Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa
File:                     aabe01d2-6b84-3a4c-a160-177c79696872.roa (raw, json)
Hash identifier:          Z4WstkrjW5LSRIlEyHE9p0JNpWlTX3qWVwMxpncsanU=
Subject key identifier:   CC:15:36:68:61:36:5D:32:FF:E1:42:E7:35:C4:45:85:E0:7B:3D:34
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584CEBC231FD0C42588D9654AEC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     902
IP address blocks:        131.148.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:31:fd:0c:42:58:8d:96:54:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=4978633b-6923-49d8-9bb4-b5c4509f5a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:67:8a:4b:e2:34:75:d1:99:88:08:83:05:0c:
                    94:30:c4:ae:70:c8:51:e2:66:9a:6f:c3:a0:f7:03:
                    af:a3:a2:15:e1:53:9e:55:c3:b2:a4:0d:89:da:a7:
                    67:4d:85:c2:06:21:28:ee:16:48:e5:69:28:cd:dc:
                    6c:bd:53:9d:57:75:61:66:3c:5e:d3:eb:84:b1:dd:
                    87:6f:d6:53:9d:c5:e6:e2:83:63:c4:9b:ec:ce:e4:
                    1c:61:6e:d2:f4:51:51:93:4b:a4:c2:0f:75:53:61:
                    25:2e:98:7d:7e:84:a8:8a:70:f6:de:2a:95:e8:67:
                    71:63:1b:29:0a:70:c0:d1:20:77:44:dd:ff:12:07:
                    9f:52:49:ed:93:72:99:6e:0e:48:90:26:59:f7:a4:
                    b4:aa:30:f8:30:ce:62:bc:d9:33:b5:26:52:c0:9c:
                    2d:c7:9b:30:50:21:dc:09:bf:57:b4:b5:0c:8d:a6:
                    55:1c:3c:c1:88:d9:93:6e:3a:5d:c9:0b:a3:66:43:
                    1e:1d:8d:ef:63:6e:44:bf:cd:b9:c2:83:fa:c1:86:
                    4e:da:9c:da:c4:56:2e:8e:31:f7:7f:82:46:cf:5d:
                    42:94:5f:79:5d:18:e9:89:50:77:ac:ac:96:b5:c9:
                    79:3e:6b:7c:21:27:74:36:3d:63:74:0f:b0:02:f3:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:15:36:68:61:36:5D:32:FF:E1:42:E7:35:C4:45:85:E0:7B:3D:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.148.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4a:53:fc:73:46:4e:3b:d0:98:93:3e:d9:fe:e4:0a:8b:05:
         f1:52:1d:a4:1a:c7:1b:fe:68:13:31:02:d6:87:c5:1b:f6:a8:
         4a:7c:2e:a6:aa:4f:f5:95:2e:c5:de:33:19:8c:2f:e4:c7:26:
         26:04:b5:7f:24:e0:2c:6d:94:92:c6:f6:d7:a3:35:b6:80:70:
         99:63:65:8a:49:54:12:16:a1:a7:57:88:3a:b8:09:99:c9:76:
         e7:23:fd:5e:96:6a:e4:5b:a7:23:ec:d9:8d:70:ef:e1:3c:6a:
         14:c8:62:fd:d5:5c:64:09:25:18:da:b3:ba:06:42:c9:19:25:
         ce:62:c8:6c:9d:f3:5d:73:ad:61:bf:49:09:3e:24:dd:1e:df:
         bc:6a:54:84:19:b5:d3:b9:45:2a:3c:19:a9:06:2f:26:a6:73:
         25:96:0a:b0:bd:06:ff:6f:94:1a:24:be:6a:f0:fb:f1:32:53:
         a9:a7:63:8a:9d:15:8d:09:fd:30:e5:ce:fb:b6:b9:7c:f8:2e:
         95:c9:fe:01:75:14:6f:b4:65:5d:36:c1:cc:77:0a:d5:d9:66:
         5c:e8:fb:a2:90:61:9b:f8:4b:02:79:39:aa:4a:44:42:c1:c3:
         d6:4b:b8:53:36:84:b3:88:23:41:b1:c7:4e:cb:d1:71:b8:cc:
         d4:25:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:26 2026 by rpki-client