Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c3c45855-9b43-3410-9f3c-3cb62340f35d.roa
File:                     c3c45855-9b43-3410-9f3c-3cb62340f35d.roa (raw, json)
Hash identifier:          xeg+aw0PyV81ajZ2dgOuypN8loxpmzJ6QziPmJxHbVo=
Subject key identifier:   DD:31:9D:BA:CE:17:E7:DF:2C:D5:5F:27:F7:AA:B5:31:39:E8:A2:6C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A70B895A1AB028B70E020
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c3c45855-9b43-3410-9f3c-3cb62340f35d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        131.150.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:70:b8:95:a1:ab:02:8b:70:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=da4137b7-c23f-4ca6-a59b-9a110274bced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:47:8c:87:79:f8:08:96:05:68:be:15:98:
                    08:73:eb:ad:64:20:d9:6c:96:79:f3:d0:f1:2f:ab:
                    50:cf:5b:48:3e:f9:92:7a:5e:7e:45:f5:48:84:b1:
                    30:6e:58:fb:5a:9c:b1:08:0b:db:19:67:56:9c:03:
                    c7:94:b6:8c:7e:58:66:f6:8b:3d:c3:f3:cc:c7:28:
                    f5:c5:86:13:f5:f3:1b:4d:c7:47:da:51:02:b2:87:
                    3e:8f:68:40:15:16:9d:9c:f2:33:05:3d:ea:2c:44:
                    c6:1e:e5:15:90:c1:04:cb:c2:9c:d5:d7:6a:d1:cc:
                    13:24:ee:bd:7f:d3:2b:7b:5b:e1:84:e9:59:63:4d:
                    9c:18:2a:19:b4:d9:1c:88:78:6e:bd:93:6a:42:c3:
                    9a:0e:cb:8d:0d:1a:91:b4:dc:41:27:8b:fb:9b:a1:
                    b1:d5:8e:08:1a:e4:3a:77:ac:e5:e7:b0:9a:9f:32:
                    70:81:13:49:49:2a:33:8e:ce:98:83:96:44:be:c4:
                    1a:ae:1b:fb:18:05:fc:e8:ce:5f:6d:d5:c1:23:ce:
                    94:dc:d8:f4:7f:e2:b8:c0:c2:61:8e:2b:88:0e:3a:
                    23:ed:44:a4:a4:28:13:19:38:4d:3a:d9:6d:03:00:
                    07:3e:6d:d1:df:6b:fa:0c:25:71:d0:69:48:80:e7:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:31:9D:BA:CE:17:E7:DF:2C:D5:5F:27:F7:AA:B5:31:39:E8:A2:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c3c45855-9b43-3410-9f3c-3cb62340f35d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:df:51:3e:a5:66:e3:13:45:0e:27:62:4e:c9:6a:63:24:7a:
         54:b6:ed:6a:c5:8c:c7:4e:da:da:44:ca:f6:72:35:89:9c:29:
         94:2e:bd:05:89:89:f9:2e:95:3d:37:a6:74:74:79:32:ef:04:
         d5:48:17:2e:85:ca:b9:a6:c0:f8:17:09:7b:7c:a0:06:9d:b7:
         4a:54:f1:75:58:ee:e0:c2:ea:50:c8:b4:03:87:fd:f4:55:51:
         9d:96:95:d6:64:62:75:c6:a7:a2:88:c5:a2:97:1a:25:6c:4f:
         c6:8a:5a:94:b1:80:62:58:c4:db:72:a5:9f:36:38:44:64:b5:
         0d:68:dd:56:17:0c:c8:fe:90:f3:7c:ac:39:c8:eb:ef:0d:70:
         79:57:b8:3d:0b:e2:dd:d5:1b:6e:83:62:46:c8:be:c5:cd:64:
         db:7a:02:6b:e9:30:d8:ac:5f:63:74:59:a8:6b:e4:06:0d:d0:
         6a:d5:f2:94:18:90:12:7e:0e:26:9f:ea:b2:8e:6b:69:bd:5f:
         8b:58:9d:17:b5:f3:0c:52:bb:77:d8:1d:ca:69:88:61:02:36:
         e5:dd:0e:77:79:9d:f0:00:dc:ed:2a:a7:f1:f5:3b:71:f5:2a:
         be:92:3d:de:be:11:2c:4f:93:3e:84:67:fa:49:6d:e7:5f:22:
         67:db:a9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:12:44 2025 by rpki-client