Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/639aa138-d3fb-329a-a68a-854f3ecd62e0.roa
File:                     639aa138-d3fb-329a-a68a-854f3ecd62e0.roa (raw, json)
Hash identifier:          FBtSX5d/TYSRd4ydqKqWX30XvAAHx9Uf8+JNC6HSYIA=
Subject key identifier:   C9:18:A3:7C:1A:5C:51:62:A6:8B:A4:57:E5:B5:CC:C0:91:2C:78:C4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CABBEE851B9F9E38B00380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/639aa138-d3fb-329a-a68a-854f3ecd62e0.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        35.135.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:bb:ee:85:1b:9f:9e:38:b0:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=18f5a596-0fff-436a-8bf7-047fd92b6ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:0b:00:df:b4:1b:96:36:de:e8:bf:e1:0f:
                    98:1b:a8:c9:0d:31:80:d1:72:d8:bb:f6:a8:9f:bd:
                    47:60:39:2c:f6:cb:43:2e:d7:4d:e9:a9:60:4c:ce:
                    85:1d:15:9b:2c:f0:4a:3f:89:63:54:04:ea:c8:f8:
                    ff:90:90:27:c4:64:4e:c8:d2:81:49:fb:68:dc:fd:
                    ab:0f:53:59:0e:3f:05:1a:b3:91:30:b8:8d:cc:b8:
                    de:8f:04:a0:39:8d:72:87:31:93:69:5a:8e:bb:29:
                    df:cb:94:13:df:62:3d:89:4c:82:12:f5:f3:c0:97:
                    7f:ba:55:f2:50:00:86:90:45:49:f9:98:8f:ea:88:
                    66:bf:54:8c:90:e0:76:6c:88:73:e5:eb:cb:e1:1f:
                    b3:dd:ea:d7:49:bf:4d:63:d3:1b:4a:54:ac:72:3e:
                    25:99:50:fe:48:2d:6b:c5:ac:9a:60:f0:20:c8:18:
                    ab:b4:4b:a3:94:f3:0c:90:b2:a8:6b:5a:00:0f:b9:
                    56:21:13:cd:bc:cb:66:b6:99:2b:61:ab:78:84:53:
                    29:b3:d4:8d:98:56:c1:f4:e7:ca:b7:c5:97:ea:ac:
                    13:d8:05:3e:09:6c:6d:14:f2:9a:a3:1f:f9:de:cd:
                    e5:b3:bc:69:1f:7a:0c:24:c9:60:27:9b:fb:8f:33:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:18:A3:7C:1A:5C:51:62:A6:8B:A4:57:E5:B5:CC:C0:91:2C:78:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/639aa138-d3fb-329a-a68a-854f3ecd62e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.135.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:ef:dd:fc:8c:d7:2d:f6:78:50:fd:34:f1:91:12:a6:f4:05:
         92:b2:b6:82:c9:04:b3:d1:5b:b8:71:44:60:7c:2e:dd:a4:82:
         3a:c5:05:0e:6c:9b:eb:40:e6:21:4b:ec:2a:0b:28:19:37:c4:
         86:d9:5e:3f:7e:62:88:2a:90:0a:d7:cb:f6:07:53:21:45:2b:
         fa:00:87:e7:03:0e:3c:66:5f:f1:4f:8b:f4:01:5d:dc:b3:73:
         c3:b3:0d:de:1a:00:a6:d5:24:bc:22:e5:91:93:48:23:de:b3:
         ac:76:64:f4:43:b7:8e:3f:11:d2:f2:86:b4:b4:7c:01:e6:6c:
         88:10:b8:bb:fd:85:65:b8:28:a7:fc:81:65:8c:91:fb:1f:61:
         d8:51:a8:f2:66:00:a8:6c:f0:99:eb:c8:fb:64:26:26:78:a5:
         6e:d4:9f:c3:be:66:d8:ec:e7:e0:ad:fb:a2:94:56:9b:3d:e9:
         ba:a0:7f:56:9f:89:c0:10:90:71:6a:c2:77:c9:17:73:3d:7a:
         cc:56:77:d7:91:b9:5e:d9:29:08:40:c5:28:1d:37:d0:e8:0a:
         e3:e7:78:2b:7b:11:63:5d:05:bb:65:af:e7:da:b8:2c:e5:7d:
         f3:12:c0:97:a6:17:a5:e5:53:43:34:d9:f5:7d:6a:ec:42:d4:
         82:ac:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:24:34 2026 by rpki-client