Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ff52c796-2a7a-38ca-bca4-ac03c5feb0e9.roa
File:                     ff52c796-2a7a-38ca-bca4-ac03c5feb0e9.roa (raw, json)
Hash identifier:          4Uzoiu1q+RjJvrv3KqqiQB/fns6qJGwx/RklyQcyTHc=
Subject key identifier:   20:8F:80:6A:A3:B6:97:5D:93:69:09:E1:90:52:0F:94:1B:7F:F9:84
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F4F07E59B93198CB0EF3D7800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ff52c796-2a7a-38ca-bca4-ac03c5feb0e9.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     23222
IP address blocks:        35.131.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:e5:9b:93:19:8c:b0:ef:3d:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=1f30dd6a-03d3-42da-b459-89e70acb30bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:43:d0:e5:be:c5:8b:4d:01:cc:74:4a:1c:
                    77:c5:5a:ff:37:e6:d9:57:2d:0a:b9:f9:dc:cc:22:
                    f9:6f:2e:4b:3c:21:db:67:14:19:9f:da:06:a0:b9:
                    b3:af:d4:d3:03:36:85:09:76:45:64:af:1a:0d:f9:
                    f0:bd:65:75:73:12:3a:3e:b4:22:5a:c1:89:c5:1c:
                    39:bb:99:42:1e:34:00:53:62:4f:ff:05:8e:3c:9f:
                    c9:dd:ed:96:75:c1:8c:9c:60:46:19:70:92:fc:03:
                    7e:03:8e:12:bf:42:ae:72:1b:f6:0f:85:75:ec:43:
                    a2:cc:e8:10:6e:6b:9b:59:d9:d7:cc:95:d4:9b:12:
                    05:f7:38:8d:ea:dd:cc:20:c9:95:86:b3:d7:4b:c2:
                    8d:6c:78:9f:ba:2e:43:49:6e:07:28:e6:b0:76:ba:
                    9c:de:76:b4:a9:06:1b:a7:f6:a6:13:15:f6:00:9a:
                    7e:e5:70:42:9e:51:70:cb:20:99:1d:36:b9:4b:5c:
                    30:9e:a6:93:2c:07:28:09:36:47:e7:b2:1e:53:5c:
                    0a:90:9f:3a:c2:d4:2b:38:d4:51:aa:b0:b3:2b:6f:
                    2e:06:3c:62:8c:99:fd:b5:66:1e:68:3a:29:b2:f1:
                    a6:e1:d6:2a:41:5a:08:21:c5:07:d0:d4:16:d6:aa:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8F:80:6A:A3:B6:97:5D:93:69:09:E1:90:52:0F:94:1B:7F:F9:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ff52c796-2a7a-38ca-bca4-ac03c5feb0e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.131.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:25:0c:49:e9:ea:3c:fc:6c:f4:39:e1:58:e9:c1:79:9b:7a:
         c7:68:73:93:c5:4d:05:fd:89:7c:d2:14:8c:29:ce:1f:d6:5c:
         ea:a8:2d:11:55:de:18:c3:fd:15:62:ae:ba:86:1d:4e:80:44:
         6c:68:8e:5b:ef:4e:2d:97:40:15:ca:22:c5:28:0c:67:b3:5a:
         29:21:47:79:ad:73:ff:b3:ba:d8:1a:5e:45:db:5e:cc:7a:2d:
         fa:26:f3:69:e2:92:73:49:41:bd:31:39:b9:19:26:16:b4:36:
         22:0b:9c:c3:8d:72:8d:78:19:52:fe:1b:c8:d0:05:16:65:87:
         8e:62:18:29:6a:25:1d:60:a2:df:28:aa:be:b8:e0:64:55:76:
         0a:9d:3f:67:39:0d:8f:81:dd:03:60:50:42:c0:0f:ae:3c:f3:
         f0:12:68:59:bb:b4:92:fd:30:15:60:2e:22:dc:6a:bc:a1:c9:
         08:3f:3e:a6:0f:ed:7e:41:fc:20:11:01:c7:ba:7e:d8:47:27:
         60:da:98:22:ef:9d:bc:15:c9:b9:e7:38:68:97:6b:c3:03:5e:
         b8:e8:e2:94:34:5e:60:da:e5:3f:2f:32:51:7b:67:a1:4a:80:
         a7:e4:ac:46:84:8f:c0:4a:1c:46:3a:2c:80:76:6c:72:62:01:
         bc:29:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:31:55 2026 by rpki-client