Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db3fd789-f63a-3a50-9a79-0b4cb63a7600.roa
File:                     db3fd789-f63a-3a50-9a79-0b4cb63a7600.roa (raw, json)
Hash identifier:          ZOPYJ24PBi99ZnngpJhwIDURG8foViWUqnSB3/0NgVE=
Subject key identifier:   78:A0:7E:4D:5B:A5:96:0C:70:3B:E5:C0:FF:26:2D:1B:6F:62:BB:0A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D2B98BCD9CFA9C8BDD20C
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db3fd789-f63a-3a50-9a79-0b4cb63a7600.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        131.150.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:2b:98:bc:d9:cf:a9:c8:bd:d2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=90d230f7-5849-48f6-b2f3-af11db064f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:6c:bd:61:78:27:42:b5:f6:85:0d:d2:a3:
                    7e:fe:54:c6:aa:bc:82:ae:13:08:27:56:67:ca:5d:
                    2c:d0:dc:93:21:b1:08:69:b8:a5:29:b5:7b:e4:8c:
                    bf:21:33:18:2d:c9:8c:9a:d1:b5:d8:86:fe:73:6f:
                    c1:10:aa:f9:97:0a:86:3b:b7:cb:34:54:df:53:ae:
                    e5:0b:16:e0:9d:1e:ca:7d:11:7f:74:5e:54:e4:65:
                    55:5b:c5:0f:68:c4:ff:3e:78:a7:22:3d:36:17:78:
                    50:3b:58:4e:dd:f4:a3:d7:65:fa:a4:52:a8:a5:a6:
                    ac:1d:78:4f:09:61:a0:3f:63:a3:0f:f2:48:0a:a4:
                    88:00:f2:5c:1f:92:9c:b8:1b:58:7d:3a:c3:09:b7:
                    f5:a2:5d:98:ea:6c:f8:54:37:a5:61:af:c0:cc:3e:
                    9a:2d:33:9c:4f:9a:2c:f5:93:b1:75:65:b0:07:b6:
                    14:93:5e:c8:32:8b:08:5a:9e:d9:f8:ac:04:a9:fa:
                    17:9c:97:93:de:5f:c3:d7:2c:04:b4:b7:2c:38:a4:
                    af:ae:3e:83:b6:fe:a2:1b:6b:af:7a:d7:7f:15:63:
                    01:44:d6:8f:f4:27:39:93:77:96:bd:62:1c:6b:2e:
                    fc:7f:fa:8d:9a:fe:c9:0c:2d:86:4a:be:0e:7b:fd:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A0:7E:4D:5B:A5:96:0C:70:3B:E5:C0:FF:26:2D:1B:6F:62:BB:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db3fd789-f63a-3a50-9a79-0b4cb63a7600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e4:d3:80:6a:02:ce:29:30:c8:16:46:c2:e5:c7:93:30:54:
         59:bc:fc:da:b7:ce:62:80:18:aa:11:03:38:50:0a:38:07:0d:
         35:96:fb:8b:93:f3:eb:8c:2c:65:1d:f4:01:94:5e:f9:a0:8f:
         eb:6c:f8:86:05:12:85:45:86:51:b0:fa:10:26:05:2c:55:8d:
         54:f1:30:41:59:ca:ab:14:7d:a1:85:00:43:25:b9:c8:e2:78:
         dd:c6:9f:07:e2:dd:08:b9:a3:ed:de:a0:f8:96:c4:cf:0c:c6:
         ae:b1:b5:5c:a9:5a:29:bc:9b:74:fb:ef:d7:56:91:c7:cb:d6:
         58:0a:8d:5d:44:3a:33:4f:d1:83:86:c3:78:53:63:76:61:12:
         bf:90:ed:46:34:4e:51:5a:f7:00:9d:80:54:cf:11:96:91:1e:
         f9:aa:42:ba:9f:6c:25:da:f8:ca:b5:a0:68:61:a9:52:ef:52:
         10:8a:e6:2e:3d:45:c6:bb:b1:82:bd:09:1b:3b:32:09:39:8d:
         94:d3:15:92:00:23:09:48:b5:96:04:1c:36:31:c4:c9:d1:6e:
         87:65:4e:8d:eb:bb:e6:6b:6d:34:fc:08:36:d6:81:ab:42:47:
         af:db:08:9f:ca:7a:b5:35:91:c2:50:15:67:a0:8a:bf:98:84:
         95:80:83:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:29:49 2025 by rpki-client