Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/defb1855-90d4-3255-af3e-6adae8b6e0fc.roa
File:                     defb1855-90d4-3255-af3e-6adae8b6e0fc.roa (raw, json)
Hash identifier:          BYddMkPMwdB1hDWeWAaqt30Tj1DsvP/aCYx2/Dbyt6U=
Subject key identifier:   D1:CA:3C:EB:1C:DF:AC:58:56:BB:F0:56:7F:F5:A4:E5:C5:89:86:89
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC372341B2398E7AB865CAEC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/defb1855-90d4-3255-af3e-6adae8b6e0fc.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        35.151.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:34:1b:23:98:e7:ab:86:5c:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=f710a2e8-f0ef-40a0-9b85-b15f865cf621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:b8:85:da:9c:27:a5:e1:95:34:b3:a3:0c:
                    ae:f4:19:b0:10:8a:a8:c7:97:8b:58:4d:61:5e:ed:
                    40:bb:3f:a1:83:3b:09:17:16:13:82:2d:3a:6d:48:
                    51:33:13:2e:b7:81:e1:f5:8b:55:63:4a:8a:02:ef:
                    44:2b:97:6b:58:30:b4:d2:19:ef:7d:ff:87:d4:1a:
                    31:c6:76:64:4e:0a:b4:e8:91:26:63:bd:5f:26:76:
                    04:14:24:07:89:fc:42:fd:ba:d3:c5:1c:73:c4:5d:
                    5b:f6:46:81:64:a9:3a:c6:da:ba:a1:07:cb:65:af:
                    c8:3b:6b:20:54:24:2c:44:c6:50:e1:a5:fb:a0:53:
                    7d:70:b8:f6:55:6a:ef:4d:be:f8:eb:7f:56:44:36:
                    e2:d5:eb:50:74:27:54:70:bc:69:61:3d:28:c5:69:
                    85:34:ac:5f:66:5d:9c:8e:bb:c5:1b:24:5d:b7:c6:
                    34:c5:15:df:cc:57:6c:d8:00:d5:5a:8f:3b:66:94:
                    2f:ac:cc:7b:d3:1c:65:96:53:7f:cf:3e:cb:9a:3d:
                    41:7a:cd:60:01:5a:6a:76:70:55:01:06:9a:59:e9:
                    7e:b5:67:e2:23:82:ef:58:a5:eb:b6:1a:c9:74:1a:
                    94:94:be:1b:ff:a8:a2:6f:b7:e9:28:d5:60:9d:c7:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CA:3C:EB:1C:DF:AC:58:56:BB:F0:56:7F:F5:A4:E5:C5:89:86:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/defb1855-90d4-3255-af3e-6adae8b6e0fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.151.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:8e:5e:d4:73:95:b4:3d:fe:b5:3f:08:62:d7:ac:1a:de:ca:
         38:6a:90:db:fb:11:36:2d:6b:b4:12:b5:5c:96:fe:64:f8:db:
         f8:cb:95:78:8b:86:cc:92:fd:75:e0:61:ea:1b:35:93:38:69:
         d8:a4:f1:77:10:82:eb:72:b4:d5:72:db:06:c1:72:9d:15:46:
         fe:be:6a:c6:ca:5d:3a:71:f5:95:b2:76:86:57:63:0d:5d:b9:
         6d:26:0f:54:fd:d4:77:f2:84:9e:fd:1b:cf:0e:c8:fd:25:5b:
         0a:be:b8:7d:00:73:c0:bf:5a:52:92:af:ca:72:3c:75:2f:5f:
         14:53:d7:92:04:67:ab:ab:15:41:7e:35:f6:71:32:b5:f9:aa:
         19:e6:2f:30:de:b4:b1:a0:ed:e2:1e:99:d0:12:74:35:e5:dc:
         ae:91:46:ed:aa:df:93:96:fa:70:74:79:10:7c:ff:2e:c7:7a:
         28:fe:ac:54:2b:d7:54:65:2e:61:29:5f:54:9c:b5:5b:c8:44:
         a6:9f:cb:e6:6a:bf:b5:2b:50:3a:d3:67:cb:ab:4e:01:d7:1a:
         5f:ee:65:18:65:bb:28:4a:28:3c:22:f8:ed:c0:1d:52:e3:2f:
         46:57:e3:b5:8a:27:39:c8:d0:05:4d:5b:e2:74:df:41:2c:6a:
         d7:ae:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:15:45 2026 by rpki-client