Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f4e616d5-8294-35b9-bbb5-99a15bbb3859.roa
File:                     f4e616d5-8294-35b9-bbb5-99a15bbb3859.roa (raw, json)
Hash identifier:          EQ0lPe1IrgUKIJUSGS9q7S+3rz9/66T3B95d0nEFYkE=
Subject key identifier:   87:84:DF:F2:1C:43:B3:C3:5D:AC:C5:D9:53:68:19:D1:0D:80:13:AE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E1A6D9F104D11A5E2CE20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f4e616d5-8294-35b9-bbb5-99a15bbb3859.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33588
IP address blocks:        35.134.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:1a:6d:9f:10:4d:11:a5:e2:ce:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=b1bb18c6-028e-41c4-ac7c-61bf39dcd351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:de:84:d9:45:88:d7:78:42:ef:c9:d5:e0:42:
                    7e:c7:d9:9c:f7:cf:b3:df:32:d8:32:0a:50:d1:22:
                    c0:ef:e8:9b:3c:bc:7e:1b:d0:01:16:ab:8a:cc:25:
                    40:0e:a7:46:7c:39:80:53:82:51:df:89:b9:07:b2:
                    1e:71:f5:98:47:36:e4:3c:54:3a:cb:4e:de:d1:55:
                    40:62:29:03:71:97:de:f1:d4:7b:c1:66:c8:cf:93:
                    9c:72:ef:1c:03:cd:bb:c1:24:14:79:3c:a9:3c:84:
                    2d:c4:0b:d0:13:6a:1e:60:46:b7:25:3c:1a:88:04:
                    61:86:94:9a:be:20:50:b2:bc:ad:66:05:5c:79:47:
                    a4:27:78:9e:c1:68:d5:f4:64:13:b1:8a:9d:58:6a:
                    ab:3f:2d:87:02:25:30:2b:08:1a:9d:92:ac:e7:c5:
                    45:9f:56:00:39:1a:62:38:cb:04:38:e0:8c:10:b3:
                    c5:f4:f3:b5:1c:65:57:de:69:57:cf:3f:3f:9b:ff:
                    8a:9a:9a:fb:00:46:ac:ff:04:e0:4f:ae:81:1d:8e:
                    56:b4:59:73:71:f6:54:6c:22:51:80:93:59:64:66:
                    32:b2:a3:55:0a:7e:95:c4:e5:ef:89:67:77:32:7e:
                    b7:8d:7b:38:e9:a4:ca:00:8e:ea:a5:11:ed:e4:7e:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:84:DF:F2:1C:43:B3:C3:5D:AC:C5:D9:53:68:19:D1:0D:80:13:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f4e616d5-8294-35b9-bbb5-99a15bbb3859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.134.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3d:3f:8c:c1:18:64:c9:c0:e5:14:72:70:b2:c1:ff:49:02:
         da:9c:f7:3c:74:3e:97:9b:dd:14:5d:ee:d8:25:36:16:00:f5:
         8a:2b:e2:00:74:e7:02:84:4d:0f:b5:53:51:4f:03:d5:85:6c:
         14:de:49:6b:6d:cb:a4:f7:87:72:6e:63:00:fe:83:fe:c6:36:
         56:1d:8c:4b:e8:59:1f:a6:5c:03:43:73:02:03:4a:64:5d:19:
         62:63:db:3b:23:e7:52:6d:03:33:60:48:2a:cb:54:20:9a:6f:
         c2:8f:63:bd:73:95:53:fe:ca:06:3b:80:ce:bb:c2:42:ca:c7:
         ac:a5:ca:5f:0c:72:58:2f:b3:e8:30:df:75:8b:ad:ce:ea:e6:
         25:f8:df:ec:21:f4:fe:fb:9c:3b:b9:e2:a2:b3:e5:0d:bf:25:
         9c:86:61:d5:fd:dc:e3:33:df:41:77:20:cd:53:91:01:78:50:
         5b:7d:27:2f:99:b4:88:6e:12:43:5c:05:f9:c9:d4:99:1b:c3:
         04:bd:54:45:b1:3f:86:4a:5e:fb:ae:3d:c0:ec:d6:7e:08:f5:
         76:28:e8:e7:72:e6:ac:fc:4c:34:c0:1a:8b:29:c8:5c:a9:5f:
         d5:eb:31:77:28:06:1e:d1:fa:e7:0f:9b:86:77:cc:71:35:66:
         cc:9a:06:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:44 2025 by rpki-client