Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/643b8f16-3974-3fd6-9a39-1a8a13766f36.roa
File:                     643b8f16-3974-3fd6-9a39-1a8a13766f36.roa (raw, json)
Hash identifier:          GXW8tXxsM3G6HnkYMMnvR/mgvk7GstU/Gik3co4tQRw=
Subject key identifier:   BC:29:50:6C:50:49:1E:1F:B4:40:A4:83:91:8D:1E:CE:03:E6:2E:B5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D359FC359FA5F80FB15D2F600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/643b8f16-3974-3fd6-9a39-1a8a13766f36.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     0
IP address blocks:        131.150.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:c3:59:fa:5f:80:fb:15:d2:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=a8226017-870c-42f8-8c96-336a9b0aa9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:23:3a:b2:a2:ca:42:10:64:5c:1c:95:d2:
                    0c:15:85:c2:e1:b4:b6:cd:d5:30:67:ce:2c:21:78:
                    14:07:63:20:40:06:58:56:f4:15:37:7f:4c:c5:89:
                    a7:02:15:a1:e8:aa:cd:57:eb:f2:4b:13:f7:db:c1:
                    bc:5f:89:a0:66:2d:e1:b1:66:ef:6c:01:8d:e7:12:
                    ea:21:7f:ce:f0:ea:3e:99:c6:83:73:8f:29:17:06:
                    9a:49:8f:7d:44:95:78:1b:15:a0:1f:5e:36:b1:58:
                    e6:7d:7f:75:26:3b:9a:1a:a2:82:60:42:38:14:96:
                    db:28:b1:39:9f:c1:18:ad:ba:36:d5:0a:81:2a:4d:
                    fa:8b:e2:ac:25:5e:4e:86:c9:09:37:80:dd:a7:3f:
                    df:65:65:19:81:b5:38:2b:da:3c:c1:32:63:7c:14:
                    ca:4f:c3:59:73:20:f4:8d:f4:00:b0:3d:34:c4:30:
                    ae:5a:0b:c1:3b:1e:fb:9b:42:1a:a3:62:91:b9:e8:
                    55:e3:c1:17:78:4f:3c:b7:42:93:f2:b0:57:fb:c6:
                    da:ad:5b:17:9f:4b:a8:48:8a:26:c5:88:d8:08:90:
                    b6:4c:1d:b5:92:d1:18:64:9e:d8:31:30:18:fd:35:
                    14:5b:0a:16:1a:46:b1:17:8f:c6:a1:8a:52:41:db:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:29:50:6C:50:49:1E:1F:B4:40:A4:83:91:8D:1E:CE:03:E6:2E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/643b8f16-3974-3fd6-9a39-1a8a13766f36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:26:3c:54:7a:3c:ac:36:c6:44:4e:54:e7:d9:c2:2f:8e:d6:
         0d:a6:2c:3e:95:82:d9:c9:74:dc:49:af:7b:92:38:ff:d1:56:
         c4:90:58:8e:6f:1e:f3:95:a2:4f:13:fa:40:d3:d6:ec:11:08:
         f3:6e:6b:42:c3:fe:c6:25:97:6d:0f:fd:d2:ff:4b:f7:e2:2c:
         9c:90:2e:e5:55:42:b8:3c:0c:29:09:50:c1:82:2e:37:22:b9:
         5c:1d:b4:a7:10:a7:6b:0a:50:0b:d2:70:d4:0c:76:39:78:d3:
         fd:e8:06:b1:3a:53:14:da:53:b4:eb:48:45:76:db:20:d7:cc:
         a6:db:1a:ed:92:c8:ae:47:29:fb:f5:ce:39:e0:74:95:bb:a5:
         19:a1:35:96:9a:2b:c0:6e:89:36:86:99:95:d4:6c:f9:ca:65:
         fa:1e:26:e6:57:18:38:4a:e8:5f:94:91:f2:b1:04:1b:7d:7d:
         fe:e2:9e:7b:23:be:3f:7d:2a:d3:96:77:46:7c:29:dd:50:99:
         6a:63:6a:e8:21:e8:dc:50:3f:82:e3:8a:86:42:63:b6:29:3d:
         aa:55:d9:f5:57:a3:c4:14:5d:2e:af:df:93:90:15:f8:2a:40:
         8d:ae:24:bc:ba:1d:84:86:a0:c3:8c:8f:6d:5f:d4:f8:d2:85:
         a1:cf:65:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8NZ+l+A+xXS9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
YTgyMjYwMTctODcwYy00MmY4LThjOTYtMzM2YTliMGFhOWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPYjOrKiykIQZFwcldIMFYXC4bS2zdUwZ84s
IXgUB2MgQAZYVvQVN39MxYmnAhWh6KrNV+vySxP328G8X4mgZi3hsWbvbAGN5xLq
IX/O8Oo+mcaDc48pFwaaSY99RJV4GxWgH142sVjmfX91JjuaGqKCYEI4FJbbKLE5
n8EYrbo21QqBKk36i+KsJV5OhskJN4Ddpz/fZWUZgbU4K9o8wTJjfBTKT8NZcyD0
jfQAsD00xDCuWgvBOx77m0Iao2KRuehV48EXeE88t0KT8rBX+8barVsXn0uoSIom
xYjYCJC2TB21ktEYZJ7YMTAY/TUUWwoWGkaxF4/GoYpSQdtQowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLwpUGxQSR4ftECkg5GNHs4D5i61MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjQzYjhmMTYtMzk3NC0z
ZmQ2LTlhMzktMWE4YTEzNzY2ZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5ZUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgmPFR6PKw2xkROVOfZwi+O1g2mLD6VgtnJdNxJr3uSOP/RVsSQWI5v
HvOVok8T+kDT1uwRCPNua0LD/sYll20P/dL/S/fiLJyQLuVVQrg8DCkJUMGCLjci
uVwdtKcQp2sKUAvScNQMdjl40/3oBrE6UxTaU7TrSEV22yDXzKbbGu2SyK5HKfv1
zjngdJW7pRmhNZaaK8BuiTaGmZXUbPnKZfoeJuZXGDhK6F+UkfKxBBt9ff7innsj
vj99KtOWd0Z8Kd1QmWpjaugh6NxQP4LjioZCY7YpPapV2fVXo8QUXS6v35OQFfgq
QI2uJLy6HYSGoMOMj21f1PjShaHPZaM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:08 2026 by rpki-client