Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/22a26360-a545-3466-9a2b-4898c9b1ebd9.roa
File:                     22a26360-a545-3466-9a2b-4898c9b1ebd9.roa (raw, json)
Hash identifier:          ph4llIaMmFSva+joW1eC0i0FS55UndOpKPnf5E0ASC0=
Subject key identifier:   F1:01:5E:AB:77:1E:B5:FE:DB:60:A7:C5:79:17:21:77:4A:3D:EB:E3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB9094DB026FC019FA4640
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/22a26360-a545-3466-9a2b-4898c9b1ebd9.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        35.149.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:90:94:db:02:6f:c0:19:fa:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=521f0f6f-db21-4fa5-b918-8ec51ec624d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:01:2c:fb:bd:53:7a:b4:11:07:e1:8f:f6:2d:
                    56:23:b8:06:f6:7c:d4:63:39:7d:d6:5c:8a:21:e7:
                    af:2f:88:41:2e:63:e9:fb:85:a7:a0:b8:37:88:99:
                    a4:77:8e:0d:4f:2f:c0:47:ff:1a:d4:4e:75:5a:52:
                    cd:be:cf:2b:d5:15:b5:d7:65:e6:e2:96:67:6c:5a:
                    ae:c6:18:7e:14:b8:a7:77:5e:77:a5:5a:fb:cb:01:
                    bc:9d:ca:c9:86:76:fc:f4:25:5c:42:8c:c7:8d:b4:
                    db:89:d3:6a:02:3f:75:a6:df:d3:a9:e9:90:e5:ef:
                    b3:21:34:ed:39:14:b1:8b:7b:55:b5:84:38:c4:05:
                    d6:dd:a4:05:96:43:59:75:a1:46:71:ce:4a:eb:dc:
                    ec:3c:ea:e8:27:3d:05:64:8f:50:6f:2c:af:1f:9f:
                    f3:d8:79:af:10:0d:55:cd:53:1b:a6:9a:25:95:81:
                    a0:40:39:2b:4c:8d:fa:34:59:ba:0e:fb:89:fb:64:
                    a1:ff:0d:36:21:ff:4e:13:f1:ee:14:c7:6a:04:65:
                    27:9c:1b:5c:23:af:c7:8b:42:94:34:41:54:c6:06:
                    2e:b3:57:c9:ab:ec:f6:29:52:d3:49:45:d7:84:7e:
                    5f:c8:cb:70:5e:7b:95:4a:62:cc:ef:e6:11:f9:4b:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:01:5E:AB:77:1E:B5:FE:DB:60:A7:C5:79:17:21:77:4A:3D:EB:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/22a26360-a545-3466-9a2b-4898c9b1ebd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.149.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:dc:74:54:76:f1:90:0f:6e:90:ac:a0:0d:22:c2:ad:9c:
         8b:9b:a9:66:2e:ba:1d:b4:aa:c3:1c:10:dc:7b:d5:eb:7b:65:
         a1:48:d0:56:65:d1:f9:ca:cb:b4:18:04:89:ae:33:49:29:94:
         d6:04:b2:c3:9f:b4:f0:93:b2:cc:b6:f8:dc:0a:02:8b:dd:bb:
         f3:f9:58:b4:6e:97:27:ec:74:de:57:01:74:d1:4f:db:df:07:
         26:8f:8b:2e:b8:8d:5b:18:ce:9b:e0:30:e2:b6:61:91:4e:a6:
         2b:b5:e1:98:b5:37:fb:ee:ed:92:e4:c4:0d:41:15:88:6a:d9:
         09:16:2a:8c:da:33:bf:7a:43:89:5c:86:5f:39:45:15:f4:48:
         12:81:0b:9d:e9:97:b4:24:bf:76:87:a7:bb:e1:20:8b:83:d6:
         5c:77:b4:7b:17:09:ae:a2:46:b5:2a:00:a5:d3:e3:50:02:57:
         33:13:fb:11:4d:4e:e8:d1:3a:29:00:2a:ba:30:a7:f9:40:da:
         f6:12:b1:27:15:bc:a3:b1:3b:22:d7:12:23:89:70:7b:d4:2f:
         88:c3:8c:e2:9a:c5:51:cf:a6:8b:52:d5:8c:9c:b3:fc:ac:1b:
         f4:3f:3f:8a:76:c3:87:a2:d3:9c:f7:af:ce:d3:5b:db:59:5f:
         b1:da:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:36 2026 by rpki-client