Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29590c1e-9ec3-3644-a583-0d84383c4f77.roa
File:                     29590c1e-9ec3-3644-a583-0d84383c4f77.roa (raw, json)
Hash identifier:          SaLwToFmBCFclMK55JU+h+PF+KwuSv8vEdvXdFIq/3M=
Subject key identifier:   5E:46:CC:0D:3A:F7:0A:E2:47:B2:B1:21:8D:EE:68:B0:95:11:4F:19
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848F22BE417ED52B27B082CBE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29590c1e-9ec3-3644-a583-0d84383c4f77.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        35.219.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2b:e4:17:ed:52:b2:7b:08:2c:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=747eb9b3-cb40-4d6b-93da-1236a9ef6b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4b:0c:de:db:f7:bb:c8:cb:94:86:2c:5f:4b:
                    95:81:0d:01:02:44:34:bd:fb:d3:7c:6c:e0:5a:23:
                    fd:ef:3b:e8:b5:d0:08:80:a3:0a:a5:05:a6:ad:db:
                    2c:e0:7e:78:71:c7:4c:37:f7:2e:90:ea:7a:e8:40:
                    6a:34:e1:17:5a:c6:24:26:6d:41:fb:86:a4:3f:68:
                    35:fc:32:c9:18:68:5e:e6:83:3e:7f:93:38:7c:6e:
                    0e:2c:4e:23:8f:23:d4:3b:50:0a:4c:2c:a8:96:d9:
                    df:53:a2:3d:67:0d:47:70:fb:ea:d1:76:6a:fb:70:
                    a6:5b:dc:be:b9:94:a7:42:93:69:24:1d:48:c6:9b:
                    ac:58:1c:63:6a:33:ae:c6:ae:23:57:cb:6c:6d:8b:
                    8c:57:5b:33:44:29:82:7e:96:a4:86:0b:c2:7d:36:
                    22:2f:cc:c0:ec:49:85:f3:40:a7:18:29:51:ce:78:
                    50:09:2a:19:80:7e:66:f0:f1:b5:02:a4:96:43:be:
                    8e:4e:db:95:ed:f1:4b:e9:c5:0f:fc:20:83:8e:ca:
                    da:8e:88:d0:7d:68:09:75:13:59:7b:33:95:25:28:
                    12:25:84:8a:ad:22:41:0e:2f:8a:b5:76:3b:8a:8d:
                    cc:06:d8:93:b7:9d:01:2d:9c:26:54:bd:f8:e6:94:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:46:CC:0D:3A:F7:0A:E2:47:B2:B1:21:8D:EE:68:B0:95:11:4F:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29590c1e-9ec3-3644-a583-0d84383c4f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.219.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cc:5e:c9:92:cb:f9:25:3f:d5:de:91:5d:17:da:cf:e3:fb:
         04:e6:bd:49:ba:83:5a:8e:03:e6:4d:bb:d1:20:2a:a6:c0:ba:
         bb:fc:97:01:92:b7:d4:4b:62:2c:3a:06:6f:51:ae:75:4e:75:
         a7:c5:23:8d:24:57:08:ef:bd:ea:dc:d7:78:7c:a2:10:dd:67:
         5a:93:ab:0c:75:f6:f1:b3:fd:fe:f4:0f:e4:b8:30:46:b6:5e:
         d5:27:c4:7d:7f:1b:20:88:c8:66:63:bf:74:73:16:ff:2d:15:
         90:cd:0a:64:e7:e7:14:43:b3:a4:b7:f6:af:5f:b1:ea:40:7c:
         97:be:7a:03:48:49:3b:d4:c1:5d:5e:4d:78:8d:58:74:ff:65:
         0f:ab:0a:04:86:c1:67:11:36:10:41:d0:d2:c4:da:be:70:fb:
         13:86:f0:30:c2:3f:e7:72:71:b4:66:19:43:80:3e:e3:e6:1a:
         4a:be:1a:3a:d7:6b:7a:a1:e8:28:d9:b3:60:6b:d8:0e:5c:f8:
         e8:aa:d0:7c:f4:4a:2d:cb:ea:39:05:98:af:26:70:34:d0:3c:
         5b:d1:45:85:9e:19:1a:ca:ed:f2:9b:dd:9d:f3:0b:c3:e8:83:
         c7:b8:6f:7d:cf:da:81:da:02:13:07:16:fa:04:15:e9:f2:c9:
         21:e7:6e:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyK+QX7VKyewgsvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
NzQ3ZWI5YjMtY2I0MC00ZDZiLTkzZGEtMTIzNmE5ZWY2YjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ksM3tv3u8jLlIYsX0uVgQ0BAkQ0vfvTfGzg
WiP97zvotdAIgKMKpQWmrdss4H54ccdMN/cukOp66EBqNOEXWsYkJm1B+4akP2g1
/DLJGGhe5oM+f5M4fG4OLE4jjyPUO1AKTCyoltnfU6I9Zw1HcPvq0XZq+3CmW9y+
uZSnQpNpJB1IxpusWBxjajOuxq4jV8tsbYuMV1szRCmCfpakhgvCfTYiL8zA7EmF
80CnGClRznhQCSoZgH5m8PG1AqSWQ76OTtuV7fFL6cUP/CCDjsrajojQfWgJdRNZ
ezOVJSgSJYSKrSJBDi+KtXY7io3MBtiTt50BLZwmVL345pT0CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF5GzA069wriR7KxIY3uaLCVEU8ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjk1OTBjMWUtOWVjMy0z
NjQ0LWE1ODMtMGQ4NDM4M2M0Zjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI9vDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPMXsmSy/klP9XekV0X2s/j+wTmvUm6g1qOA+ZNu9EgKqbAurv8lwGS
t9RLYiw6Bm9RrnVOdafFI40kVwjvverc13h8ohDdZ1qTqwx19vGz/f70D+S4MEa2
XtUnxH1/GyCIyGZjv3RzFv8tFZDNCmTn5xRDs6S39q9fsepAfJe+egNISTvUwV1e
TXiNWHT/ZQ+rCgSGwWcRNhBB0NLE2r5w+xOG8DDCP+dycbRmGUOAPuPmGkq+GjrX
a3qh6CjZs2Br2A5c+Oiq0Hz0Si3L6jkFmK8mcDTQPFvRRYWeGRrK7fKb3Z3zC8Po
g8e4b33P2oHaAhMHFvoEFenyySHnbn4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:38 2025 by rpki-client