Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb6b2ec7-a155-3168-b566-2442a64f64fa.roa
File:                     eb6b2ec7-a155-3168-b566-2442a64f64fa.roa (raw, json)
Hash identifier:          YBorpzFuQuGvG3Vsbn6gI1XR072xb+hFn4I7LwGDw6Y=
Subject key identifier:   16:31:A2:D8:FA:95:26:C2:29:9A:32:B4:34:78:F5:76:FE:B3:5F:60
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E15E43E9D53A17655CB9D49B4
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb6b2ec7-a155-3168-b566-2442a64f64fa.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     0
IP address blocks:        131.150.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:3e:9d:53:a1:76:55:cb:9d:49:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=0e1d5f43-df24-4d70-86b7-82dbcd703529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:6a:28:94:47:1d:35:80:f0:06:5f:dc:e3:
                    2f:8e:5c:18:8f:9c:77:94:ec:ee:0d:d4:f5:dc:72:
                    b4:5e:de:58:f0:f3:d5:03:9e:3f:f5:fc:73:ce:f2:
                    bf:ae:36:45:0f:0f:5b:09:60:ec:73:df:ff:77:4c:
                    1e:ad:e8:5a:da:b1:26:a1:e8:f0:16:a1:be:40:cb:
                    72:da:0a:ef:cb:da:0b:b2:a8:e3:9c:1a:b1:45:8a:
                    86:e4:0a:9a:df:23:20:dd:20:f6:6b:52:ef:0a:f1:
                    30:80:c7:87:1c:7d:a5:50:a1:df:e1:7d:eb:2c:8b:
                    db:78:30:34:04:76:09:51:17:44:c7:9d:02:06:9b:
                    91:28:2c:9c:30:83:0e:8a:f1:43:45:dc:08:05:05:
                    a3:f0:88:aa:24:41:ee:66:58:2b:19:f4:cc:ad:7c:
                    44:90:60:1e:ac:9d:cf:ee:0d:4f:f2:88:10:7a:03:
                    36:8c:62:95:3e:b6:23:06:11:b2:86:ff:1b:fd:1e:
                    45:84:61:2b:53:dc:53:29:dd:d6:d6:d8:10:72:e9:
                    36:82:5c:18:0a:15:f6:cf:b5:a9:b9:60:3f:d8:d1:
                    2b:d3:48:5a:de:33:2e:7f:cf:b5:62:79:67:ee:f3:
                    35:31:93:da:e0:70:95:f3:1c:27:39:11:78:93:9e:
                    65:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:31:A2:D8:FA:95:26:C2:29:9A:32:B4:34:78:F5:76:FE:B3:5F:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb6b2ec7-a155-3168-b566-2442a64f64fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:bd:18:c8:48:36:a6:42:8e:26:b4:6c:e7:c6:00:27:36:
         96:60:1f:e1:92:de:04:86:b6:b0:f9:23:6f:2e:6e:80:57:75:
         d3:b4:34:39:12:95:4b:a0:2b:da:df:37:1c:2e:35:e1:43:9a:
         b4:58:37:5e:1a:ce:cb:98:ff:bd:35:22:ff:8c:72:fb:03:38:
         64:0d:f5:ca:42:59:72:c8:5d:af:20:56:f7:76:87:1c:bc:bc:
         85:65:37:69:22:91:51:b2:f7:22:76:e7:cd:73:b2:c6:af:e1:
         60:ef:8d:e3:a9:fc:9f:4c:a5:7f:a1:b4:ed:ac:99:4f:52:78:
         e0:4a:2c:8f:67:5b:41:b7:ff:5a:73:42:33:8c:6d:e1:68:d0:
         af:31:a3:40:a9:d9:72:1b:49:37:78:7d:07:41:dc:87:b9:1a:
         f3:a0:7d:af:ad:1f:4a:5d:c1:bf:1e:8f:80:0f:54:cb:6b:2f:
         9c:dd:10:30:84:6d:a8:fb:10:2c:f8:92:db:b4:ee:96:ec:02:
         6d:9b:c7:a5:84:88:ce:a1:fc:3e:55:36:da:27:91:b9:ff:b5:
         7d:90:1e:1a:25:a3:15:21:75:ee:7d:98:91:55:c9:fa:42:e2:
         9e:c9:ab:7b:49:56:41:c3:ec:55:6f:12:93:f8:bf:4f:84:17:
         ef:89:78:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:51:10 2026 by rpki-client