Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4a1688d4-07a1-3e89-9533-83886cd93b7d.roa
File:                     4a1688d4-07a1-3e89-9533-83886cd93b7d.roa (raw, json)
Hash identifier:          6uSM3ej5QbOawMxCz26/oTavmcjRQn2s2V/6x5KcSIg=
Subject key identifier:   3B:4B:88:B3:40:0F:D2:85:89:9F:7D:34:25:88:2C:B3:09:35:2A:28
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AF62B4A280294B9931F80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4a1688d4-07a1-3e89-9533-83886cd93b7d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        131.150.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:f6:2b:4a:28:02:94:b9:93:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=c4b5e9a6-d6bd-41eb-b9b9-c65b927a534d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d0:ad:ec:20:3b:cb:2d:cc:22:33:e1:09:fb:
                    84:b6:99:c0:33:bc:0e:46:fc:b0:f6:f6:2b:40:71:
                    b6:a9:59:fc:e4:08:fe:86:18:59:e8:5d:b9:c4:52:
                    f1:d5:bb:f2:8c:7b:78:9b:e4:21:8c:0b:10:32:04:
                    10:41:c9:77:18:fb:9c:9d:8a:00:a1:f0:bf:6f:2a:
                    55:a1:f9:29:75:80:3d:27:4b:71:33:f7:c0:0e:6e:
                    67:4a:b7:95:35:0d:10:2b:1d:57:47:ef:9b:ae:e7:
                    3c:82:f1:80:3e:31:78:08:7c:17:a2:09:3a:f0:c5:
                    02:43:0b:4f:69:5e:ae:96:72:9f:e0:e0:b1:2d:f9:
                    fd:98:b0:0f:5f:fb:51:ef:ec:bb:7c:1d:2d:60:b2:
                    b4:65:5e:05:2c:fb:ae:8f:dc:83:fc:4a:44:05:a3:
                    1e:68:19:08:15:1f:d3:4b:c5:ac:e1:5d:57:dd:43:
                    ac:94:e2:d4:8a:b7:fd:8f:35:ae:20:34:ac:b5:f1:
                    41:cb:74:13:0b:e7:0b:6e:4c:42:63:c4:db:c0:67:
                    3d:ba:37:cf:00:bf:54:51:d7:a7:49:70:b1:50:ce:
                    7e:ac:6d:bc:6a:d5:82:bd:a9:9e:fb:a4:72:12:fd:
                    5a:94:46:e7:a1:8a:66:80:35:c6:29:c2:4a:bd:c9:
                    d2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4B:88:B3:40:0F:D2:85:89:9F:7D:34:25:88:2C:B3:09:35:2A:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4a1688d4-07a1-3e89-9533-83886cd93b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:e9:d8:4a:95:c3:ae:9f:38:1e:48:50:83:65:1f:e4:7a:a5:
         6d:86:1d:5b:92:7f:95:88:2c:88:cb:c6:ad:83:54:9b:be:33:
         ec:89:86:3b:36:e3:1f:43:56:18:7e:64:76:d6:28:46:ae:51:
         95:f3:f7:5c:30:6f:15:51:47:ce:b8:6b:8f:db:02:2e:87:f7:
         7a:da:bc:13:8a:98:da:74:93:de:63:c1:e6:13:a5:03:d4:01:
         e5:14:74:c7:5c:9f:f7:dc:7d:8c:0d:5b:d6:a4:33:12:9e:85:
         76:80:96:3d:c7:75:c1:c0:9d:5d:81:aa:f1:63:3d:93:ac:91:
         c3:f8:90:57:ad:db:28:92:36:30:28:55:a3:a9:ad:ab:3c:09:
         3a:73:82:dc:d1:93:22:0c:cf:7b:40:50:f4:cb:d9:24:95:8b:
         5c:95:21:de:2f:1b:6d:1b:e9:cc:a3:4c:99:65:03:49:ad:18:
         b3:9f:27:2b:76:54:1b:77:64:fc:85:a7:3f:fb:51:98:8c:25:
         11:1c:b8:6e:5b:15:7d:c4:2a:83:b6:50:7d:78:db:14:80:f1:
         cd:da:95:28:bb:97:82:45:74:a2:96:1f:1d:67:c2:96:02:14:
         5b:4d:a5:1a:39:1c:7e:8e:0a:d0:d2:12:dd:10:ed:53:22:98:
         e9:37:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:19:19 2025 by rpki-client