Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9975da0-2498-3d0d-8aae-f200135b7a7d.roa
File:                     d9975da0-2498-3d0d-8aae-f200135b7a7d.roa (raw, json)
Hash identifier:          nkMgSfaAgi9SWUq4l3yrMQHjvgjPghaAHJb5YWOlpJY=
Subject key identifier:   25:39:0C:C5:A5:B2:02:75:A1:89:8A:FB:40:53:5F:EB:37:F7:83:E7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584A963685C41E51CC138C6E3800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9975da0-2498-3d0d-8aae-f200135b7a7d.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     0
IP address blocks:        131.150.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:85:c4:1e:51:cc:13:8c:6e:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=d36ed134-1fc2-4f17-9e47-4d78d040b19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bb:51:cc:4d:f6:36:37:5e:d1:8e:15:b6:fd:
                    97:0b:64:e0:6e:95:76:87:f2:a4:00:dc:9e:71:16:
                    cc:17:4f:f4:3c:13:2f:0e:bc:0a:5b:08:a7:94:e8:
                    82:89:e4:cd:97:18:bc:db:21:e7:2f:bd:a3:f0:5d:
                    ec:07:6c:85:eb:de:b7:3c:69:a0:80:da:ba:6d:c3:
                    01:0c:6f:5a:d2:4f:ed:64:50:1d:79:15:c9:40:f0:
                    fb:1a:f0:92:c5:68:92:92:5b:09:f4:c7:81:7f:86:
                    66:02:b3:35:e0:58:56:26:4b:76:e9:a4:02:7e:bd:
                    52:09:bd:9b:40:d7:cf:58:ac:83:69:87:16:c8:a6:
                    79:46:4a:24:58:00:d2:83:73:2d:24:b3:3a:4c:cf:
                    7c:bb:c0:94:df:7a:60:ba:d4:41:48:84:20:10:e0:
                    91:ea:a9:88:a4:9a:ea:e8:fd:78:5b:67:4e:6b:e3:
                    fc:38:a8:f7:80:84:9a:de:cd:bb:b2:61:79:f0:7f:
                    50:64:06:9a:2b:59:c2:a9:d4:ba:2c:51:ab:e5:d6:
                    88:29:90:3c:d9:af:c1:eb:eb:d6:82:39:e9:8b:3f:
                    5f:b9:12:6a:1c:31:63:54:13:87:c7:ce:4d:e8:2f:
                    80:12:87:7f:7d:fa:7d:a8:4e:da:3b:77:b8:92:92:
                    37:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:39:0C:C5:A5:B2:02:75:A1:89:8A:FB:40:53:5F:EB:37:F7:83:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9975da0-2498-3d0d-8aae-f200135b7a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:05:33:bf:a1:8d:f4:41:a6:6a:0b:fe:fe:28:43:d9:aa:9c:
         7c:d8:ee:15:d9:49:4d:d6:b3:39:a3:51:e1:da:18:ed:af:3c:
         4a:89:68:03:44:1f:f3:44:f4:d1:1d:13:ba:65:27:c7:5d:ef:
         bd:e2:85:a0:96:c1:47:47:1a:9d:25:39:32:c6:4c:60:fa:47:
         5d:5a:68:93:8b:f6:1b:a0:04:f0:24:92:7a:2a:1c:ad:42:83:
         ae:e6:f6:1a:60:17:8b:21:c7:70:d7:60:52:b2:69:67:87:41:
         60:d3:e6:0b:10:40:27:09:c4:10:ae:f7:bf:36:d5:3b:f0:3a:
         41:c5:a0:df:10:7f:fa:61:58:0e:0d:88:bd:b6:4d:95:99:bb:
         b0:67:a3:50:aa:f1:cc:9e:19:b9:80:40:dc:41:81:8e:25:a3:
         ce:58:ca:a6:9a:60:dc:b2:73:f5:05:64:f1:c7:7e:69:ee:cc:
         95:71:e3:b0:bf:40:f0:b4:2a:6d:f9:c6:16:e7:0c:b9:7d:84:
         aa:1d:03:6e:a1:24:a1:68:1d:c1:05:6c:80:10:e3:c1:22:46:
         b3:0b:15:7b:4d:f9:53:10:19:49:46:64:ca:7d:62:0c:e9:ce:
         f6:88:a0:64:61:8a:3d:4e:37:53:4e:ba:06:2e:e8:63:95:69:
         e7:52:08:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:57:16 2025 by rpki-client