Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/22a26360-a545-3466-9a2b-4898c9b1ebd9.roa
File:                     22a26360-a545-3466-9a2b-4898c9b1ebd9.roa (raw, json)
Hash identifier:          xtBKLDFHxxlI9tSFKxnRE/1iz8U/ddWoSqCQLWN/7wM=
Subject key identifier:   EF:FD:7E:B2:97:A7:5A:C3:1A:CC:D7:68:30:9E:64:98:F5:7F:E5:C8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FD0CA275A5B8641C98680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/22a26360-a545-3466-9a2b-4898c9b1ebd9.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        35.149.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:d0:ca:27:5a:5b:86:41:c9:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=fc748240-a1fe-4637-a427-e758ec406d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:e1:ef:5d:19:8d:23:79:1b:06:f7:83:2e:
                    23:67:39:83:0c:e3:70:b6:1d:53:ab:31:bc:6d:3b:
                    78:a4:df:a9:cc:37:ad:43:47:66:de:90:a5:3f:2a:
                    34:0f:1c:fe:91:ce:52:c1:de:91:32:b8:16:8e:1f:
                    f8:fb:c4:86:11:df:85:ca:81:f2:ad:3b:ac:00:85:
                    fe:5d:74:ef:72:74:af:98:42:35:a2:f3:1c:62:c3:
                    fe:9d:50:2f:9c:8e:87:ef:74:1b:df:c7:f7:1f:00:
                    6b:a2:c6:c4:92:b7:6d:81:a4:0c:b9:bf:1c:de:9b:
                    f7:30:ff:79:8f:9e:ee:ed:b4:7b:ea:da:3d:b7:30:
                    cc:fb:af:e9:79:14:37:60:4a:24:f4:7f:60:58:54:
                    24:8a:84:0d:54:19:6b:1d:d3:36:57:a2:7a:22:31:
                    1e:29:26:02:60:77:85:a1:7b:59:55:7f:c1:0a:f0:
                    f5:e1:a1:8d:36:d7:b9:b4:72:92:81:f3:e6:ac:bc:
                    78:04:0f:45:6d:5a:b1:ec:91:fd:22:73:b8:23:1e:
                    ca:a9:23:f2:40:2f:b7:44:e7:78:64:cd:c8:25:48:
                    a2:d3:41:ea:bd:ec:73:08:db:e1:f2:98:f8:1e:cc:
                    ba:18:14:c6:fe:01:00:b5:42:ee:8b:5d:14:4c:64:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FD:7E:B2:97:A7:5A:C3:1A:CC:D7:68:30:9E:64:98:F5:7F:E5:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/22a26360-a545-3466-9a2b-4898c9b1ebd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.149.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:e8:a4:4b:ab:ff:0f:65:20:fd:67:9d:00:6d:ca:78:a3:
         37:61:db:d9:8b:5d:05:ca:cc:37:f0:be:62:c1:83:8d:96:c1:
         cc:33:d7:6b:82:42:21:8d:60:db:40:d7:f2:10:e8:f4:67:f6:
         f7:10:ba:ba:45:96:44:ce:5d:eb:67:d1:30:c0:7d:64:f7:6d:
         a1:a9:a3:40:88:69:aa:a0:b2:a4:4c:01:5f:fc:3c:e7:2f:a6:
         2c:06:d0:29:d9:cc:54:30:9d:40:c6:07:7b:66:71:5f:f4:e2:
         91:16:9c:e6:07:0b:a1:d5:e1:c8:fd:2b:03:06:ce:e5:f4:d6:
         4e:cf:f7:8f:61:97:88:cb:5a:47:4a:a6:8f:0f:ea:b3:48:79:
         65:25:72:3e:f1:10:dd:e0:1d:ec:58:0b:67:86:d0:b2:14:dc:
         46:88:9d:6f:97:9e:3e:ed:c4:2a:43:36:73:ed:0e:7b:a2:d3:
         c3:40:8b:96:f0:e5:22:c0:f1:88:fc:a2:cc:8a:4b:b1:72:d1:
         69:84:22:cc:8b:44:9b:46:99:f9:76:b6:52:c1:83:ce:f8:d9:
         10:98:08:82:de:56:db:a8:0e:f9:c6:3e:75:c0:e1:25:b2:7e:
         68:57:e1:54:df:c5:9f:bb:52:b2:cb:7b:c7:ed:96:72:fc:0d:
         eb:86:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:48:42 2026 by rpki-client