Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/19c89baf-97cc-3883-bb45-c143bb7f52fb.roa
File:                     19c89baf-97cc-3883-bb45-c143bb7f52fb.roa (raw, json)
Hash identifier:          QcL3c18YqErTKkU+fwwR/LV6Mc4J488bzV2mZzp94l4=
Subject key identifier:   9A:62:9E:A8:02:7F:03:18:75:40:B0:FC:72:26:DA:4B:18:3D:37:36
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D2BDA16413B343BFFE63C6620
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/19c89baf-97cc-3883-bb45-c143bb7f52fb.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     53293
IP address blocks:        150.220.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:16:41:3b:34:3b:ff:e6:3c:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=9c1d132a-0265-4086-b3b3-c0495e1c9002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:7c:ff:f0:1e:c2:b9:e4:8f:71:9f:e1:3e:
                    7f:a1:32:0f:df:80:d6:ae:a6:32:6b:7d:a5:3d:02:
                    fb:d6:2d:3c:0a:d9:a3:70:02:bc:c3:3b:4b:f0:5d:
                    1a:f6:e7:7c:40:b2:57:06:2e:ac:3d:5e:2f:ce:f1:
                    e2:b4:8f:76:22:97:af:66:98:46:90:7c:79:ba:6c:
                    d5:22:af:c9:fb:78:36:66:8d:43:37:ae:65:ed:d6:
                    24:80:6e:f1:8e:5b:d3:cc:4e:51:ae:b6:48:29:2d:
                    da:95:94:a9:56:60:78:a6:01:a4:18:06:1f:47:88:
                    25:38:43:11:71:c7:b3:1b:16:24:68:86:b1:b0:7d:
                    b9:97:d4:99:1b:05:1b:3c:24:75:64:87:77:f9:77:
                    ed:81:52:a4:c7:3b:2e:30:05:ba:1d:e5:ed:13:3d:
                    7e:68:2a:71:cf:21:4d:a6:7e:87:6d:b5:1d:db:41:
                    f5:b7:c3:4d:d1:2a:d1:97:05:f8:7c:95:71:ed:97:
                    44:d2:ab:43:95:3f:de:54:df:da:ca:0b:24:97:6c:
                    4c:fc:20:32:81:5c:b2:e1:bb:c9:ef:04:dd:4f:a1:
                    c9:61:3b:58:4f:50:d2:6e:fa:0a:df:6c:03:ad:e6:
                    ed:7a:ba:7e:be:8f:48:a2:87:69:5c:2d:20:5a:9c:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:62:9E:A8:02:7F:03:18:75:40:B0:FC:72:26:DA:4B:18:3D:37:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/19c89baf-97cc-3883-bb45-c143bb7f52fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.220.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:39:32:fb:9c:5f:b0:0f:b2:aa:4d:ea:d4:e9:83:a1:4a:6a:
         e5:39:36:c1:57:46:82:7d:7e:9c:1d:df:79:0e:a3:ea:8f:f1:
         27:0b:29:39:6b:9b:65:07:71:1d:ce:7a:5a:51:3c:a5:6e:0e:
         38:9c:6e:d4:17:61:9c:f3:dd:eb:25:f0:58:77:25:c8:9b:00:
         79:64:c3:5e:f0:ab:37:58:96:cd:42:c7:3d:9d:ee:6d:4c:d6:
         28:c2:2e:ff:c2:6a:15:33:26:94:f3:d3:15:56:d7:fd:3e:52:
         84:b8:e8:1c:01:c7:58:9a:36:a1:b4:4c:a8:a0:f4:11:9b:e8:
         62:07:04:25:c3:82:56:d2:92:3e:b4:b7:2c:6e:39:9e:a8:c2:
         66:4c:38:04:89:1b:43:a0:5e:70:c5:b4:85:9c:19:85:95:94:
         59:1b:48:9e:fc:11:02:9f:06:b8:87:04:2a:fd:4c:0e:61:6e:
         83:60:3a:93:2d:f8:cf:c9:54:24:65:23:df:f5:76:45:08:46:
         ad:99:62:9f:a8:4d:0c:6e:09:16:03:a9:65:79:96:d0:2f:e7:
         1a:94:48:22:f3:9c:6d:6a:f2:f7:45:10:bd:b1:e5:15:4d:3c:
         83:1c:a8:3e:50:80:47:0f:e2:e2:ad:2d:4a:b6:26:9f:f9:84:
         74:aa:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:59 2026 by rpki-client