Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/630ef487-9486-3c85-8c5c-2f2942e596de.roa
File:                     630ef487-9486-3c85-8c5c-2f2942e596de.roa (raw, json)
Hash identifier:          fZQIN1WBRvp+WG4B9v5Jv49fU2zGG19ROVa3uwl6WuY=
Subject key identifier:   36:84:E6:E4:FD:9B:C5:5A:D5:12:60:CC:CE:1B:53:83:92:30:64:C9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B18146723C17D4C8EEDE72180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/630ef487-9486-3c85-8c5c-2f2942e596de.roa
Signing time:             Fri 05 Sep 2025 13:28:13 +0000
ROA not before:           Fri 05 Sep 2025 13:28:13 +0000
ROA not after:            Thu 04 Dec 2025 14:28:13 +0000
asID:                     22516
IP address blocks:        35.131.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:14:67:23:c1:7d:4c:8e:ed:e7:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  5 13:28:13 2025 GMT
            Not After : Dec  4 14:28:13 2025 GMT
        Subject: CN=61130858-4580-4307-a423-a4577ff9c305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:2f:76:51:2f:36:8d:9e:4e:71:9a:dd:0f:
                    fb:f9:ee:08:ce:97:96:8d:12:df:04:cb:06:01:d8:
                    27:64:97:9c:61:78:ff:95:1c:a6:86:35:3d:36:e8:
                    64:07:23:4c:cc:ba:bc:0a:eb:5e:97:96:b8:93:74:
                    5b:34:fa:6e:5e:14:fd:c3:00:ff:d7:ea:17:f4:9c:
                    15:9f:40:de:d5:ea:dc:25:62:53:31:f7:81:84:f9:
                    9c:1d:5e:27:8a:ee:1e:24:4a:66:b5:d1:ba:75:9b:
                    1c:cc:59:44:16:0d:d6:83:f1:80:7a:ae:2f:c9:09:
                    9c:9b:a0:e8:04:e5:58:12:34:1b:d2:67:36:c4:fa:
                    b8:22:9a:a7:e3:a6:30:cf:c6:d9:8a:2c:8d:d9:93:
                    a4:ef:df:2d:bb:c4:a8:7a:fc:3b:87:92:f6:0f:78:
                    f3:29:7e:3d:eb:0e:a9:51:18:ba:eb:ae:d2:7e:28:
                    bc:b3:34:ed:1f:ad:9d:e3:91:6e:99:46:92:ec:e9:
                    52:10:d6:e8:72:9b:48:e4:44:4b:41:d0:cf:eb:05:
                    41:b0:7b:c1:ef:8d:52:13:5a:72:ae:bc:dc:00:90:
                    e6:a1:a2:47:49:8b:7c:0a:48:02:3f:da:ee:73:2a:
                    86:3d:19:cd:9a:34:2b:2c:0e:be:7d:bb:13:81:5f:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:84:E6:E4:FD:9B:C5:5A:D5:12:60:CC:CE:1B:53:83:92:30:64:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/630ef487-9486-3c85-8c5c-2f2942e596de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.131.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:68:7a:7b:4e:63:4a:5e:b6:f7:4e:8a:c4:72:6b:01:55:d2:
         c2:96:b4:e2:88:de:40:f2:83:b4:8b:13:09:a5:1d:d4:6d:2c:
         94:ef:fc:af:22:85:aa:39:fe:f9:47:1a:25:80:41:b6:e6:d9:
         9b:fd:20:f7:45:01:06:71:a9:e4:68:98:bf:19:7e:9e:8f:3a:
         cd:e7:8d:b9:be:2c:01:73:0a:8d:ad:60:d8:94:96:57:46:a5:
         36:53:56:9f:8d:ea:e8:62:fc:af:a5:d4:44:59:9b:be:eb:7b:
         1e:db:33:a8:57:90:04:77:95:7a:52:2c:bb:14:e1:5f:53:a0:
         ed:21:ee:7b:f6:6b:b7:4e:ab:ef:d1:8a:89:a4:8b:a3:3a:c4:
         7e:af:58:2d:8d:85:26:3c:17:99:ad:27:73:60:cc:3d:21:15:
         6b:e7:34:50:9a:94:8a:4f:ae:fe:4e:d6:c2:7a:51:f5:1e:0f:
         a2:ce:56:6b:ae:16:c7:0c:31:a5:ff:db:99:90:2d:64:25:c9:
         5b:26:a9:17:23:31:b1:62:fb:53:c2:20:3b:83:a9:2e:d2:5d:
         be:fa:76:98:a3:d8:78:96:21:14:15:85:e4:a0:b0:14:ec:6c:
         b8:d7:b3:a9:34:66:c5:ae:21:bb:75:61:20:82:5c:91:6a:66:
         f7:07:dd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:18:48 2025 by rpki-client