Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/73689bb8-8934-3c65-8316-de4a0a0f9248.roa
File:                     73689bb8-8934-3c65-8316-de4a0a0f9248.roa (raw, json)
Hash identifier:          YKHJpKAo4BS/ibdwBk71sGusXvuxoeynaCo8anlSca0=
Subject key identifier:   B0:05:A3:35:14:47:AF:AD:B0:AA:EC:AE:B5:F9:B1:C8:76:39:93:5E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D7658E80687326247E9B0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/73689bb8-8934-3c65-8316-de4a0a0f9248.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        35.132.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:76:58:e8:06:87:32:62:47:e9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=aa652bf4-8462-4a3b-a530-998bcb28f895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:ec:18:08:a9:d5:d2:c5:ae:7f:00:1c:13:
                    15:34:7b:11:ff:d4:ea:a5:5c:3f:20:fd:c0:e8:a8:
                    65:a6:ee:42:a7:20:0a:40:c2:20:56:5f:35:30:7a:
                    3f:8a:d1:2e:dd:b1:95:3c:f0:bb:8d:eb:dc:90:1c:
                    7c:5d:ed:5a:40:e3:e6:5e:39:cb:9f:7f:b0:38:75:
                    40:51:0d:60:ff:fa:45:ff:6e:7a:54:3b:6d:35:33:
                    18:4a:91:c3:92:eb:b1:b9:57:33:76:7a:13:46:be:
                    2d:42:19:9e:e6:f9:7d:79:93:54:f2:37:c0:82:f8:
                    06:74:f3:a5:2f:63:11:de:1b:cc:21:e3:bf:a0:49:
                    26:ef:f1:7e:bd:81:67:f7:0c:15:bc:27:ee:89:07:
                    22:df:ee:b4:db:d0:16:95:39:74:66:4b:e1:92:50:
                    de:6d:ff:b2:49:f7:60:02:40:3a:ed:34:93:d2:c5:
                    15:e4:8f:02:99:d2:96:fc:ab:cd:c3:13:48:ed:d8:
                    34:17:81:a2:d5:3f:4f:89:98:f9:28:6d:1f:8d:a5:
                    4b:cd:66:03:97:da:eb:5b:4b:69:63:3a:01:db:9a:
                    c6:ac:03:d2:1b:9e:be:9f:f7:79:89:1c:ab:8d:47:
                    7e:40:ce:bc:74:3a:5c:67:d2:8f:cb:0e:69:8e:58:
                    2f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:05:A3:35:14:47:AF:AD:B0:AA:EC:AE:B5:F9:B1:C8:76:39:93:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/73689bb8-8934-3c65-8316-de4a0a0f9248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.132.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:11:66:41:4c:b4:51:92:d4:0e:1e:f4:c5:ae:d1:a0:09:ab:
         73:23:85:36:1d:43:7b:4d:1f:46:be:57:f7:c9:ca:b4:04:2f:
         a7:49:9d:7b:50:ee:ed:f8:37:86:20:21:78:24:84:2e:c5:d0:
         26:0e:96:19:76:8a:14:cf:2f:df:61:5d:bc:53:52:04:ad:a6:
         49:0a:6a:9e:95:43:76:2c:78:dc:b8:4e:3d:75:42:6f:df:f2:
         c2:26:cf:35:bc:92:a0:18:3e:0b:ba:5b:24:b3:00:47:ef:5d:
         50:8c:65:f5:15:dc:47:2e:38:d4:1f:c5:6e:c2:8f:10:8a:0f:
         75:4f:75:49:7b:7e:94:f0:e3:3f:88:3c:7c:9f:95:1d:f1:30:
         e8:a9:2d:c3:9e:6c:d8:c5:3e:b6:b1:1c:62:7d:68:2a:ec:e1:
         cd:a6:a3:fa:dc:fb:ab:1a:ae:5f:0e:09:15:bb:a1:2e:e3:d0:
         0e:5d:b3:bb:e0:8b:e8:11:55:87:b0:bc:6d:d2:d2:87:a6:3a:
         34:fb:28:fb:77:5a:38:33:52:a4:82:04:f4:cd:9c:d4:4a:3a:
         0c:c0:61:b1:5e:05:1b:a1:ed:2a:bb:a3:d7:ba:45:18:fb:25:
         97:80:61:25:43:8a:9d:6a:63:34:36:63:b0:71:d9:c6:07:a4:
         a9:b8:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:33:51 2025 by rpki-client