Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fc7c8f78-2ba3-34c9-90f7-b52c66b57fa8.roa
File:                     fc7c8f78-2ba3-34c9-90f7-b52c66b57fa8.roa (raw, json)
Hash identifier:          G+ihHElKDJ6GI/nOQkHdEIMTDCr9EwmoWcNHvNbiv6Y=
Subject key identifier:   FA:B4:D9:24:65:A4:3C:30:A4:20:77:48:59:6E:18:30:EB:EE:B9:F3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DC51804DAC53DA93415D4
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fc7c8f78-2ba3-34c9-90f7-b52c66b57fa8.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     7843
IP address blocks:        131.150.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:c5:18:04:da:c5:3d:a9:34:15:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=48143cc2-56c1-4aa8-9a1d-cb36a079045d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e6:bc:cf:2d:7a:dd:e8:dc:37:42:9a:cc:f3:
                    de:80:39:71:eb:e6:69:8a:5a:e2:05:9a:10:a0:22:
                    fc:b4:25:fb:69:97:a4:8b:95:fa:bb:0e:96:40:e2:
                    24:9f:da:70:e6:c6:b9:33:1e:95:d1:e5:80:3f:6d:
                    66:65:f5:fe:e5:b7:44:e3:f5:a8:93:b0:25:44:0d:
                    ce:d5:10:b0:64:6a:fd:53:24:f0:b3:27:32:2b:63:
                    f5:55:22:7c:12:a7:17:5d:65:c4:20:64:c9:c5:31:
                    c3:50:ee:12:27:61:6e:35:2c:88:d4:59:f5:77:a1:
                    10:33:bb:56:0e:63:e5:c7:48:29:ae:da:c0:0e:fa:
                    c2:de:44:26:9f:38:c0:06:0d:bb:94:38:f1:b4:b6:
                    c2:2d:9b:cd:01:14:9f:f2:84:d3:d4:bb:da:0d:5f:
                    ba:6c:4f:27:73:93:14:82:40:36:a8:7a:77:7e:c5:
                    48:3a:cb:2e:f7:d3:99:17:af:68:01:85:ce:c6:e9:
                    0c:dd:17:f4:81:9c:3d:fa:52:d7:ae:a4:6e:be:21:
                    69:be:07:5c:6c:b1:24:fe:23:e8:13:03:cf:06:b5:
                    6a:a6:9d:4a:55:ba:52:f4:42:11:94:ab:42:ba:69:
                    29:c3:6d:89:1c:a7:67:d8:84:12:70:59:1d:3f:98:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B4:D9:24:65:A4:3C:30:A4:20:77:48:59:6E:18:30:EB:EE:B9:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fc7c8f78-2ba3-34c9-90f7-b52c66b57fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:b7:ee:eb:46:6d:7f:a2:a6:e1:70:92:a2:a8:34:aa:38:
         c8:d6:8b:2e:3a:47:3a:55:aa:7c:b5:a6:96:07:48:34:0f:ae:
         0d:76:76:f2:b3:e4:b2:74:85:20:e5:f4:f6:ec:f3:63:a4:68:
         c2:7e:d5:d5:12:31:1e:04:cc:95:77:71:2a:f7:94:b7:72:27:
         49:23:1a:f2:4a:5f:db:49:cc:e5:94:cd:71:ad:dc:5c:e2:5f:
         eb:fe:f2:72:85:63:6b:13:64:44:7f:08:bc:3f:6d:53:2b:9d:
         30:85:42:b1:8f:d0:19:81:df:3d:48:9e:f3:19:25:4e:ce:4e:
         65:41:69:91:99:2b:ae:1d:73:94:05:ff:91:e4:b7:7e:0e:37:
         e9:17:76:5b:02:16:87:29:ab:3a:c6:b9:7c:a3:67:41:aa:ae:
         31:ae:a0:82:73:2b:ed:c9:bf:13:33:00:8e:cf:70:ba:a6:c8:
         05:6b:e8:63:7a:49:57:d7:74:30:7b:ec:7c:48:c9:9d:60:24:
         cf:93:74:5a:1a:84:d9:df:d8:14:25:20:a5:bd:04:9a:60:7e:
         a9:46:d3:ae:dd:0e:19:86:dc:ab:77:e5:03:44:87:62:7d:d8:
         97:ca:76:c9:67:71:39:e1:48:2b:00:47:00:3a:9b:f8:5f:20:
         a2:e9:8e:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHcUYBNrFPak0FdQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NDgxNDNjYzItNTZjMS00YWE4LTlhMWQtY2IzNmEwNzkwNDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOa8zy163ejcN0KazPPegDlx6+ZpilriBZoQ
oCL8tCX7aZeki5X6uw6WQOIkn9pw5sa5Mx6V0eWAP21mZfX+5bdE4/Wok7AlRA3O
1RCwZGr9UyTwsycyK2P1VSJ8EqcXXWXEIGTJxTHDUO4SJ2FuNSyI1Fn1d6EQM7tW
DmPlx0gprtrADvrC3kQmnzjABg27lDjxtLbCLZvNARSf8oTT1LvaDV+6bE8nc5MU
gkA2qHp3fsVIOssu99OZF69oAYXOxukM3Rf0gZw9+lLXrqRuviFpvgdcbLEk/iPo
EwPPBrVqpp1KVbpS9EIRlKtCumkpw22JHKdn2IQScFkdP5h0PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPq02SRlpDwwpCB3SFluGDDr7rnzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZmM3YzhmNzgtMmJhMy0z
NGM5LTkwZjctYjUyYzY2YjU3ZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5YkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQ8t+7rRm1/oqbhcJKiqDSqOMjWiy46RzpVqny1ppYHSDQPrg12dvKz
5LJ0hSDl9Pbs82OkaMJ+1dUSMR4EzJV3cSr3lLdyJ0kjGvJKX9tJzOWUzXGt3Fzi
X+v+8nKFY2sTZER/CLw/bVMrnTCFQrGP0BmB3z1InvMZJU7OTmVBaZGZK64dc5QF
/5Hkt34ON+kXdlsCFocpqzrGuXyjZ0GqrjGuoIJzK+3JvxMzAI7PcLqmyAVr6GN6
SVfXdDB77HxIyZ1gJM+TdFoahNnf2BQlIKW9BJpgfqlG067dDhmG3Kt35QNEh2J9
2JfKdslncTnhSCsARwA6m/hfIKLpjvc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:09 2025 by rpki-client