Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/07a0a139-1673-37fe-9905-29448545d733.roa
File:                     07a0a139-1673-37fe-9905-29448545d733.roa (raw, json)
Hash identifier:          t3NTYYWpFlnjyy5TG2FyMQHRV5REJWspiqitz9A3Rxs=
Subject key identifier:   F0:A3:9C:3A:CB:30:0C:CB:7A:8B:E8:A0:E6:85:0B:01:80:F8:4A:FF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAF1730600C5B205682B86
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/07a0a139-1673-37fe-9905-29448545d733.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        35.150.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:f1:73:06:00:c5:b2:05:68:2b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=278bcda6-0fec-4130-99b2-4229ff913a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f1:ed:f7:45:3c:67:64:d6:91:a2:85:61:9c:
                    cb:3c:7f:fd:68:57:14:0c:a4:77:c6:90:1c:65:c0:
                    a9:08:09:26:bb:66:7f:74:55:3f:55:43:a8:11:15:
                    5f:08:9e:83:23:dd:5f:9e:72:bd:5a:e0:08:bc:98:
                    73:dc:a3:18:39:38:44:4c:15:c2:db:b7:b7:c5:bf:
                    d6:fc:23:3a:cd:43:11:cb:cd:6b:50:7d:91:17:d1:
                    79:6a:22:bd:39:0e:75:12:b4:2e:89:bb:02:2f:f2:
                    00:1a:06:55:d6:0c:cd:84:6e:8d:1b:b0:58:b3:d4:
                    28:24:7f:46:bc:8f:d5:92:e3:50:06:cf:65:ad:92:
                    4c:70:af:e3:6a:06:84:40:d3:16:00:21:a5:bb:9e:
                    aa:f7:62:52:0a:12:97:74:a2:55:94:06:8e:51:3a:
                    0a:de:12:f6:2c:f7:90:6b:d2:2b:d6:8b:df:3e:71:
                    db:26:b8:9b:72:e8:a0:b0:78:ef:04:78:fb:6a:de:
                    c6:ae:d3:2f:d0:f0:be:5c:44:78:25:c1:b6:39:9f:
                    cd:f6:cb:c2:c2:2f:af:ef:68:c9:8e:79:fb:45:5c:
                    21:12:40:ee:e0:04:72:79:20:6f:9b:ce:5c:e6:7c:
                    7f:b2:84:fb:c4:95:4f:23:67:d9:aa:be:86:f4:83:
                    ac:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A3:9C:3A:CB:30:0C:CB:7A:8B:E8:A0:E6:85:0B:01:80:F8:4A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/07a0a139-1673-37fe-9905-29448545d733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.150.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:71:16:c4:da:9d:f5:6d:87:ea:79:9f:c4:3c:3a:aa:2d:ab:
         93:40:14:b3:be:94:b0:b9:94:72:9c:10:7f:26:8d:ab:de:10:
         e6:7c:08:75:2f:d7:02:94:54:28:a7:9b:d0:f6:11:0f:2d:c1:
         9b:cf:d6:ea:f4:b3:ef:c0:d6:9c:4e:27:1a:18:37:ac:2f:6e:
         51:8b:86:85:29:e6:79:51:43:00:89:04:08:4a:90:00:71:c8:
         a8:65:02:1f:b7:db:78:c9:2b:bf:06:4e:64:d8:32:bf:8a:d9:
         bd:ab:01:f4:0c:30:ab:10:fe:9a:3d:be:06:d7:cf:85:0a:52:
         f2:c8:ce:51:9a:e9:9c:74:86:03:2c:7f:32:55:d7:af:cf:f8:
         a3:44:7b:27:f4:e1:7f:72:83:56:99:c0:5f:b5:12:64:b6:6b:
         95:71:13:d0:4b:eb:1a:44:50:fe:28:53:60:8d:ca:01:3f:1d:
         36:24:51:7e:06:51:c1:92:ca:bd:ab:d8:d1:f4:77:0d:60:39:
         a1:bf:47:75:c4:61:2a:ad:e5:70:47:44:e2:10:29:e1:d3:02:
         c1:f4:3b:bc:f0:c2:35:6d:29:4b:37:85:a8:63:6c:ea:6c:b1:
         a8:b6:b2:e7:18:27:27:5b:3e:83:e2:0a:c6:30:11:57:7d:f6:
         5d:de:30:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:35 2026 by rpki-client