Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8a8c5397-3919-3c81-9a4c-51b092496105.roa
File:                     8a8c5397-3919-3c81-9a4c-51b092496105.roa (raw, json)
Hash identifier:          p5K22bM4RM0zOZ0qqj4T2fnswwgw9XJCcNFejK3hSjw=
Subject key identifier:   35:27:93:0B:2A:DA:2E:03:20:CC:4A:6C:A1:61:57:E1:BE:2F:39:5F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584A96368605AD2089CED2D9C020
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8a8c5397-3919-3c81-9a4c-51b092496105.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     0
IP address blocks:        131.150.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:86:05:ad:20:89:ce:d2:d9:c0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=453e7a20-0f85-440c-8b8e-612f4f27ba4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:06:53:c2:d7:97:d5:2b:79:3f:fe:cf:84:df:
                    ba:db:ed:e9:b3:fd:27:d3:f9:39:13:e4:90:6b:67:
                    ea:cd:3c:01:61:27:13:53:dd:35:07:16:6e:02:7d:
                    ce:dd:4c:23:9b:35:69:4e:21:91:fb:c7:0e:dd:e7:
                    1c:0f:cd:8c:29:43:a8:38:50:8e:e6:51:5e:f8:2f:
                    5a:11:c1:39:a8:3b:f2:a9:26:21:aa:29:42:3b:d8:
                    fd:db:77:79:72:71:e3:da:ca:a2:e4:f7:16:27:6e:
                    de:1f:c1:28:76:d4:88:34:19:55:0b:35:8d:b8:04:
                    ad:01:3f:bc:e1:c1:d6:51:5f:4c:80:ae:4c:16:ee:
                    cc:f5:14:49:36:83:60:8f:69:0b:3b:a6:56:5c:42:
                    11:23:94:10:4b:40:c4:3e:9d:27:e1:b9:59:c3:aa:
                    bd:1e:cb:aa:5b:4d:09:25:02:39:c7:eb:71:e5:fe:
                    75:20:58:8d:59:2e:47:de:54:2d:d2:c7:c1:23:dd:
                    3f:5c:1a:ae:bc:9b:b6:60:05:f9:4b:fc:1c:0f:79:
                    63:48:82:5b:82:49:17:3f:75:35:dd:20:20:89:1f:
                    19:9e:d9:28:5f:98:97:d5:9d:a1:2b:01:42:35:06:
                    39:2b:aa:a2:6e:e3:04:af:6c:eb:d8:57:0f:f6:36:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:27:93:0B:2A:DA:2E:03:20:CC:4A:6C:A1:61:57:E1:BE:2F:39:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8a8c5397-3919-3c81-9a4c-51b092496105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:51:42:3a:5a:5c:0a:91:9b:f9:c8:f6:87:f0:48:25:e1:83:
         48:20:18:48:61:3a:5d:fe:74:0c:8b:1e:01:a2:d8:45:65:60:
         52:5c:2e:09:77:02:a7:ed:20:fd:16:92:49:2a:b0:bb:13:b9:
         b2:0c:84:ab:44:87:b4:f1:26:58:ce:9f:40:d8:6c:5e:c6:8b:
         13:7e:08:90:b2:25:b4:3b:41:65:9c:ad:ee:8c:a3:85:09:8d:
         78:a2:d8:30:e2:de:0e:d4:41:71:00:c0:ef:4c:c9:49:e4:d8:
         3e:5f:91:bf:c3:79:6d:26:53:66:e2:13:6a:2b:59:9b:a9:84:
         c0:d4:5a:29:39:49:f7:b2:ef:8f:2a:0a:84:b8:3f:30:22:e4:
         a2:a9:b1:df:c2:14:b4:17:78:4c:98:74:e0:16:b0:7b:e0:1a:
         11:45:32:11:b1:40:de:9e:45:af:ec:4b:40:ad:77:da:3a:26:
         74:d7:15:49:ac:3f:ed:c9:42:89:5e:1d:1e:a8:6d:2d:01:49:
         5d:68:ad:5e:d0:29:66:c6:a4:a1:78:f6:b8:9f:28:1e:e6:44:
         43:64:5b:4b:5c:f4:d9:28:51:fc:36:06:58:cb:6d:64:ab:4b:
         99:01:89:cd:13:f6:28:1c:61:85:84:3a:98:10:0e:2b:3d:51:
         45:a7:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:16 2025 by rpki-client