Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ba517297-3739-3db5-831d-f2a16396227e.roa
File:                     ba517297-3739-3db5-831d-f2a16396227e.roa (raw, json)
Hash identifier:          FK+RjYC++JPo2zVejxOJcvqEzZ/qDFuhElY04etTNoQ=
Subject key identifier:   78:B2:41:EE:78:9D:51:3D:36:76:E4:80:B7:57:79:74:A2:A7:2E:A3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3727398FE5EC0BB4B6B0180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ba517297-3739-3db5-831d-f2a16396227e.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        35.129.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:73:98:fe:5e:c0:bb:4b:6b:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=bf0a22ca-073c-4786-82cc-b89e7c2bb87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:34:82:e1:80:8d:fa:92:bd:6f:13:69:8d:
                    b0:99:61:14:42:e2:e8:76:92:6b:ca:27:d8:bd:00:
                    c1:81:bc:85:a2:c6:d3:f8:3e:81:f4:1b:67:11:01:
                    1f:4f:7d:e3:bb:c5:b3:18:97:5e:7a:07:16:08:7b:
                    71:f0:7a:07:25:fe:a6:7b:46:8c:c9:33:27:6d:6f:
                    b4:0a:f6:fd:39:86:bf:49:37:11:d6:cb:65:b5:43:
                    f4:87:d1:ad:51:10:a9:70:b6:1d:83:b2:40:7d:d9:
                    7a:a5:ee:c3:ee:db:22:06:c7:ca:b3:36:5a:68:ef:
                    e5:93:ea:ed:84:f6:af:e7:26:fd:9a:cf:1c:30:8f:
                    27:23:32:4e:66:3e:94:fd:1a:17:40:cc:3b:62:4a:
                    6d:57:fd:eb:ea:dc:ec:a7:21:62:b0:1b:26:4a:43:
                    7a:d1:cb:ac:1a:c7:20:30:b1:fb:dd:08:b5:5a:01:
                    3b:c8:a6:b9:89:ce:92:5b:8c:cc:8a:96:ba:2c:f7:
                    77:44:17:df:07:eb:a9:84:26:a4:cf:5b:b9:88:24:
                    6b:52:c4:bc:02:6d:54:ec:06:d0:34:4d:bf:41:e4:
                    26:df:e8:47:ef:a1:a0:db:15:22:e5:24:bc:e3:96:
                    36:9a:25:2c:34:9f:77:fe:33:74:c8:74:89:da:99:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B2:41:EE:78:9D:51:3D:36:76:E4:80:B7:57:79:74:A2:A7:2E:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ba517297-3739-3db5-831d-f2a16396227e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.129.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e5:fc:78:a5:44:50:82:c2:b1:a3:db:5b:15:2a:1f:f8:42:
         96:69:80:89:92:1c:89:b5:e7:3f:dd:9c:08:79:d6:19:38:57:
         70:0a:ea:e6:7e:0c:f0:e3:9d:94:24:49:10:55:80:f4:1d:f1:
         dc:8f:17:65:6c:64:44:18:4e:07:f2:02:03:74:fc:db:ad:b4:
         00:51:bd:c6:1e:27:55:bf:87:8a:18:50:eb:16:e0:76:e7:e0:
         dd:61:e4:fe:07:51:5b:4e:7e:ee:21:82:89:36:8c:a2:75:da:
         aa:48:51:48:80:f9:1b:a0:88:98:f0:77:64:80:62:34:9c:35:
         73:35:ab:ea:89:a9:fb:32:44:89:70:a7:e9:8a:d8:2a:3f:58:
         73:6c:8e:b9:51:2b:0c:d9:a1:d5:ba:c7:09:0e:ca:05:32:d6:
         61:4f:31:0e:96:44:98:4b:5b:0d:fa:ad:44:d3:7f:8b:b0:9b:
         47:ff:71:70:fb:3e:37:64:b3:75:f6:ba:56:22:0e:9c:2d:62:
         8c:ab:0e:a2:4a:28:17:cb:08:4b:ab:f1:97:74:a1:a7:36:5a:
         11:4d:37:de:50:cd:84:2a:52:b9:e3:78:ea:32:01:84:f8:4c:
         42:fb:29:b6:c0:44:ee:ea:35:69:47:41:50:f8:cb:2b:3f:85:
         d7:e3:6b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:19:22 2026 by rpki-client