Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/defb1855-90d4-3255-af3e-6adae8b6e0fc.roa
File:                     defb1855-90d4-3255-af3e-6adae8b6e0fc.roa (raw, json)
Hash identifier:          ZFlmAaCw14hTb3Lw/t4sf7QcABbiq0xjK5SUQoF/pgM=
Subject key identifier:   9D:12:DD:7A:22:2D:EB:E5:8A:CE:9A:00:45:FC:AF:EC:55:43:2E:39
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E2A165C4C2D0358D2C8C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/defb1855-90d4-3255-af3e-6adae8b6e0fc.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        35.151.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:2a:16:5c:4c:2d:03:58:d2:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=2849d92e-cff4-4359-b15a-0bdd15167268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:4d:00:79:0e:08:d8:aa:55:38:84:29:96:
                    a7:13:fe:b4:35:e4:9f:40:f6:e5:91:7b:67:ee:51:
                    82:c9:5c:06:2b:85:dd:74:c2:ed:64:52:73:29:83:
                    c3:32:41:db:fe:c5:73:c7:8b:4f:21:38:44:c4:81:
                    69:c8:68:a1:92:3e:08:e4:94:22:5e:4a:1c:2c:f9:
                    e8:78:04:64:c1:c0:ba:25:8e:c1:a3:d5:06:aa:4b:
                    30:f5:ab:5b:fc:9a:b4:1b:e6:ab:97:e1:15:4c:99:
                    ea:86:57:d0:85:c6:2c:71:8e:96:b6:b2:9c:fb:87:
                    45:95:2b:d2:d0:c5:74:71:c8:f9:0f:b9:e5:50:29:
                    88:1c:0a:38:de:9e:b2:0c:02:d6:22:f0:26:78:81:
                    7e:52:6d:f0:ee:14:ce:05:88:e8:8e:87:91:ea:49:
                    2f:88:22:cb:c9:84:c0:0e:9a:8e:dd:12:38:5c:37:
                    83:22:f2:c3:e6:9f:8f:87:11:2e:fd:c7:0c:8e:f0:
                    e9:bb:49:d5:57:92:37:cd:c4:39:5d:b8:08:40:c7:
                    6e:6a:0b:df:63:41:fd:e5:ad:18:05:43:13:bb:ca:
                    bd:7f:5b:4b:18:f4:e6:67:72:5e:39:a1:04:d5:90:
                    56:24:82:a7:f6:e0:03:d4:11:0f:82:9b:e3:09:70:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:12:DD:7A:22:2D:EB:E5:8A:CE:9A:00:45:FC:AF:EC:55:43:2E:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/defb1855-90d4-3255-af3e-6adae8b6e0fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.151.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:cf:52:fe:1f:d7:d7:6f:01:1e:db:fd:f0:ba:ad:ca:f3:10:
         dc:a0:a1:f9:f6:30:b2:ea:61:e3:cc:6e:54:23:f5:9b:53:9c:
         e2:b0:ba:84:f2:41:8b:23:64:0b:4e:04:5b:1e:f6:79:92:77:
         68:a2:95:67:db:f7:65:d5:0a:4a:d9:bf:d6:05:65:50:ea:a9:
         b3:75:25:b9:40:ac:d5:8f:dd:eb:92:d0:3c:59:b4:ec:db:9c:
         ce:47:a0:bf:5b:f7:41:a5:eb:0e:8c:bb:8f:e0:02:d9:7f:1b:
         7f:94:85:20:42:44:c7:ab:59:37:76:f8:b2:9f:54:84:38:12:
         ba:a2:bc:68:20:43:bc:e6:c2:3f:1b:d7:51:72:6d:6a:ab:c2:
         5c:bb:9e:e7:cb:95:bf:be:c8:aa:91:db:88:73:68:76:20:0c:
         65:48:da:94:07:16:5a:63:77:67:2b:29:54:29:26:6d:b9:8a:
         b1:cc:8a:89:b6:19:f3:b5:8b:77:a1:1f:c9:88:c3:b7:db:e9:
         87:19:8c:8d:bb:69:b4:3b:96:0f:84:06:d4:21:ef:06:f0:f8:
         46:54:5f:ce:f9:05:89:d0:9d:7c:b9:fc:84:56:75:42:51:9c:
         dc:94:73:ba:18:0e:78:8c:03:c2:e0:c3:ec:c4:a8:ce:52:af:
         f7:81:34:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijioWXEwtA1jSyMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
Mjg0OWQ5MmUtY2ZmNC00MzU5LWIxNWEtMGJkZDE1MTY3MjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3lNAHkOCNiqVTiEKZanE/60NeSfQPblkXtn
7lGCyVwGK4XddMLtZFJzKYPDMkHb/sVzx4tPIThExIFpyGihkj4I5JQiXkocLPno
eARkwcC6JY7Bo9UGqksw9atb/Jq0G+arl+EVTJnqhlfQhcYscY6WtrKc+4dFlSvS
0MV0ccj5D7nlUCmIHAo43p6yDALWIvAmeIF+Um3w7hTOBYjojoeR6kkviCLLyYTA
DpqO3RI4XDeDIvLD5p+PhxEu/ccMjvDpu0nVV5I3zcQ5XbgIQMduagvfY0H95a0Y
BUMTu8q9f1tLGPTmZ3JeOaEE1ZBWJIKn9uAD1BEPgpvjCXCUkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ0S3XoiLevlis6aAEX8r+xVQy45MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGVmYjE4NTUtOTBkNC0z
MjU1LWFmM2UtNmFkYWU4YjZlMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI5eQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjPUv4f19dvAR7b/fC6rcrzENygofn2MLLqYePMblQj9ZtTnOKwuoTy
QYsjZAtOBFse9nmSd2iilWfb92XVCkrZv9YFZVDqqbN1JblArNWP3euS0DxZtOzb
nM5HoL9b90Gl6w6Mu4/gAtl/G3+UhSBCRMerWTd2+LKfVIQ4ErqivGggQ7zmwj8b
11FybWqrwly7nufLlb++yKqR24hzaHYgDGVI2pQHFlpjd2crKVQpJm25irHMiom2
GfO1i3ehH8mIw7fb6YcZjI27abQ7lg+EBtQh7wbw+EZUX875BYnQnXy5/IRWdUJR
nNyUc7oYDniMA8Lgw+zEqM5Sr/eBNHk=
-----END CERTIFICATE-----
Generated at Mon May 13 01:45:20 2024 by rpki-client on console-ams.rpki-client.org