Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5021930d-edcf-3823-aa97-b83b6890e1fc.roa
File:                     5021930d-edcf-3823-aa97-b83b6890e1fc.roa (raw, json)
Hash identifier:          C4+AkYoQFmShVe877p2Z413Pb5NoF1m8oeH4TKS/AK8=
Subject key identifier:   39:09:69:24:3D:76:E6:8A:A6:2D:AE:CD:4A:5F:C5:33:3C:45:5E:1C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DC64BF5F105267FC80240
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5021930d-edcf-3823-aa97-b83b6890e1fc.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        150.221.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:c6:4b:f5:f1:05:26:7f:c8:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=46088f32-1fba-486e-88ce-326467d84074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:be:72:01:e4:a9:6d:5b:45:57:e6:b3:c8:
                    27:f1:fa:18:18:d8:8a:37:18:01:60:0f:74:33:31:
                    da:23:d4:db:c3:53:d5:d5:43:20:63:a8:f0:40:33:
                    1d:1e:30:2c:11:f0:e7:bc:79:25:f7:ee:4b:55:70:
                    b6:91:ec:7c:1c:0f:db:66:b9:e6:d8:6d:69:d6:c3:
                    f9:40:0d:39:fb:cf:3b:62:41:06:a6:dd:72:7b:99:
                    1a:06:ba:fd:1e:cf:86:83:66:67:13:ab:73:1a:bd:
                    a3:52:a7:ab:fc:78:3b:2e:16:d7:d6:79:aa:87:9b:
                    cb:58:d2:5d:50:d2:99:fa:69:01:dc:67:1b:81:49:
                    00:a0:f2:e7:33:cb:5f:5b:f0:5d:14:eb:d1:af:8d:
                    0e:19:51:36:4f:04:99:14:c1:c3:dc:f5:fa:53:03:
                    00:85:f0:ad:18:d3:73:6c:d8:e3:a9:83:a7:25:32:
                    94:cb:7b:1b:95:02:a8:cd:f4:92:4c:05:a9:9f:1c:
                    ce:b7:2d:cc:b1:24:39:95:20:e1:ce:c5:11:be:54:
                    98:f2:1f:df:72:c6:8d:6f:a5:7f:3b:fa:e3:5c:df:
                    ec:04:29:99:c1:8c:09:3f:fb:ff:f4:2c:65:6f:a4:
                    14:26:19:63:54:8b:92:3e:5a:81:5a:bf:f7:11:13:
                    34:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:09:69:24:3D:76:E6:8A:A6:2D:AE:CD:4A:5F:C5:33:3C:45:5E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5021930d-edcf-3823-aa97-b83b6890e1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.221.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:40:b0:c8:b5:db:8f:41:2d:2a:61:54:53:cb:bd:5f:93:0a:
         94:3e:e8:69:70:68:58:c4:b4:8e:a0:31:1f:e1:92:1a:e9:d3:
         3d:2f:a7:43:22:c9:9e:90:13:44:06:2e:eb:7d:23:47:dc:ae:
         71:b5:69:78:14:29:4d:11:7b:be:b6:f9:df:ef:98:3b:a9:97:
         8f:a0:8e:06:dd:54:c6:9e:55:2b:0b:0a:62:1b:01:c9:7a:f1:
         f5:b9:59:9d:f7:63:e1:a9:d3:71:e3:82:56:f7:24:6d:a8:20:
         25:7f:74:83:2b:b8:f3:84:0b:18:1d:bc:f8:db:98:2f:1d:6a:
         ab:1e:32:78:e8:bd:a1:78:60:8b:53:ed:37:d8:5c:db:31:7a:
         e1:b9:7f:3c:76:94:a1:cc:f2:2b:b9:50:89:4e:f1:65:ba:6f:
         6d:29:c8:8c:11:7c:22:67:c6:e7:90:a3:6a:6c:f7:37:2f:cd:
         dc:61:42:e8:a4:17:e5:07:0e:8b:bc:58:fb:71:3c:f2:30:41:
         73:e4:cb:46:c3:c5:e9:36:59:ad:22:e5:64:28:cf:1d:1b:76:
         0b:27:05:b1:58:10:30:d8:a0:c3:f4:7f:85:33:35:ed:3b:14:
         d3:c2:6c:17:96:0a:42:2d:20:70:f3:3b:e2:58:d5:bd:2a:45:
         d5:84:c4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:59 2025 by rpki-client