Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/53d742cb-1849-311e-b88f-5c3e87625445.roa
File:                     53d742cb-1849-311e-b88f-5c3e87625445.roa (raw, json)
Hash identifier:          oPmSzLZrnKO8RtyoqXHPMDn8m3B/vcPOMZHj8EmB12A=
Subject key identifier:   D6:2F:E8:BC:11:5F:A4:8E:4B:33:88:B5:24:F3:84:FE:35:CE:D8:92
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D6E5A802F5A363AAA3640
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/53d742cb-1849-311e-b88f-5c3e87625445.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        35.135.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:6e:5a:80:2f:5a:36:3a:aa:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=1ef94e95-b8c0-4cc2-a11d-48c5e2869908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:41:cc:c6:2e:04:f0:d2:0d:0c:a8:a7:b0:bb:
                    6b:d9:f6:ce:9a:20:14:1d:bb:ab:f7:eb:22:fb:02:
                    c8:7b:73:4e:ff:3a:14:bc:fd:f7:a7:d6:23:a8:05:
                    24:e3:83:3c:1d:28:9c:d9:26:42:fe:aa:c0:ce:db:
                    c4:20:11:0b:de:8a:65:9b:ec:4c:2f:25:65:c5:f0:
                    5a:76:84:8d:18:5e:73:5e:30:a7:b7:fd:6f:98:66:
                    93:fe:f3:c5:d7:6f:6f:21:22:cf:f9:ab:fb:dc:1a:
                    04:2c:03:bc:a4:a4:d2:5a:43:41:c3:52:35:4b:ff:
                    e8:3a:76:a1:d6:35:09:58:80:d2:78:2d:df:94:7f:
                    3b:16:ff:8a:ee:50:c4:7f:f6:1e:00:76:68:3a:1a:
                    ef:ad:02:57:69:a6:85:f3:57:bf:7c:5f:c6:45:11:
                    b6:97:f1:ab:fc:65:70:14:f8:f9:83:c4:17:4f:bc:
                    38:bc:89:73:a2:11:0e:63:86:79:98:5a:89:d9:8b:
                    3d:d4:a7:bc:a7:45:3d:ad:4f:b5:03:d1:a8:2a:eb:
                    29:8b:af:6f:cf:fd:a8:db:42:58:64:99:ad:21:69:
                    bd:21:63:dc:95:db:d3:81:57:38:ec:69:6d:4b:d1:
                    be:be:29:2f:e6:a2:78:36:14:9f:7a:a7:29:ff:5e:
                    5f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2F:E8:BC:11:5F:A4:8E:4B:33:88:B5:24:F3:84:FE:35:CE:D8:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/53d742cb-1849-311e-b88f-5c3e87625445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.135.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ee:67:ec:ae:8c:33:03:2a:d2:7f:0e:3f:4e:f1:fd:74:2e:
         97:64:d4:d1:b8:32:48:51:98:fc:e6:bc:04:3f:d6:4b:6c:e1:
         a5:9e:95:70:e4:6a:e8:65:0b:8b:88:ea:83:45:05:6a:2d:35:
         d4:be:ec:a4:71:9e:bc:b5:02:b2:71:65:12:e8:b3:24:c9:71:
         1a:34:d2:48:c1:61:4e:43:58:71:a6:d3:f9:a8:8f:3b:40:e3:
         94:20:a0:18:a3:37:b0:6f:83:3b:8d:a9:0b:17:ab:d8:b2:0e:
         83:68:d8:98:61:5c:34:6a:fb:d9:27:6e:10:b5:f7:01:aa:e9:
         09:4b:dc:64:b1:f6:db:b9:df:d0:14:d9:13:90:96:68:b3:d5:
         3c:7c:00:d7:54:47:c4:47:51:b3:0b:41:69:a1:a9:63:58:99:
         27:c5:dc:f5:b5:5b:5b:50:5b:d2:e4:fb:a5:aa:29:66:4d:5d:
         3d:d0:1f:a1:60:27:40:18:3a:00:d0:38:c8:eb:09:e7:70:17:
         d1:21:30:d6:d5:ad:a2:73:07:32:82:59:c6:04:4c:87:c6:4c:
         b0:8e:65:18:f9:80:33:ef:dc:6f:8f:67:92:21:0e:58:8c:c5:
         33:46:49:b6:3c:cb:4d:7f:32:e6:92:2e:5a:6e:19:b7:a6:c5:
         a8:f3:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:27:58 2025 by rpki-client