Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0dbeec47-5745-3b83-a207-f0cbd9ab1da9.roa
File:                     0dbeec47-5745-3b83-a207-f0cbd9ab1da9.roa (raw, json)
Hash identifier:          jd7zuHs7727iTtEu9j3uJkZL585F1szfK3uCj5efNLI=
Subject key identifier:   E5:91:94:D4:F6:9F:17:7A:7B:CE:5D:15:2F:AB:55:40:19:7F:98:19
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB4BCDF559D8AC14959440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0dbeec47-5745-3b83-a207-f0cbd9ab1da9.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        131.150.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:4b:cd:f5:59:d8:ac:14:95:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=4d25d45d-8ba3-4a99-a5bb-625e4603d015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:07:3b:f9:80:fe:a2:cb:95:95:aa:e4:b1:89:
                    58:ce:4e:42:80:2b:74:08:2d:ff:e3:0c:d2:49:72:
                    14:c9:c3:1e:51:79:fc:db:6f:a1:4f:85:04:8a:53:
                    7e:b3:71:e6:f5:e1:32:2c:ff:98:8a:81:83:19:0f:
                    d7:1d:ce:09:09:38:ec:9c:81:4f:78:30:b0:8c:48:
                    63:6c:f6:5f:e6:eb:cb:0e:f8:f0:39:a0:5e:6e:4f:
                    f6:17:31:c5:b8:74:ca:47:e2:0f:1a:ee:49:54:d1:
                    c2:0c:c8:7e:91:30:61:79:ea:61:6f:49:8f:f8:8a:
                    81:46:38:fc:40:cd:0f:89:cc:47:25:f4:9f:0b:64:
                    6e:34:89:d3:52:25:52:bd:50:f4:f3:e3:2f:72:56:
                    a1:52:10:8d:51:c3:98:f9:f8:db:81:a5:89:7c:dd:
                    ab:43:79:5e:4b:e1:ff:07:71:99:4b:a0:8d:f5:6a:
                    b1:26:50:1c:ef:4d:95:07:17:f2:c8:d3:dc:32:29:
                    d7:03:38:ee:aa:88:de:79:a5:53:77:30:91:19:65:
                    cd:1a:ad:0b:3a:5a:9a:15:7a:c3:5a:00:14:64:28:
                    74:d8:40:50:4f:1b:d6:e6:75:f2:54:a5:d7:aa:14:
                    ac:12:eb:88:77:37:65:12:4a:27:51:c4:68:62:89:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:91:94:D4:F6:9F:17:7A:7B:CE:5D:15:2F:AB:55:40:19:7F:98:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0dbeec47-5745-3b83-a207-f0cbd9ab1da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:19:b5:ec:0c:e0:aa:49:71:10:ce:f2:66:8d:c4:2d:94:
         35:36:a8:0a:3a:22:0b:cd:f8:93:52:00:1a:7e:b6:ac:9c:23:
         19:56:e1:b6:26:0b:41:a2:62:da:63:99:37:e0:72:43:ef:fc:
         d0:72:7e:87:ba:6e:8e:7c:0c:46:74:68:51:2c:1f:66:0d:a7:
         d6:09:ef:3a:29:d5:e1:47:cf:15:3f:91:7b:29:f1:e7:37:01:
         76:6a:87:d8:fb:4f:57:34:e7:7a:16:dd:2f:fb:c1:4a:b3:e3:
         cf:24:39:4c:54:5d:39:00:06:f5:1e:8d:89:f9:9d:b3:e9:05:
         5e:70:ac:e2:55:b0:10:73:5b:d2:35:ef:5c:1b:2b:7b:68:ef:
         b3:4b:6c:a9:48:0a:f9:ae:ca:a5:65:1e:92:3a:3e:27:8e:3e:
         49:36:87:ea:6a:75:30:8a:71:21:91:46:a8:73:64:51:73:e4:
         77:bc:ad:43:7a:c0:48:21:3a:23:3b:6d:92:00:33:3d:bd:1c:
         f1:82:e6:5b:a9:3d:96:88:f4:c5:48:b6:e4:67:5f:af:7f:0c:
         11:b5:35:ad:86:0b:92:f1:6c:53:2d:69:41:52:dd:a5:e8:c9:
         72:1b:80:f5:6d:05:71:34:a6:71:2d:a2:79:54:b1:1c:92:71:
         5e:97:12:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:35 2026 by rpki-client