Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6e2a15bd-93b2-3792-9906-f2eab1cd46d9.roa
File:                     6e2a15bd-93b2-3792-9906-f2eab1cd46d9.roa (raw, json)
Hash identifier:          yy8sl3DAfXTnIXRB+VLrqsKtVYpbaw4f6dq34Hns9Po=
Subject key identifier:   43:63:D9:24:95:65:BA:E1:27:CA:3F:24:B7:4E:E4:F7:B6:66:5A:E5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F3769BDFA824A82F0F200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6e2a15bd-93b2-3792-9906-f2eab1cd46d9.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        131.150.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:37:69:bd:fa:82:4a:82:f0:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=d3d0f3e3-7d1d-41ca-8ee5-665079d886a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:c8:38:65:66:5b:7c:07:0f:b7:08:5b:5d:
                    d4:88:ca:57:93:af:2c:e7:12:10:aa:0f:6c:6b:bb:
                    cc:dc:8d:d6:d5:74:97:d5:94:6b:2e:c4:03:40:18:
                    53:19:12:cf:cf:5e:da:52:84:fe:98:9b:a9:09:a8:
                    87:9d:fa:fd:48:14:2b:6c:d0:f5:1b:2e:ba:5f:69:
                    ab:9b:a5:c6:05:a7:fb:15:ee:71:d2:ea:89:20:7b:
                    63:d8:f9:8b:83:74:1a:56:b4:3b:85:cd:08:32:35:
                    26:b3:cf:72:31:16:44:a8:88:5b:69:e2:ae:9d:8a:
                    1d:3f:e9:a2:69:4c:ae:bc:a6:a4:4b:09:5c:b6:1c:
                    bb:76:98:9b:28:52:d1:54:73:e8:af:92:c7:b8:c8:
                    da:ba:67:92:49:0f:1b:da:f4:41:10:c2:14:2d:84:
                    b6:b6:0c:f0:c3:b8:c3:8b:5d:41:bf:25:0f:e1:59:
                    bb:c3:a7:06:f6:0e:24:11:a3:a4:ac:50:b6:3f:0c:
                    aa:f2:e6:68:f7:2c:05:4c:cb:2c:08:66:7a:f0:4b:
                    ff:d3:ba:91:32:8e:6d:05:46:b3:1d:37:3d:f3:be:
                    f8:b9:88:57:ef:4c:88:aa:b5:b1:ee:41:ae:3e:9a:
                    a8:03:a0:28:36:ce:d5:6d:3b:de:96:c8:23:99:70:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:63:D9:24:95:65:BA:E1:27:CA:3F:24:B7:4E:E4:F7:B6:66:5A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6e2a15bd-93b2-3792-9906-f2eab1cd46d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:4f:28:8b:29:ab:96:87:08:fb:67:ea:bb:14:85:c4:6a:bd:
         ca:73:8a:ab:e3:3b:b4:4e:b0:a1:e6:0a:e2:6f:82:47:a0:c9:
         16:08:d1:1e:67:01:2a:90:f2:d0:28:bc:7b:0a:0d:62:34:aa:
         ed:75:66:57:cd:24:db:a8:30:ba:37:19:9c:40:2f:1f:db:47:
         5a:2b:6e:cb:2c:c2:32:f3:8a:3c:07:91:2c:92:92:f4:d0:6a:
         3d:9b:f4:ae:16:e6:26:82:11:f8:d1:94:c2:93:12:98:d1:af:
         47:e0:91:81:69:0c:76:62:4c:34:79:2f:70:24:21:c0:43:29:
         18:68:a4:77:bf:0d:c7:b6:96:25:b8:88:20:90:42:39:be:a0:
         7f:d4:87:17:7d:de:d2:7f:70:99:da:ea:17:ba:00:86:b3:38:
         da:e8:6d:93:77:5d:2c:6d:cd:4d:b9:b3:fd:f7:bb:1a:a2:b5:
         ee:bc:33:7d:37:b4:50:e0:4c:16:4e:ad:bc:a6:dc:c5:21:ef:
         b0:34:b9:ae:d8:83:45:dd:65:94:f1:a4:34:0c:a9:59:67:b6:
         c2:45:0b:69:c0:14:d1:c5:9e:8b:63:60:49:e5:81:9a:20:99:
         96:eb:20:d7:24:85:0b:67:9a:da:c6:80:94:b2:37:d0:80:f0:
         ca:38:15:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:58:47 2026 by rpki-client