Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb75606e-2c02-3548-9a9d-c3ea579024f7.roa
File:                     cb75606e-2c02-3548-9a9d-c3ea579024f7.roa (raw, json)
Hash identifier:          oSY9vynXVirbDhSuJKuGIrfBC4x9kRlQ0r41+uv+Nsw=
Subject key identifier:   83:E4:29:44:E5:17:62:BC:6B:3E:91:4C:B5:F4:55:58:20:2B:73:52
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D359FEE44B3F299972CE01900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb75606e-2c02-3548-9a9d-c3ea579024f7.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     0
IP address blocks:        131.150.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:ee:44:b3:f2:99:97:2c:e0:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=28a3811a-ae9f-43fc-b46e-65afb683d957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:18:1b:ec:54:52:15:d7:8d:3e:71:9a:5a:a9:
                    d8:9c:b7:71:02:8d:65:8a:42:de:0b:a3:2a:68:cf:
                    0d:b3:f6:d0:0a:63:ba:d0:e1:fe:02:d7:8d:40:e9:
                    61:d6:15:49:93:1c:ff:65:15:bc:38:d8:78:6f:9e:
                    47:16:c1:18:5b:d0:ab:50:6e:59:88:c9:31:5d:5a:
                    96:3b:4d:77:08:3b:b4:db:89:c1:ad:ea:10:71:5a:
                    cc:cd:97:36:eb:2f:91:f0:39:82:c6:4e:41:dd:ea:
                    65:0c:a7:e6:f3:4f:77:4e:ad:6e:3c:03:41:f7:2a:
                    d6:bf:09:5b:d6:99:09:6b:31:c2:f0:62:01:2c:a1:
                    7c:b7:1b:f1:cd:86:e3:36:9d:81:80:da:85:a9:38:
                    0a:b4:81:9f:9b:52:42:18:2a:49:38:39:a8:6c:9c:
                    cd:1d:c6:87:ad:1d:d8:e6:e9:b7:07:d3:2a:5b:f2:
                    81:2f:d5:50:da:d5:44:50:7c:1a:37:3f:d4:d4:7a:
                    a9:36:a0:76:91:ca:a3:d4:82:d8:64:e1:97:fa:b8:
                    6e:c1:9f:19:49:4c:c2:66:26:a2:2c:49:d3:1d:2b:
                    ba:f7:0b:04:89:cf:6e:26:47:43:28:7b:f8:99:13:
                    56:77:5a:7f:22:43:2f:b4:3b:64:33:17:8d:04:d4:
                    70:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E4:29:44:E5:17:62:BC:6B:3E:91:4C:B5:F4:55:58:20:2B:73:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb75606e-2c02-3548-9a9d-c3ea579024f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:27:09:1d:a5:d8:75:29:26:20:2b:a0:ff:e8:71:73:98:05:
         fd:a1:e0:e5:f6:73:77:30:e2:fc:8b:9f:de:75:c2:8f:c4:a7:
         82:e2:f9:9a:e7:24:0e:04:6e:30:14:db:03:0f:69:2f:d6:2e:
         ac:ce:7e:55:6c:ca:33:11:59:2d:b7:9a:b9:59:13:ff:2a:74:
         0f:01:4c:0b:d4:a4:b9:55:b1:e6:b1:ac:a4:28:c6:db:05:cc:
         5a:09:6c:3d:b4:b9:af:bd:e2:7f:a0:01:64:ca:14:e4:e9:93:
         a7:55:8c:c9:0d:ec:19:f0:87:39:ae:11:97:4b:0a:cd:0c:16:
         59:04:e6:ac:b7:76:00:97:8c:cb:94:cf:f7:56:e4:88:2d:ce:
         26:ab:47:9c:c5:45:76:6b:ee:4d:bd:25:ae:bc:c9:d7:b7:44:
         16:a6:1e:4a:41:68:4d:b9:a1:cf:71:4e:33:8e:8f:68:04:8a:
         86:18:99:65:bd:be:3b:9c:25:30:d6:27:b3:45:55:f4:41:cd:
         8a:e9:79:9a:78:4e:95:7e:9a:14:22:32:cd:db:cf:77:69:9d:
         82:4b:6b:28:5a:c3:fa:d5:25:85:28:2e:77:7c:b9:ec:61:e7:
         16:74:6b:e0:bb:57:24:fb:16:47:19:d6:2a:3b:73:9a:e2:e1:
         2b:35:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:44 2026 by rpki-client