Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f4e616d5-8294-35b9-bbb5-99a15bbb3859.roa
File:                     f4e616d5-8294-35b9-bbb5-99a15bbb3859.roa (raw, json)
Hash identifier:          1knWLQiAF6VOc8c1yrZ3uWPDkTqtRhGhu6R4C2HNTZM=
Subject key identifier:   16:5D:67:66:11:AC:1D:99:AD:CF:B6:36:48:61:07:A5:24:C6:EA:B1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E65C218773660DBA19300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f4e616d5-8294-35b9-bbb5-99a15bbb3859.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     33588
IP address blocks:        35.134.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:65:c2:18:77:36:60:db:a1:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=1dac3903-5561-4224-bb2d-8f69a7f7742f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:35:66:b0:d2:cf:47:54:e2:cd:87:19:17:
                    50:ae:23:4f:2b:f3:02:8b:30:23:3d:d9:5f:c5:38:
                    36:b3:dd:94:c3:1e:9b:e2:b7:8a:a4:6f:b6:2a:cd:
                    7e:f6:9e:18:c8:64:0b:33:6c:b2:66:87:33:6f:8a:
                    85:35:3d:a7:ee:64:a9:be:21:7b:2a:4d:10:b6:41:
                    f6:b0:24:13:2b:d7:78:c3:fe:a6:98:d2:bc:c9:8d:
                    6e:14:38:b9:d3:de:02:da:0b:41:28:1f:5e:bd:06:
                    a2:65:a0:c2:47:c9:3c:2a:8b:8e:e7:c9:43:08:ab:
                    e0:72:36:34:e7:52:e4:d6:86:11:e0:69:95:e8:3c:
                    77:36:59:2d:13:45:cf:41:e5:ba:3a:1e:b6:7d:e0:
                    79:05:3d:f4:d7:c2:cd:86:93:1b:7c:6f:e2:37:8b:
                    d9:e4:c0:7d:7c:42:8a:6f:f3:f7:49:ea:bc:75:08:
                    4f:d0:db:34:d5:ab:4b:c2:10:90:d2:ca:cf:cc:f3:
                    d0:88:79:a2:26:1b:48:0c:fe:5e:be:b9:59:8a:7f:
                    ec:cf:d8:1c:5a:48:d0:46:bd:e7:96:ea:74:85:3c:
                    1a:39:55:2a:41:95:da:9b:67:0d:86:11:cf:ca:97:
                    f0:1a:df:84:9c:d6:f6:04:0a:ea:c6:17:2a:f7:58:
                    f4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5D:67:66:11:AC:1D:99:AD:CF:B6:36:48:61:07:A5:24:C6:EA:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f4e616d5-8294-35b9-bbb5-99a15bbb3859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.134.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f0:e7:57:1a:84:6e:57:6e:99:33:c0:42:13:4f:99:cc:47:
         a0:bc:cd:36:33:f6:0e:7b:77:cf:b2:38:0c:b2:4a:1a:96:28:
         b8:4b:f1:bd:91:1c:47:64:f1:f3:cc:a4:e4:16:9b:fa:7e:4d:
         6c:bc:c9:2e:1b:99:8f:a3:7d:76:b8:3d:6e:dd:1c:96:f8:36:
         12:54:4d:bd:6c:a2:0c:07:9a:82:f6:26:5a:6d:c5:47:fc:cc:
         57:30:8a:0e:fb:42:52:39:bc:e3:1b:58:fb:55:f2:49:cd:97:
         54:5b:9e:bd:f1:39:8d:d7:f8:c4:61:f9:c5:81:54:76:6c:a1:
         dc:fc:7d:a2:4b:32:16:e7:0b:16:b8:7c:3f:98:c6:6e:a2:a0:
         d0:e5:5e:e9:1e:82:84:11:1a:e8:07:6f:4b:13:66:0f:b1:3f:
         23:3a:97:09:5c:32:5c:14:97:d3:35:5f:f7:7f:36:80:03:ec:
         77:15:01:59:96:78:3a:2a:6c:f2:c6:cb:62:2c:99:ab:0f:c1:
         32:95:db:62:da:e3:d5:b8:4c:03:b8:e3:95:4b:63:25:45:5f:
         de:a3:e2:df:04:5f:e1:a5:87:2e:d5:91:71:64:f9:ca:94:7d:
         a7:f5:e3:62:f5:d1:07:5f:7b:3b:2d:85:ff:f6:c0:7e:87:5e:
         c3:47:9f:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXmXCGHc2YNuhkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
MWRhYzM5MDMtNTU2MS00MjI0LWJiMmQtOGY2OWE3Zjc3NDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkic1ZrDSz0dU4s2HGRdQriNPK/MCizAjPdlf
xTg2s92Uwx6b4reKpG+2Ks1+9p4YyGQLM2yyZoczb4qFNT2n7mSpviF7Kk0QtkH2
sCQTK9d4w/6mmNK8yY1uFDi5094C2gtBKB9evQaiZaDCR8k8KouO58lDCKvgcjY0
51Lk1oYR4GmV6Dx3NlktE0XPQeW6Oh62feB5BT3018LNhpMbfG/iN4vZ5MB9fEKK
b/P3Seq8dQhP0Ns01atLwhCQ0srPzPPQiHmiJhtIDP5evrlZin/sz9gcWkjQRr3n
lup0hTwaOVUqQZXam2cNhhHPypfwGt+EnNb2BArqxhcq91j0UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBZdZ2YRrB2Zrc+2NkhhB6UkxuqxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjRlNjE2ZDUtODI5NC0z
NWI5LWJiYjUtOTlhMTViYmIzODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI4bAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHw51cahG5XbpkzwEITT5nMR6C8zTYz9g57d8+yOAyyShqWKLhL8b2R
HEdk8fPMpOQWm/p+TWy8yS4bmY+jfXa4PW7dHJb4NhJUTb1sogwHmoL2JlptxUf8
zFcwig77QlI5vOMbWPtV8knNl1Rbnr3xOY3X+MRh+cWBVHZsodz8faJLMhbnCxa4
fD+Yxm6ioNDlXukegoQRGugHb0sTZg+xPyM6lwlcMlwUl9M1X/d/NoAD7HcVAVmW
eDoqbPLGy2IsmasPwTKV22La49W4TAO445VLYyVFX96j4t8EX+Glhy7VkXFk+cqU
faf142L10Qdfezsthf/2wH6HXsNHn70=
-----END CERTIFICATE-----
Generated at Mon Oct 19 12:47:58 2026 by rpki-client