Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f1a6f8fa-f70c-3b43-a59d-ecaf41951083.roa
File:                     f1a6f8fa-f70c-3b43-a59d-ecaf41951083.roa (raw, json)
Hash identifier:          FfTFDhCthIXqhFE+XypUg8Mv9nO70fFNwyQHfXxVa8M=
Subject key identifier:   04:F8:15:3C:F2:F2:4F:96:C8:6D:10:5D:27:A9:03:54:40:E3:E4:2B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D708B8DF9D6D32F44B120
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f1a6f8fa-f70c-3b43-a59d-ecaf41951083.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        35.151.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:70:8b:8d:f9:d6:d3:2f:44:b1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=22da960d-d25e-4a73-83e6-67c936448451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:01:95:58:b4:79:29:01:8a:2b:a7:c1:01:57:
                    3c:fa:24:78:23:11:06:fb:d3:57:1f:ee:30:f8:04:
                    6e:75:e0:62:53:46:f4:43:1f:f4:ae:d0:62:eb:22:
                    b7:c3:05:e0:90:e3:6e:9f:e6:f3:5c:d0:87:0c:d8:
                    67:db:2e:ae:be:89:b3:96:ed:cd:e3:c7:37:2a:76:
                    d4:ba:91:06:b7:01:8b:0e:56:d1:b7:d3:81:19:5f:
                    08:7c:d8:dc:53:ef:c2:5e:58:a5:70:3c:69:68:98:
                    c3:00:b0:01:d8:df:e9:65:6b:1a:86:72:fd:26:48:
                    c4:9d:9d:d9:ac:67:1a:48:be:b1:3e:36:4d:d7:d8:
                    e9:d4:81:83:4f:18:7f:a8:52:2e:30:e4:66:60:2f:
                    6b:d1:ca:6a:0a:b8:c3:ab:41:d4:c0:55:55:e2:56:
                    d0:b0:80:f1:3b:e5:94:a5:ce:74:40:73:f6:f6:02:
                    2a:57:83:19:16:c1:72:58:a1:f9:62:e8:e2:7f:7a:
                    ab:32:d2:a6:f3:9b:d5:cc:c5:49:22:05:43:85:4a:
                    ee:d4:68:71:ae:f4:0b:06:fa:a3:76:23:7e:42:2f:
                    82:e6:33:ca:37:9f:92:7f:6a:a6:99:e7:49:8a:fd:
                    46:d6:e6:49:96:35:6f:79:bf:92:5a:df:44:55:2c:
                    ef:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F8:15:3C:F2:F2:4F:96:C8:6D:10:5D:27:A9:03:54:40:E3:E4:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f1a6f8fa-f70c-3b43-a59d-ecaf41951083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.151.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:9e:e2:fb:3e:64:7a:e8:36:03:f5:da:64:cf:47:7f:72:
         21:15:f2:a3:76:4a:dc:d9:84:d5:6a:e5:88:1f:a4:7b:98:d6:
         f4:ce:b1:76:82:c1:be:b3:70:76:9f:e9:a5:a0:d8:1f:09:4b:
         3e:01:44:6b:e3:e9:0a:7a:ea:c3:15:63:fa:57:5e:f7:54:20:
         64:9b:28:0b:d1:39:88:19:91:82:86:e5:f1:07:8c:74:09:7f:
         28:8c:86:77:f2:93:c8:ed:2d:9f:ca:43:7f:e7:b9:36:cf:0c:
         58:f3:92:a5:44:c4:a4:dc:38:73:30:2d:87:93:67:65:36:ac:
         be:8e:ae:90:f0:90:70:82:e8:86:24:92:d4:76:8e:72:0a:9f:
         05:fc:37:e3:f8:54:2b:79:7a:a1:06:11:aa:35:2f:73:21:e5:
         66:c1:fa:09:68:e7:f1:1a:4a:5a:b7:69:fb:f6:b2:a5:f8:c4:
         b5:9f:5d:f7:33:f8:56:fb:e3:bf:07:e7:15:0e:ed:72:a4:a9:
         b4:41:6f:6a:f6:ba:7d:1e:63:16:60:c9:a7:16:d1:ff:b6:af:
         06:71:2c:16:f9:0e:45:11:78:a5:14:d8:05:c5:65:95:4c:5d:
         2d:5b:ba:9c:dd:56:36:1b:07:6a:79:17:97:36:18:e5:01:3f:
         6d:e1:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:25 2025 by rpki-client