Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f295fce-a47b-390c-860d-ac09494a0825.roa
File:                     4f295fce-a47b-390c-860d-ac09494a0825.roa (raw, json)
Hash identifier:          vm8gyrg1/Z2SM9iTmsYP+k+yGITEN8oWWS0M0Hac/0Q=
Subject key identifier:   EC:A6:BC:68:B8:08:5C:9F:AA:BC:9D:22:5E:BD:E1:0B:11:E3:81:5D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DCBF2477607D8EB43C680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f295fce-a47b-390c-860d-ac09494a0825.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        150.181.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:cb:f2:47:76:07:d8:eb:43:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=4d21d679-b227-491f-ae80-8b8dc1354087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:04:5b:2e:00:38:fd:2f:3b:13:a3:8b:a0:c2:
                    bc:ea:b5:a4:a2:26:49:80:a3:01:b2:89:44:60:70:
                    25:76:82:49:52:0d:91:e5:4a:a8:11:88:42:f5:e0:
                    66:c1:61:98:d2:06:45:82:ba:ae:41:f7:27:76:46:
                    f9:38:08:5e:b6:1e:cf:47:a1:2d:ba:98:4e:3c:e6:
                    bc:0c:01:bb:a0:6d:55:bd:ea:4d:ac:72:7d:74:3e:
                    a8:9c:c3:43:a7:91:c8:a8:30:2c:ca:fc:7b:ba:ad:
                    d1:d6:7c:97:97:4f:2a:00:12:0a:c7:64:9b:de:7c:
                    43:79:97:10:63:5e:d4:56:fd:11:4e:2f:ed:1b:f3:
                    d4:9e:f2:f2:13:7e:aa:15:1c:c7:ab:cd:29:00:c8:
                    62:86:d3:aa:2b:e9:9e:43:64:5e:05:4b:88:57:38:
                    c3:ee:ba:96:71:fe:3f:63:5c:5d:00:8d:b5:1b:11:
                    24:20:3b:dc:f0:2c:f8:60:4c:b5:56:7d:ee:3f:fc:
                    68:a8:8a:ed:63:32:93:39:4a:5e:41:37:ec:08:cd:
                    b2:76:f3:c8:9c:a6:87:2f:95:89:b7:4b:2d:6d:c5:
                    39:f3:c6:3e:c0:03:a8:3b:10:62:44:6f:62:10:00:
                    28:dd:48:63:ff:02:23:40:f8:bc:3d:6b:6d:9e:eb:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A6:BC:68:B8:08:5C:9F:AA:BC:9D:22:5E:BD:E1:0B:11:E3:81:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f295fce-a47b-390c-860d-ac09494a0825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.181.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:65:8e:2f:98:a6:ca:e5:e3:f0:c1:4e:e7:c9:a3:00:d9:
         61:2e:35:7f:eb:7d:f1:8a:96:96:d1:43:61:3b:9e:b9:f4:78:
         c4:09:53:d4:a3:5e:94:79:11:ca:2f:26:93:f1:e5:1d:9d:f1:
         f0:22:e3:d4:14:68:33:68:80:86:55:e3:96:1a:73:a0:dc:03:
         17:0b:c1:59:72:5b:7e:7d:18:39:e8:48:68:4f:c9:9a:e5:59:
         78:5e:7a:d9:e3:ea:5f:c7:0b:df:c7:26:ac:86:c8:a9:06:b8:
         f4:4d:bf:37:5e:30:75:59:22:3a:84:f0:63:ef:63:5e:95:6c:
         0a:e5:3a:3c:8d:02:de:09:67:52:75:22:19:78:ec:d1:1a:35:
         5d:cc:ce:c4:80:b6:be:c5:90:69:a6:93:de:e5:20:a7:fc:1b:
         b8:5d:9c:ee:c2:ec:b5:60:96:f4:5a:b1:d5:71:e9:94:86:92:
         e2:e6:8f:f2:7b:77:e3:af:dd:7f:50:b0:5c:62:03:e9:b4:55:
         17:6c:95:6c:c3:83:66:44:db:2e:d9:e1:fd:7c:a7:e9:df:51:
         57:17:32:40:76:d2:b4:7b:24:45:f2:ea:78:a7:91:e3:56:e8:
         97:a5:93:88:7f:2d:7d:43:30:46:e0:d9:13:1d:0b:b6:6f:72:
         39:c1:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:35:32 2025 by rpki-client