Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7f6d97f4-cd5e-327c-9aff-f9f1c0010fed.roa
File:                     7f6d97f4-cd5e-327c-9aff-f9f1c0010fed.roa (raw, json)
Hash identifier:          lxXrZOhM951KVZcLMzpk0t/ndxnAPp4HPmm20K/dgC0=
Subject key identifier:   61:52:57:28:35:5D:5C:C0:7F:E7:7D:31:1A:29:A6:DD:23:06:5F:9D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AB42B57EFEDECC0D205CEB800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7f6d97f4-cd5e-327c-9aff-f9f1c0010fed.roa
Signing time:             Thu 31 Jul 2025 18:33:36 +0000
ROA not before:           Thu 31 Jul 2025 18:33:36 +0000
ROA not after:            Wed 29 Oct 2025 18:33:36 +0000
asID:                     20115
IP address blocks:        35.144.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:2b:57:ef:ed:ec:c0:d2:05:ce:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 31 18:33:36 2025 GMT
            Not After : Oct 29 18:33:36 2025 GMT
        Subject: CN=d36333e8-ddc2-4423-97d3-aeb342bfc0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ab:d3:d0:a5:10:f3:72:91:fe:25:66:ff:8d:
                    07:cb:89:26:f4:f8:c6:15:07:57:d7:db:d4:85:d9:
                    c0:e4:d9:5c:9f:b3:6a:57:fb:81:11:28:66:38:62:
                    85:e5:61:f6:ab:04:6f:79:dc:56:cf:b1:75:4a:a0:
                    ef:b1:90:4b:78:81:5f:1f:03:41:be:8e:08:d6:ce:
                    c4:92:0f:1e:4d:d6:8c:71:2d:00:af:d0:de:e1:61:
                    2a:d7:79:9b:ce:43:8d:1a:02:c0:fe:2c:ad:6e:67:
                    ff:4d:a4:e8:84:21:d3:34:b0:b6:52:30:f5:91:44:
                    74:c0:a7:a9:e7:4b:10:ab:86:65:b8:b7:c1:03:fc:
                    0c:b5:42:c4:61:8d:96:b3:ef:f7:47:90:ac:b4:34:
                    58:1f:98:70:70:2f:3d:a7:f2:d6:5e:da:29:bb:65:
                    70:5b:83:9b:6e:1b:52:10:a2:f2:b9:f8:db:cc:2e:
                    93:92:1d:54:f8:c6:ef:ee:3d:07:ad:6d:9a:13:8a:
                    37:c9:f6:f2:cf:39:1b:31:28:bd:05:4a:00:fb:46:
                    86:ed:01:a2:5d:79:c4:bf:92:ea:19:4d:89:84:a2:
                    ac:e1:01:50:6e:0c:bc:ad:6c:57:99:e2:c2:57:50:
                    06:4b:4c:02:87:ac:f3:3c:87:06:15:17:06:20:6d:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:52:57:28:35:5D:5C:C0:7F:E7:7D:31:1A:29:A6:DD:23:06:5F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7f6d97f4-cd5e-327c-9aff-f9f1c0010fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.144.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:6b:30:50:52:97:18:30:9d:1a:14:8c:3c:eb:bf:09:c2:29:
         cc:81:67:2e:77:0a:5e:3b:75:d1:8e:59:bd:80:97:47:17:da:
         3d:5b:f5:e2:0a:5a:76:df:7f:8e:c4:ba:72:70:8d:f2:e8:37:
         18:f4:ca:23:b4:66:9e:0f:83:7a:3f:1b:b1:bc:bd:4d:ed:94:
         e3:d1:1d:2f:8b:40:4c:cd:ea:c6:54:18:a9:73:69:e4:4d:68:
         73:d5:4a:e1:43:af:59:f0:9f:5f:12:dd:9b:b9:69:40:2f:2c:
         7f:05:17:17:ef:9c:d9:ab:4c:e4:aa:55:22:3d:ec:9f:fb:52:
         f7:09:cf:3c:5f:24:ed:bf:35:07:77:c8:4a:d2:a0:61:de:55:
         ee:be:f4:ff:a9:30:1c:79:12:45:03:28:01:7d:43:c4:9a:e2:
         ea:31:08:62:9b:3f:38:26:9c:db:00:7b:26:e2:83:9e:d9:ae:
         7a:af:f4:56:19:04:dd:37:80:f6:c2:6a:0e:5b:6e:6c:73:25:
         29:0f:0d:a5:7b:ed:05:8e:57:b8:ec:1e:a7:c9:98:19:45:4a:
         e6:02:75:e4:f3:29:ac:6b:57:74:0b:74:b6:f5:05:a7:00:d8:
         5e:1c:ce:c4:86:33:80:cc:0f:b9:18:47:3f:b2:da:c0:87:81:
         e0:24:06:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:56:40 2025 by rpki-client