Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/911e1824-630a-3784-b2e8-69d7338b2da4.roa
File:                     911e1824-630a-3784-b2e8-69d7338b2da4.roa (raw, json)
Hash identifier:          J9A3Z2glFsPqB+dwO3sLdTYF1wLUJrbV0guh68MYQ4g=
Subject key identifier:   AB:84:99:7A:FC:F1:AE:D0:42:AE:70:5A:96:FF:A3:B2:61:99:30:CB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E5FC5054D9A6A48A03580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/911e1824-630a-3784-b2e8-69d7338b2da4.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        35.151.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:5f:c5:05:4d:9a:6a:48:a0:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=094dcc58-b9e4-462b-98bc-bd9ceb95630c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:2c:e7:c0:90:a7:cc:2a:4e:6e:b3:3c:90:
                    ba:5b:c5:9e:94:6a:4c:c3:1c:05:4c:23:45:db:e2:
                    f8:97:57:5b:bb:6c:92:00:09:ba:0f:bf:cb:0a:59:
                    e3:9e:db:17:c2:00:73:f4:45:86:ae:60:1a:6a:39:
                    fb:4e:2b:52:3d:d6:ce:35:0b:22:d7:7a:a0:60:af:
                    cf:e4:54:d6:c7:be:02:8a:3f:1e:11:1e:bc:cf:7c:
                    96:77:49:f0:f9:ed:12:82:d2:72:59:51:f6:3c:7e:
                    e2:08:6e:47:79:73:fe:23:42:57:cb:02:ca:5e:0e:
                    9a:d6:b8:7e:c5:21:e7:6f:c6:9d:d7:2d:87:02:c5:
                    0c:b3:d0:c9:bf:f5:48:c5:62:ad:1a:67:bb:9f:44:
                    29:67:f7:73:ff:20:40:dd:84:6a:4f:74:63:4d:92:
                    96:74:8c:52:f0:33:42:d8:e6:ce:3f:ee:9b:19:31:
                    24:d8:61:0f:18:f9:e3:7f:55:52:3b:1b:54:b5:4a:
                    be:83:22:61:a8:e5:53:ba:73:50:0c:ec:63:6b:5a:
                    96:7c:7f:c7:a6:11:f0:26:db:d6:b3:5b:2c:1c:55:
                    ff:8d:b8:00:b4:c1:5c:80:7e:32:54:15:66:b8:a0:
                    49:aa:15:c6:32:c2:cb:36:43:37:7f:7f:6f:bd:f8:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:84:99:7A:FC:F1:AE:D0:42:AE:70:5A:96:FF:A3:B2:61:99:30:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/911e1824-630a-3784-b2e8-69d7338b2da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.151.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7c:d2:7b:56:ce:1a:52:8c:93:5f:d0:b3:05:df:5f:95:c6:
         90:f2:5e:6d:9f:f2:16:e5:ce:bd:5d:18:04:03:be:ad:d3:74:
         04:80:e0:b1:9a:68:13:33:85:a5:09:64:dd:f0:ca:0b:6c:d1:
         1b:a3:74:4d:67:69:2d:2f:2f:57:fe:58:39:cb:bb:10:7b:cb:
         c8:31:13:3c:99:a1:3f:57:12:19:79:c0:90:f7:d7:59:05:ee:
         ec:bb:c4:5e:77:6b:45:c8:90:bd:1a:ad:91:53:20:b0:42:0c:
         e0:11:08:10:aa:3a:62:13:8b:25:95:5c:de:a0:60:cc:d5:6f:
         9e:ca:92:b4:bc:11:df:ef:3f:27:47:3f:8b:ba:42:ac:3c:77:
         2b:9a:e4:89:c0:50:82:d5:29:90:02:85:78:d7:62:ca:63:02:
         9b:d9:36:2d:6b:ea:5b:d3:ea:cc:ad:da:e1:e6:bb:3b:ba:ee:
         c8:24:51:b5:fb:2a:8e:32:33:4c:d6:fc:39:be:31:1a:8f:ad:
         be:93:a1:eb:3f:cf:9a:c2:a6:a2:33:79:f1:9a:e6:21:be:af:
         83:0b:a0:92:7b:d1:c0:36:2b:c8:c8:7f:2f:cd:b8:a1:f5:06:
         8a:e9:fe:fb:47:bb:ea:ec:50:8b:96:3d:d0:5c:64:b6:53:a0:
         ad:cb:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:59:44 2026 by rpki-client