Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/32fd6939-3824-396b-b568-1ba680219c18.roa
File:                     32fd6939-3824-396b-b568-1ba680219c18.roa (raw, json)
Hash identifier:          dtz1ZykNse0hBPBaO+fU9OTVRmTX6+DDszBn5vMuYts=
Subject key identifier:   3F:50:07:74:0B:09:A9:71:6E:0E:5A:45:18:D9:6D:28:41:A9:BF:67
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F4F07F6B8D35A329E7F30C2C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/32fd6939-3824-396b-b568-1ba680219c18.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     22677
IP address blocks:        35.129.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f6:b8:d3:5a:32:9e:7f:30:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=8a00b543-2e82-415b-ba0b-7e05f5b7944e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6a:7f:89:51:90:6a:de:d5:e1:2c:90:94:3f:
                    fd:1b:55:a9:4c:1d:76:73:a9:1f:b7:76:65:de:4d:
                    e9:04:5c:3d:25:eb:c9:a0:92:01:a9:cf:e1:c3:29:
                    66:92:ff:42:5b:06:1b:c5:2f:24:99:ba:36:27:c1:
                    71:d2:02:fe:da:48:fb:d2:83:72:ab:89:b3:ef:b1:
                    eb:5d:92:73:44:86:4f:35:af:6d:18:45:c5:75:46:
                    9f:1e:48:97:c3:c9:6d:b2:26:30:87:c9:2d:34:cd:
                    b9:bc:3e:7d:82:1c:2c:4b:af:c1:55:80:fc:8f:61:
                    50:62:a9:73:b4:9f:1e:0e:5d:eb:38:7e:fa:ce:60:
                    2b:9d:da:81:37:a0:17:ce:19:0f:d5:bc:3c:a5:e7:
                    68:44:2e:d7:d6:57:96:ee:74:20:4a:0a:7c:2a:47:
                    06:b9:34:d3:25:e4:7c:e0:ec:f8:d9:e7:7d:9e:1c:
                    b6:43:7c:5b:0a:cd:47:9e:60:fd:1b:f1:c5:e9:ae:
                    57:68:d8:50:e0:f9:94:4f:64:54:8d:9c:05:f2:3e:
                    13:4c:65:80:ae:4f:46:81:c5:d7:8f:c8:74:97:36:
                    8f:49:0b:dc:8e:e5:de:0e:63:e4:69:14:af:5a:94:
                    01:2f:22:75:fe:cc:be:85:dd:a9:b3:fb:4d:78:2f:
                    fb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:50:07:74:0B:09:A9:71:6E:0E:5A:45:18:D9:6D:28:41:A9:BF:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/32fd6939-3824-396b-b568-1ba680219c18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.129.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:84:11:50:86:9b:2c:5a:19:cb:a0:64:d2:49:05:56:3b:57:
         cd:f5:14:92:39:1a:c2:2c:bb:00:c3:76:17:f6:c7:81:92:00:
         53:92:76:f8:ac:0d:10:fb:2a:be:a8:d5:ca:16:bf:95:94:ea:
         c8:23:b3:ae:36:e1:c2:c4:8c:36:8a:db:5c:7f:17:12:f1:5b:
         3e:19:f6:3d:0d:64:10:75:6d:45:a5:b3:20:f1:42:86:a6:89:
         36:74:fe:e2:38:2b:be:27:3f:e8:93:a8:db:1d:0e:18:d7:75:
         eb:c8:51:2f:60:8d:42:4d:7a:ab:f1:ce:2c:f9:0d:5f:8a:b8:
         55:a3:c3:8c:1d:82:b6:ed:2d:3e:14:cc:99:61:c0:c5:be:f2:
         34:ed:ca:c8:71:b8:b9:d1:9c:82:73:51:dc:4c:e5:38:e7:35:
         6e:02:55:6c:23:4a:5b:21:6f:b6:1f:55:ab:10:86:78:96:50:
         0e:b8:23:85:72:04:45:45:05:da:ab:96:58:58:be:7c:bd:27:
         89:05:19:f4:7d:3e:c0:5a:5f:00:f5:d1:9d:0a:3c:c6:d5:45:
         5d:55:6f:b2:4a:46:da:39:88:f6:49:31:a7:cc:86:8a:79:1b:
         f4:8f:72:cd:f8:e5:aa:e7:8a:3e:42:d4:65:53:c3:63:41:b9:
         b1:e1:45:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:08:26 2026 by rpki-client