04:88:6d:52:7b:
                    8a:3f:ac:35:49:01:08:9b:d4:0d:1c:68:d9:d6:21:
                    33:15:e7:3b:42:08:51:61:94:ea:f5:df:16:20:cf:
                    f1:87:4b:0c:ac:b5:56:33:1c:89:a6:d4:df:cf:a5:
                    56:12:31:23:9d:a5:e7:d7:cb:2a:4e:bc:8d:30:86:
                    35:a2:4f:28:45:ac:b2:2b:52:42:7e:79:cf:36:ea:
                    06:50:72:f0:2e:61:0f:9f:2d:44:ec:8c:e2:cc:8e:
                    62:e1:b2:df:d6:f8:6e:3a:f9:75:05:9a:75:f3:aa:
                    86:85:6a:43:2d:83:39:c0:04:27:5f:07:b0:c7:4a:
                    b4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:22:F3:E2:B4:D6:82:3A:F1:13:3B:E8:72:00:1D:8E:BB:2C:CA:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b9512f80-0b34-36af-8a67-2fbb99cb3c0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.130.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:8c:43:bc:e2:ea:01:c8:31:59:cc:b4:5a:d7:ce:51:f3:
         5d:db:b9:9e:e8:87:d1:3a:a6:c0:59:f9:db:93:9d:c0:98:f8:
         19:a0:d8:c0:53:a1:4f:85:b2:2f:a8:91:f2:a7:d3:b7:e8:fd:
         e9:73:15:e0:aa:a8:5e:b2:50:55:2a:1a:fb:de:f4:49:08:b1:
         83:a9:5c:82:f8:d8:58:ca:66:90:e8:83:e8:b1:37:05:55:0f:
         63:00:2e:42:03:83:36:c0:33:d4:1e:ad:f2:1e:d9:1c:ea:9b:
         05:10:32:bf:06:64:16:af:8e:79:5b:c3:b8:29:8f:bf:83:bf:
         02:a4:e3:13:72:26:01:0f:4d:ce:03:c0:db:3a:2b:11:09:8f:
         cd:22:dc:71:63:6b:95:bf:ba:89:43:bf:82:b8:2b:10:d9:8c:
         2f:dc:50:28:18:b7:1c:74:c2:7c:54:61:12:5c:a0:06:51:5c:
         5a:a1:a3:b8:69:6d:22:df:1a:17:0f:c9:61:5f:d9:92:5b:83:
         1c:6a:10:76:9b:03:fd:d7:a4:bb:63:bf:13:a5:38:0d:12:ca:
         cb:a1:37:b1:55:42:76:95:7c:85:2b:56:79:0e:f1:52:42:35:
         6b:ce:e6:6a:e7:24:a8:7d:e0:be:7f:32:ed:8f:74:f8:80:28:
         c9:51:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:30:16 2025 by rpki-client