Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/73689bb8-8934-3c65-8316-de4a0a0f9248.roa
File:                     73689bb8-8934-3c65-8316-de4a0a0f9248.roa (raw, json)
Hash identifier:          h7VWKKv/N0/o5KV/W2e7QL0hqdAPoxE4gTJ+TyP+uh4=
Subject key identifier:   64:D3:78:3B:1C:9E:F0:EC:B2:55:48:B3:9F:8B:DC:90:D6:78:51:2D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DF174CF295F949A7CE8C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/73689bb8-8934-3c65-8316-de4a0a0f9248.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        35.132.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:f1:74:cf:29:5f:94:9a:7c:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=57a0b202-b4cf-45e7-ba95-2441fddcfc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:0e:a3:57:14:c8:85:ef:e5:f7:60:8f:70:
                    41:eb:ef:c5:69:49:57:8a:8a:9f:8a:40:fc:ed:c6:
                    eb:1a:9b:92:5d:2d:9f:3d:00:c8:fd:c0:6d:23:bc:
                    f6:6a:04:29:17:22:9a:9b:05:2e:b6:77:52:3c:c9:
                    aa:db:bc:df:a7:15:a2:b1:34:64:61:4f:d4:96:be:
                    5c:76:f2:39:41:04:0a:fd:32:bc:9f:d5:86:a4:55:
                    3a:d9:f7:5f:df:6b:3a:80:df:4b:40:14:50:4d:6c:
                    61:62:44:9b:33:e2:51:49:89:03:b2:00:03:bf:41:
                    b5:60:61:93:24:28:73:47:fd:58:92:eb:d7:3c:70:
                    34:41:3d:ca:e0:61:2d:97:0c:03:67:98:67:3b:91:
                    7a:23:df:0b:dc:41:c5:27:68:1b:32:43:a8:aa:5a:
                    03:99:db:e5:6f:2f:11:a3:6e:3e:48:67:72:c9:a2:
                    cb:a1:ec:72:1d:77:2c:47:9a:1a:22:d7:67:d9:97:
                    4c:48:4f:bc:21:aa:52:00:b1:98:b8:21:2c:30:bb:
                    1c:80:3a:3c:1d:4e:fb:34:f8:35:a2:a3:ef:eb:39:
                    d3:07:94:f3:b7:12:4a:1f:68:dd:d4:2b:16:c0:65:
                    b6:b1:8f:7e:27:05:a2:3b:ab:03:ac:93:71:63:00:
                    f1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D3:78:3B:1C:9E:F0:EC:B2:55:48:B3:9F:8B:DC:90:D6:78:51:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/73689bb8-8934-3c65-8316-de4a0a0f9248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.132.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9a:08:95:5a:e7:67:8a:50:8f:08:91:ad:e6:4e:35:c2:33:
         96:1b:b3:29:1b:b0:cb:a3:f8:90:12:41:da:07:c0:98:b4:4c:
         3f:62:53:5a:4c:f5:8b:c4:9f:5c:78:95:42:d2:f4:03:00:ae:
         f2:34:15:17:60:13:83:9f:fe:66:02:6b:51:54:51:50:74:92:
         f4:19:37:1f:44:c0:e0:ec:df:eb:b5:0c:50:7a:c4:4a:a4:ae:
         97:c4:cd:9f:6f:cf:74:f3:2a:8e:57:67:67:8d:ce:db:d3:e3:
         9b:d7:a4:c9:ab:bb:54:22:3f:b8:bd:ad:ea:5b:00:48:6b:5a:
         0e:b4:df:b8:ba:9c:e3:77:48:49:08:db:29:89:bf:a0:7f:cb:
         01:0b:f9:cf:81:7f:bf:8b:e7:1d:f6:79:63:0c:b5:4b:8d:98:
         3e:ed:38:22:fb:70:b1:72:8a:5a:de:8a:05:62:95:ca:fc:ad:
         3c:1f:17:94:ba:d5:77:91:33:cb:8a:95:3c:5c:36:30:50:38:
         20:e5:d1:5c:53:21:69:48:73:b0:aa:04:ea:63:6b:8c:c6:3d:
         0c:d5:35:13:25:c8:f2:b0:76:2b:fd:4c:15:95:6c:11:bc:46:
         56:32:6c:12:75:9a:65:ad:9e:f0:dc:3e:f3:ea:2b:c5:dc:1e:
         59:51:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:16:03 2026 by rpki-client