Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ee1623f9-d6e1-349a-9825-f77172c9bb0a.roa
File:                     ee1623f9-d6e1-349a-9825-f77172c9bb0a.roa (raw, json)
Hash identifier:          MuZN3S6VoItzg1nX8K9T5qx3rreJXDASlFJRQ+KI0WM=
Subject key identifier:   18:24:B9:BD:C6:05:F0:E2:D3:E6:AA:D3:E8:B0:57:02:74:AF:86:5A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D0A779A552CD56534A0866460
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ee1623f9-d6e1-349a-9825-f77172c9bb0a.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     0
IP address blocks:        131.150.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:9a:55:2c:d5:65:34:a0:86:64:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=96ace324-6133-4438-8813-37ee2dc4ee1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:66:f5:e7:95:51:a7:69:93:dd:f1:33:2d:c3:
                    18:9a:b1:40:bc:0f:22:77:b4:8c:5d:60:3b:82:d0:
                    b6:9e:1d:db:0f:52:7e:76:b6:e1:28:2c:7e:f5:94:
                    81:a5:c5:73:c8:e4:c4:9f:d3:98:f6:d2:f4:42:9b:
                    25:0f:e7:84:01:98:35:a5:64:61:d0:10:eb:00:ad:
                    74:b5:8e:90:a8:54:bd:ea:1e:96:92:3f:11:55:36:
                    20:d6:d6:d0:a5:b2:79:3d:3a:85:56:7c:81:5e:4e:
                    81:0e:65:2b:bd:9d:ba:7e:57:08:a0:91:b3:36:fc:
                    d2:75:25:da:0d:8a:33:40:f1:04:3b:0f:fd:d7:2f:
                    aa:10:18:62:a3:5c:5d:7a:07:c1:72:7b:0f:79:48:
                    f9:10:3f:1b:18:97:f9:a2:d3:1a:06:80:24:13:2f:
                    71:29:c5:b0:c6:73:07:8b:7d:ea:24:f5:fa:07:a8:
                    74:5f:32:39:41:cc:b9:2d:7b:42:b5:92:cc:95:6c:
                    1c:46:e7:3d:bf:ee:46:b7:6a:8c:fa:e4:a6:f2:5e:
                    ed:7d:36:a6:57:13:81:df:88:b9:e5:bd:6e:d7:50:
                    79:d6:e4:b2:66:4b:69:7e:7d:89:54:e9:c5:47:7e:
                    40:92:44:cf:4c:b7:e5:8b:65:f8:3a:a0:56:08:2a:
                    a9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:24:B9:BD:C6:05:F0:E2:D3:E6:AA:D3:E8:B0:57:02:74:AF:86:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ee1623f9-d6e1-349a-9825-f77172c9bb0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:80:8b:f1:36:bf:31:56:98:a1:26:80:9d:d9:ef:9d:51:c7:
         40:16:80:63:a3:19:c9:50:49:f7:e5:d9:40:1e:ea:b9:2e:2c:
         6a:54:56:d5:62:9c:a7:40:81:cf:6a:3d:d7:73:70:3c:a3:eb:
         11:4b:76:4a:50:59:6f:11:08:b0:b4:7e:53:35:9c:d8:b6:ae:
         e1:37:37:c3:f8:46:d3:c2:3f:bd:74:29:34:be:3b:3c:5c:b9:
         c2:5b:ba:54:ba:95:d8:1d:cb:0b:8c:26:b0:1e:62:01:07:f0:
         71:8a:c4:0b:2b:25:01:03:8d:56:31:94:f9:e1:96:ea:20:28:
         33:dc:7e:be:48:e0:e6:a1:ea:26:a0:15:a7:49:9d:f9:79:ef:
         24:7e:6c:a8:da:98:f5:1a:9f:0c:50:0c:54:c6:76:a5:d1:ca:
         34:8c:eb:7b:b8:c0:85:b2:be:09:8c:57:e1:a5:3d:5d:80:07:
         91:44:3a:88:fc:c8:f9:c4:fe:f7:92:31:98:6d:a5:73:47:7f:
         0b:ee:09:e0:4a:94:44:d6:40:ea:ec:e7:76:6a:40:c6:66:ee:
         08:71:58:6c:d5:12:84:1a:a0:51:a7:55:b1:24:48:0a:55:00:
         31:b9:10:d0:0c:29:69:53:de:81:77:ad:95:9b:d1:bc:32:fa:
         f1:60:ae:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd5pVLNVlNKCGZGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk
OTZhY2UzMjQtNjEzMy00NDM4LTg4MTMtMzdlZTJkYzRlZTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22b155VRp2mT3fEzLcMYmrFAvA8id7SMXWA7
gtC2nh3bD1J+drbhKCx+9ZSBpcVzyOTEn9OY9tL0QpslD+eEAZg1pWRh0BDrAK10
tY6QqFS96h6Wkj8RVTYg1tbQpbJ5PTqFVnyBXk6BDmUrvZ26flcIoJGzNvzSdSXa
DYozQPEEOw/91y+qEBhio1xdegfBcnsPeUj5ED8bGJf5otMaBoAkEy9xKcWwxnMH
i33qJPX6B6h0XzI5Qcy5LXtCtZLMlWwcRuc9v+5Gt2qM+uSm8l7tfTamVxOB34i5
5b1u11B51uSyZktpfn2JVOnFR35AkkTPTLfli2X4OqBWCCqpRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBgkub3GBfDi0+aq0+iwVwJ0r4ZaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZWUxNjIzZjktZDZlMS0z
NDlhLTk4MjUtZjc3MTcyYzliYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5YEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWAi/E2vzFWmKEmgJ3Z751Rx0AWgGOjGclQSffl2UAe6rkuLGpUVtVi
nKdAgc9qPddzcDyj6xFLdkpQWW8RCLC0flM1nNi2ruE3N8P4RtPCP710KTS+Ozxc
ucJbulS6ldgdywuMJrAeYgEH8HGKxAsrJQEDjVYxlPnhluogKDPcfr5I4Oah6iag
FadJnfl57yR+bKjamPUanwxQDFTGdqXRyjSM63u4wIWyvgmMV+GlPV2AB5FEOoj8
yPnE/veSMZhtpXNHfwvuCeBKlETWQOrs53ZqQMZm7ghxWGzVEoQaoFGnVbEkSApV
ADG5ENAMKWlT3oF3rZWb0bwy+vFgrkI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:11:25 2026 by rpki-client