Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0c9713c1-5150-3789-859c-2351cf7b7cde.roa
File:                     0c9713c1-5150-3789-859c-2351cf7b7cde.roa (raw, json)
Hash identifier:          Qj2Jk/9xN44amexk2ViDzGppGRwfpHOBRbYjpuypPw4=
Subject key identifier:   85:27:7F:42:98:DC:29:F9:8A:6C:9C:2F:E8:EB:A8:40:F1:33:B3:70
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F590894D938626BB1B06FF2C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0c9713c1-5150-3789-859c-2351cf7b7cde.roa
Signing time:             Wed 30 Sep 2026 14:59:41 +0000
ROA not before:           Wed 30 Sep 2026 14:59:41 +0000
ROA not after:            Tue 29 Dec 2026 15:59:41 +0000
asID:                     11427
IP address blocks:        35.135.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:08:94:d9:38:62:6b:b1:b0:6f:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 30 14:59:41 2026 GMT
            Not After : Dec 29 15:59:41 2026 GMT
        Subject: CN=2fa46c29-548e-4241-bd6d-802a440603ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:f4:90:ea:f7:8e:3f:d8:8d:9c:88:21:69:
                    bc:67:27:ae:89:e4:48:2d:6d:42:86:d8:1d:db:2d:
                    cc:4a:fb:7d:10:64:d8:e9:ca:59:e5:9d:0a:8e:af:
                    d3:2e:e8:75:42:c6:29:07:bc:5d:d4:24:f4:c5:28:
                    55:83:cb:3d:73:ca:5b:aa:6d:59:0a:75:cd:f7:30:
                    9c:f9:e3:a7:38:c2:9c:56:87:4b:45:5b:6b:6c:b3:
                    c7:f3:f4:99:77:f2:dc:ff:b4:06:10:e9:85:c8:1a:
                    46:41:b2:48:89:ec:28:83:e3:c4:7f:2c:7a:de:56:
                    b5:0a:f4:36:72:b9:0d:a5:cc:6b:a6:a0:bc:6d:c6:
                    b2:37:be:24:91:39:0b:58:04:45:06:68:7a:44:25:
                    d5:8f:c4:c6:a8:ba:7d:9b:84:a6:2e:0f:24:17:3e:
                    ed:6c:75:4a:96:2b:2a:c4:06:5c:fa:86:2d:51:fd:
                    66:9f:f0:83:4c:88:eb:4a:c3:30:76:cd:d1:43:42:
                    4d:80:26:f1:40:4a:5e:4b:67:94:52:f5:37:f3:fb:
                    08:44:78:52:6e:5f:37:a8:7e:62:ec:97:04:8b:2e:
                    0d:26:5e:f2:0d:73:4d:a3:e1:9f:73:17:56:78:65:
                    17:45:b9:3b:0c:9c:70:74:b6:d4:8c:8a:e2:d7:6e:
                    4c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:27:7F:42:98:DC:29:F9:8A:6C:9C:2F:E8:EB:A8:40:F1:33:B3:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0c9713c1-5150-3789-859c-2351cf7b7cde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.135.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:84:65:f1:8f:08:cc:fd:1d:f5:3b:26:ca:1f:0f:14:e0:74:
         97:44:33:19:48:3a:72:3c:48:84:2e:3a:4e:f5:19:16:88:93:
         68:37:5b:69:25:ac:00:93:a4:f9:7e:4e:6f:7f:6d:03:d5:40:
         3b:57:77:e2:25:a4:70:f9:71:ce:e0:aa:ba:7c:3f:20:ca:d4:
         16:f4:33:6d:9b:37:34:1e:1e:19:c3:af:7e:30:1b:2b:35:bc:
         06:82:0f:2f:80:c5:2e:a8:8a:3d:19:12:2d:68:4c:bf:34:4e:
         82:34:b8:1b:ce:8d:e2:c9:d1:a6:f2:b2:0a:03:d5:43:4f:44:
         c8:00:2a:7f:a3:72:7c:91:0f:13:4f:73:7f:88:94:f5:5c:22:
         84:9c:0b:d7:ec:5f:ef:3e:23:a6:e6:3c:fd:29:96:bc:d9:3a:
         94:45:35:a8:f2:da:55:cf:9d:b4:e6:5a:50:fb:eb:89:ec:b2:
         b1:78:14:5f:05:f8:74:e9:f6:78:f7:fc:5f:3f:7d:9d:36:23:
         b4:b1:bb:d1:fe:94:10:61:2a:61:d3:18:90:61:5e:c9:18:87:
         4e:ef:01:9c:ae:ec:79:38:8d:2e:e8:f9:23:8c:3d:88:27:40:
         f6:4e:6e:03:ca:b4:be:18:6b:bd:42:2c:fb:d8:68:fd:76:58:
         a1:83:e1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:09:46 2026 by rpki-client