Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4a1688d4-07a1-3e89-9533-83886cd93b7d.roa
File:                     4a1688d4-07a1-3e89-9533-83886cd93b7d.roa (raw, json)
Hash identifier:          0jeoa5/TSG/C3462zpMaHhRw7cQ5ITy5ZjTmvve57WY=
Subject key identifier:   34:B7:B4:09:CC:9B:20:EA:7C:D9:B5:EE:82:14:EC:15:B5:88:4C:46
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FA333CC11532328E06480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4a1688d4-07a1-3e89-9533-83886cd93b7d.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        131.150.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:a3:33:cc:11:53:23:28:e0:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=026ae7a7-a243-4a76-889a-b775e61a4cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:8d:93:6d:b6:dd:9d:e5:8b:ad:31:fd:d0:
                    3c:64:3a:d6:bb:ad:b1:4c:ef:51:b0:a5:ba:3b:c4:
                    8e:4b:9e:85:88:68:76:78:22:0a:78:3b:b9:22:26:
                    70:4d:a0:47:8f:49:03:3d:9b:c3:45:ac:6b:0e:7a:
                    67:77:58:64:96:79:91:43:3a:48:de:57:e0:39:15:
                    5d:6b:c2:cf:90:01:cc:79:f7:e7:cc:ff:5a:46:8a:
                    aa:c9:23:f3:09:8b:cb:69:be:c7:3c:03:00:52:47:
                    23:73:6f:80:f8:a4:84:34:6d:5b:29:6d:05:e1:ea:
                    1a:00:e1:42:6f:d1:3f:b0:e4:6b:01:21:0b:b0:5f:
                    8f:ee:39:b2:cb:ad:95:f5:34:92:2c:9f:df:f6:43:
                    f0:b1:6e:81:aa:06:3b:dd:14:1f:c0:9c:06:eb:25:
                    7b:44:4a:30:31:a0:67:be:bc:c8:a4:59:95:e7:21:
                    50:89:99:e7:b0:20:5a:bc:1f:0b:69:cd:69:31:51:
                    9b:35:3c:99:ff:70:48:a9:8c:73:e5:56:6b:c0:f3:
                    3e:7b:b7:6c:a3:8c:d7:b6:e0:08:19:86:6f:44:05:
                    f9:c8:a4:d7:d8:0c:29:c2:e8:63:ec:b5:c9:61:56:
                    f7:3d:b2:c0:e3:70:f9:4d:3a:32:48:04:35:e8:2e:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B7:B4:09:CC:9B:20:EA:7C:D9:B5:EE:82:14:EC:15:B5:88:4C:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4a1688d4-07a1-3e89-9533-83886cd93b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:f3:01:9e:e0:d5:88:4c:bc:17:b0:3d:25:95:e3:df:8b:ee:
         3e:eb:30:e1:d0:03:6b:66:24:a6:0b:47:87:5f:63:a7:79:f3:
         33:4a:d5:15:ef:e4:7c:1b:76:be:cb:dc:92:90:4a:19:59:25:
         26:54:7f:88:d0:ca:cc:96:ef:b8:cf:d1:92:15:13:c8:3d:38:
         1c:43:bb:1b:8e:1c:1e:3d:25:af:67:d4:ef:4f:10:fa:fa:cf:
         9c:0f:76:6a:d0:2c:0d:bd:0b:8e:a8:aa:03:7d:64:3b:66:da:
         2b:eb:1d:fe:a0:fb:36:14:e9:60:0c:85:3e:41:a3:4d:fd:77:
         b9:33:ec:cc:b4:3c:e2:cb:45:8c:4f:85:20:57:e9:63:80:73:
         58:6e:d1:17:b8:20:fa:e7:0e:73:6d:e0:e0:dc:6e:1a:c8:69:
         64:70:14:8d:f6:0d:9a:a1:2a:7f:09:3f:bd:a7:be:73:f9:60:
         b4:a0:b2:24:9a:50:6e:2b:77:b2:c5:5c:ff:dc:54:4c:87:f7:
         83:51:26:d5:dc:60:2d:b6:e3:89:82:2a:bc:78:77:77:1c:f6:
         0d:2e:f5:b8:9b:ca:c7:b1:4b:8f:59:33:05:3d:c5:fd:6f:d1:
         58:ed:a2:02:c4:0d:60:5b:19:17:5f:b2:6e:0e:ca:0b:8b:4b:
         d8:10:01:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:13:30 2026 by rpki-client