Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e1b16f9d-0f89-3739-a4f8-650598d443c9.roa
File:                     e1b16f9d-0f89-3739-a4f8-650598d443c9.roa (raw, json)
Hash identifier:          SuBKf0/HRQaFFz+TLebmd5FhgAJtsINqh/uIz1ZTl2U=
Subject key identifier:   41:60:89:30:C7:AC:04:B2:23:DD:23:61:F3:6B:D7:72:6A:DB:85:8A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DC71B965B4F149D976080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e1b16f9d-0f89-3739-a4f8-650598d443c9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11427
IP address blocks:        150.220.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:c7:1b:96:5b:4f:14:9d:97:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=87ac1382-2f89-4ba5-9819-092905c397a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6e:6a:de:9b:b1:d7:16:c0:44:a5:03:31:60:
                    84:8b:68:7e:72:69:77:20:ef:2f:df:25:21:35:7c:
                    83:f9:ff:9e:d5:6e:97:ec:7e:c3:18:24:1d:0b:fc:
                    7c:46:11:13:46:d5:a4:7b:0d:05:74:d6:48:40:37:
                    ec:b7:aa:d1:ef:22:20:d5:09:26:ab:30:d3:82:7f:
                    fb:59:bd:4f:c1:9f:fa:0f:d1:04:fd:ce:be:69:cf:
                    4d:69:29:81:19:fb:af:7c:1f:80:b1:fa:3d:c9:f7:
                    dd:e5:4e:e9:2f:98:d6:b7:73:3c:83:6e:f3:ca:35:
                    4b:f9:ef:a3:51:44:ce:fa:34:95:5f:49:db:c7:a4:
                    11:0d:3d:45:0e:00:32:e0:15:48:e2:0e:44:e9:ff:
                    78:c1:21:21:ec:bb:53:25:46:68:78:7d:75:1a:4c:
                    94:61:df:3f:ef:f0:12:79:b6:fb:bd:19:4c:4c:45:
                    c5:96:b4:cc:3f:c1:3f:42:39:ca:25:bb:17:9c:58:
                    c9:10:31:38:17:3a:db:f9:e0:ab:e5:0b:08:1f:5b:
                    f4:ad:26:4d:f0:af:c9:1a:5e:21:a3:32:bc:d3:91:
                    fe:87:81:45:a4:ed:bc:c8:60:dc:43:68:3f:1a:ea:
                    a6:a3:7a:1b:78:3d:26:52:ac:c9:55:ab:a8:e1:54:
                    21:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:60:89:30:C7:AC:04:B2:23:DD:23:61:F3:6B:D7:72:6A:DB:85:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e1b16f9d-0f89-3739-a4f8-650598d443c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:55:82:5c:86:c4:a4:56:23:d4:ee:09:7e:37:22:ee:ce:cb:
         b5:3f:ac:e4:84:3e:41:4b:bc:2f:81:e5:d0:99:5f:71:f9:29:
         3c:d3:2a:99:c4:ec:3f:fb:a5:47:18:d4:47:46:08:ec:d3:63:
         c1:ee:0d:9b:00:60:cd:9b:6b:56:83:55:51:6d:92:f5:f7:dc:
         5e:f6:3b:d5:40:8c:0c:80:76:80:e7:16:ed:81:dd:c2:75:43:
         c5:9e:1c:6e:45:ee:10:54:7b:f1:ac:71:89:4d:72:1a:9a:72:
         34:56:0b:4b:5d:40:02:d3:20:bb:dc:b6:7a:39:74:27:75:bd:
         14:dc:ca:3e:2c:d0:3e:09:00:05:4f:9e:86:f1:36:f2:23:e7:
         f9:68:c4:dd:d1:fe:0e:63:c1:8f:e0:55:3b:b1:a6:3d:e2:fe:
         28:88:7b:bc:4d:a9:a1:59:98:b4:b6:f4:32:b3:94:e0:74:1c:
         c0:eb:a6:98:42:24:a0:c3:80:bd:ae:e3:b8:c2:7a:bf:6e:f6:
         24:4d:d8:68:ce:87:0a:0e:6f:d1:ee:29:7f:13:a7:4c:14:2c:
         92:49:5d:48:0b:57:65:04:d9:10:5d:3d:42:30:bb:05:f3:93:
         4d:f9:91:8f:c3:39:ea:11:ca:1a:e5:5c:32:e4:aa:0b:a1:0d:
         27:b6:27:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:49 2025 by rpki-client