Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/73689bb8-8934-3c65-8316-de4a0a0f9248.roa
File:                     73689bb8-8934-3c65-8316-de4a0a0f9248.roa (raw, json)
Hash identifier:          NTXgH0ja6SGpHA+1srLVUUixz0HuHgbgeYgr3KErC5E=
Subject key identifier:   54:30:7B:86:78:95:6F:E0:75:3C:73:07:17:BF:2B:DF:4D:16:0F:B7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16172ACA09CB4EC25BFC700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/73689bb8-8934-3c65-8316-de4a0a0f9248.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        35.132.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:72:ac:a0:9c:b4:ec:25:bf:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=8e0c5ebb-214b-4fc9-958d-8680ce7a0df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:43:29:7c:ab:a3:15:43:6c:cc:aa:78:5a:
                    70:f6:1d:58:7d:69:30:0c:2a:44:3b:3f:29:8a:17:
                    22:cd:a4:7c:e9:7b:a9:7a:39:dc:25:a2:5d:31:d2:
                    bd:bf:b9:1b:04:b2:f0:5f:91:24:24:c5:f0:a6:81:
                    29:b8:4f:cd:77:03:46:24:da:bf:f5:6e:f5:63:fb:
                    0b:75:a7:14:24:38:77:5f:56:71:2e:b9:41:d3:54:
                    81:71:32:0b:5e:d0:49:06:a9:27:b9:18:69:30:db:
                    56:9b:01:6b:21:f6:c0:07:79:f6:c3:ae:2e:59:e5:
                    13:aa:d9:7f:f6:01:d1:ca:64:ec:cd:3c:61:e2:a4:
                    43:b8:99:bb:b3:f7:70:4c:82:02:76:64:0f:67:ec:
                    9b:c6:88:af:b1:4d:40:b4:9d:6b:83:74:91:d1:bc:
                    26:dd:a6:d7:7f:c5:39:97:4b:78:58:a4:75:0c:3a:
                    37:ca:d2:23:ed:7e:20:33:ce:c7:86:18:23:3a:c1:
                    dc:48:7f:6c:5b:7a:68:3f:89:ea:9d:0c:cf:4a:89:
                    b9:f0:bf:2f:4c:6d:5d:7a:ae:47:b2:fd:54:ff:fd:
                    09:70:bd:53:bb:40:03:13:6f:ad:7c:e2:99:23:70:
                    af:b6:e2:e5:35:8c:ba:32:c2:bd:0e:9c:49:1f:a5:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:30:7B:86:78:95:6F:E0:75:3C:73:07:17:BF:2B:DF:4D:16:0F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/73689bb8-8934-3c65-8316-de4a0a0f9248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.132.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:03:d2:3a:88:e6:f6:53:32:29:f1:20:09:06:9b:0c:71:d5:
         dc:63:84:82:63:05:1d:49:12:6f:61:58:33:d2:58:16:fa:8c:
         b5:c4:10:33:00:58:36:4c:00:23:ca:7e:a1:39:d5:66:45:ae:
         50:20:08:43:4a:da:e8:1f:a3:d8:e0:42:56:84:a0:94:4f:a7:
         6c:0d:02:b6:84:4f:47:16:98:f0:7f:00:2b:00:a6:37:93:87:
         98:00:2d:44:a2:5f:82:7b:c4:db:bf:14:6c:66:f7:83:86:bb:
         e2:76:ca:48:c2:f5:b3:e7:5a:2b:36:3f:8f:22:af:c1:16:74:
         51:40:5a:44:13:93:c3:9d:e2:78:02:14:55:dc:f6:66:de:2f:
         13:9d:90:b4:e0:e8:f4:51:4d:fb:48:1a:9d:8d:a7:d1:da:56:
         05:a9:b3:4a:92:95:3e:f8:e0:6e:ad:f7:52:f3:85:0c:02:20:
         51:d5:92:c3:af:3d:e3:2c:93:4b:20:cd:e1:b2:19:12:3c:4e:
         93:06:08:e9:5a:6e:7f:df:61:6c:fd:bd:37:5e:4c:4a:ac:5f:
         e1:65:14:24:87:ed:82:d0:14:0a:9c:71:1b:3e:e1:06:eb:5b:
         74:39:e5:87:dd:73:e6:4b:70:f4:00:65:2c:9b:3e:29:e3:cd:
         d0:9c:13:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:55:27 2025 by rpki-client