Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b99ab2ab-3369-34bc-b63f-7c57501869fe.roa
File:                     b99ab2ab-3369-34bc-b63f-7c57501869fe.roa (raw, json)
Hash identifier:          ubTBKqieg1GEDndwkJjExd0iKxZf96uaqdmCmKX2DA8=
Subject key identifier:   DE:91:8B:AF:93:F9:B8:CC:61:83:80:E6:3D:24:51:C4:29:E4:1D:DA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F37808BC469B1D0484A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b99ab2ab-3369-34bc-b63f-7c57501869fe.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        131.150.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:37:80:8b:c4:69:b1:d0:48:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=743265c7-7f25-4530-aa11-e3e0052a54cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:de:53:8b:27:31:0b:2d:cb:98:dc:95:e6:
                    19:1c:a6:4c:61:fb:2c:33:0b:5b:b5:e7:89:e5:73:
                    48:10:09:ea:98:03:93:e5:15:45:79:e7:48:85:4e:
                    db:86:be:ee:67:3b:7d:df:8d:a6:2e:1e:46:95:17:
                    6a:71:3d:e6:b5:ae:1d:79:f0:55:3d:93:35:39:8e:
                    51:d9:d8:42:58:cd:28:30:fd:a8:71:72:11:dd:83:
                    55:2c:99:f4:39:1a:2f:8a:bd:bd:26:cd:07:ca:73:
                    9a:f6:4d:00:93:b4:26:bb:0d:f0:1b:0a:96:60:7b:
                    7a:de:8f:a6:b8:b4:5b:25:b4:ea:04:9c:4e:51:e6:
                    cd:de:01:51:d7:54:a9:5d:80:f2:cc:68:1f:bb:fa:
                    ae:e4:89:f6:85:46:4b:dc:d0:65:54:e3:7d:ef:a1:
                    2e:0f:e4:18:a4:40:09:1a:56:f0:6d:94:01:21:18:
                    9c:68:32:58:4e:e8:83:ee:42:60:2b:5a:87:a4:1d:
                    fe:27:6c:8d:99:72:24:2d:50:b8:ab:da:0a:ff:3f:
                    ca:bd:17:62:41:f4:f1:23:71:19:1b:30:21:99:ec:
                    7c:61:53:1e:7f:75:68:08:77:59:da:8f:19:1b:7c:
                    3b:cb:9a:27:5e:97:af:21:be:44:8e:e4:eb:8c:fb:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:91:8B:AF:93:F9:B8:CC:61:83:80:E6:3D:24:51:C4:29:E4:1D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b99ab2ab-3369-34bc-b63f-7c57501869fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:15:5b:33:20:fb:1e:ff:ef:0e:d6:ca:89:fb:04:f1:60:bc:
         02:51:bb:ba:11:92:af:60:fa:92:ed:b0:b5:d7:40:7f:bc:af:
         68:ff:0e:f5:fd:e4:68:bb:ab:51:f1:9d:76:fa:1d:b0:0c:03:
         59:e4:2b:79:f6:fa:b6:39:38:da:df:22:b6:fb:f1:9d:45:30:
         7a:43:d0:24:b7:67:2d:3f:5d:83:b9:69:46:23:2f:7d:a8:20:
         26:89:53:4c:ed:f3:9c:ae:17:c9:f4:27:d6:8f:e8:57:49:29:
         9a:31:2b:4e:f1:51:18:00:49:4b:43:21:e4:10:ee:a1:f9:26:
         31:b2:68:36:03:43:71:8f:e4:0c:1b:40:8d:f9:09:c3:77:45:
         25:9b:63:f3:fb:ba:d4:0a:a9:19:3e:0a:f2:83:8f:a5:22:2c:
         3e:c8:ea:7d:db:ea:aa:55:1a:27:93:55:cc:98:36:19:fc:ec:
         1c:79:18:ef:8c:e4:6b:a4:81:5d:13:2a:4a:39:ac:24:50:d9:
         67:1a:7c:32:bc:fa:fd:d4:5d:aa:c3:c9:f8:bc:10:02:8a:e9:
         89:b1:a1:b3:1c:f5:ee:46:95:c6:aa:1a:25:3c:2b:75:fe:d3:
         43:fd:72:d5:3e:dd:da:25:80:61:1f:29:c6:9d:38:8f:2a:c1:
         08:46:e7:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDzeAi8RpsdBISoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
NzQzMjY1YzctN2YyNS00NTMwLWFhMTEtZTNlMDA1MmE1NGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLDeU4snMQsty5jcleYZHKZMYfssMwtbteeJ
5XNIEAnqmAOT5RVFeedIhU7bhr7uZzt9342mLh5GlRdqcT3mta4defBVPZM1OY5R
2dhCWM0oMP2ocXIR3YNVLJn0ORovir29Js0HynOa9k0Ak7Qmuw3wGwqWYHt63o+m
uLRbJbTqBJxOUebN3gFR11SpXYDyzGgfu/qu5In2hUZL3NBlVON976EuD+QYpEAJ
GlbwbZQBIRicaDJYTuiD7kJgK1qHpB3+J2yNmXIkLVC4q9oK/z/KvRdiQfTxI3EZ
GzAhmex8YVMef3VoCHdZ2o8ZG3w7y5onXpevIb5EjuTrjPvx6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6Ri6+T+bjMYYOA5j0kUcQp5B3aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjk5YWIyYWItMzM2OS0z
NGJjLWI2M2YtN2M1NzUwMTg2OWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5ZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFAVWzMg+x7/7w7Wyon7BPFgvAJRu7oRkq9g+pLtsLXXQH+8r2j/DvX9
5Gi7q1HxnXb6HbAMA1nkK3n2+rY5ONrfIrb78Z1FMHpD0CS3Zy0/XYO5aUYjL32o
ICaJU0zt85yuF8n0J9aP6FdJKZoxK07xURgASUtDIeQQ7qH5JjGyaDYDQ3GP5Awb
QI35CcN3RSWbY/P7utQKqRk+CvKDj6UiLD7I6n3b6qpVGieTVcyYNhn87Bx5GO+M
5GukgV0TKko5rCRQ2WcafDK8+v3UXarDyfi8EAKK6YmxobMc9e5GlcaqGiU8K3X+
00P9ctU+3dolgGEfKcadOI8qwQhG56s=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:36:11 2026 by rpki-client