Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d464c90-9d1f-349b-abf5-2ac695ab33ad.roa
File:                     1d464c90-9d1f-349b-abf5-2ac695ab33ad.roa (raw, json)
Hash identifier:          dIpO4+87NaqZHMyVtnvvxi+URGhB93oIScj6swqTssg=
Subject key identifier:   C8:E8:CD:E8:2E:B5:D7:A5:47:5D:1A:41:7F:78:D2:F0:CB:28:0E:B2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B102EFEF862C8231A8680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d464c90-9d1f-349b-abf5-2ac695ab33ad.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        35.134.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:10:2e:fe:f8:62:c8:23:1a:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=30b90d2d-b597-446a-8a56-52269dc18422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:3a:d2:f9:a6:8a:04:ad:f1:c3:63:c5:37:
                    45:9a:3e:cc:e7:e7:58:73:1a:e9:14:4d:90:cd:a2:
                    26:d7:17:44:e2:9e:4a:a3:69:df:0f:5f:c4:34:c3:
                    b0:41:e5:93:a4:a6:9e:1c:e7:de:3c:2c:03:5f:49:
                    29:07:16:a3:e3:61:29:da:67:34:7b:fb:5a:94:70:
                    c3:ac:81:b0:82:21:89:6f:e3:60:bd:28:0b:0c:75:
                    c1:0b:34:0c:74:ef:30:bc:b6:b3:86:ec:3a:69:d3:
                    13:c4:5a:de:bd:6b:79:df:56:d0:c8:51:0e:1d:6f:
                    c2:59:38:62:00:82:1b:45:2e:7b:d1:f8:ba:ed:17:
                    e1:58:a4:b8:f3:f9:68:49:b0:10:91:55:3e:d8:2a:
                    61:70:d6:2e:ec:4b:bd:a0:2e:22:c3:de:ac:b3:33:
                    62:dc:52:91:e3:c1:5b:18:1b:dd:74:2e:6c:eb:58:
                    74:cc:f8:83:a0:7a:9c:72:ae:37:f7:87:90:d7:94:
                    71:7c:19:14:93:9e:dc:57:78:da:54:a5:72:6e:6e:
                    4a:18:84:ca:cd:87:d2:d8:1a:04:21:d9:4e:12:03:
                    be:d5:1d:29:ef:20:15:cc:d3:27:dd:1f:12:9c:69:
                    99:ec:3b:b3:d8:4a:1a:15:44:a2:c0:2a:43:62:80:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E8:CD:E8:2E:B5:D7:A5:47:5D:1A:41:7F:78:D2:F0:CB:28:0E:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1d464c90-9d1f-349b-abf5-2ac695ab33ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.134.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:37:2b:69:a7:a9:4c:49:7f:0c:b0:39:38:a2:ee:b6:e1:1e:
         63:a7:6c:58:fb:e6:ea:c1:a3:1a:7a:24:3b:1a:ef:b4:e6:63:
         69:0a:71:55:48:f7:60:38:47:37:62:7d:02:2b:4d:43:08:ca:
         d9:b0:19:9e:dd:26:11:0e:e8:97:33:0f:a0:eb:cb:40:78:bb:
         e6:d7:01:4c:8b:0a:ca:5a:be:8c:e1:ee:d4:59:85:4e:7a:54:
         0e:4f:aa:04:7c:c6:1d:00:1b:5f:cd:78:83:f5:af:88:cf:6c:
         09:61:20:f7:9d:82:d7:02:43:84:dd:21:4e:73:66:52:58:c1:
         1a:a6:86:ae:86:9c:13:29:c4:d5:a1:c0:21:89:18:a2:80:2f:
         dd:49:1f:e0:70:18:66:ee:7f:81:03:6f:6f:95:2b:26:e7:d6:
         a7:7b:ea:65:94:55:66:62:87:8a:7d:37:28:d0:d7:87:6b:83:
         04:12:0d:f5:00:8d:66:c2:e9:6d:ed:40:47:c5:ab:87:0e:4d:
         9d:8c:aa:02:5d:1a:52:85:a5:b1:45:31:10:94:30:d5:c0:c8:
         35:11:18:97:1d:81:a6:d6:36:4f:49:85:fb:36:eb:88:e7:de:
         da:5c:de:c3:87:d2:53:64:36:2e:c5:40:da:27:24:db:2a:bc:
         2d:cb:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:57:52 2025 by rpki-client