Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ecf1ff06-795c-317e-afe1-0175015a9f1e.roa
File:                     ecf1ff06-795c-317e-afe1-0175015a9f1e.roa (raw, json)
Hash identifier:          naG3ygTKg1lMYpwjb9o8dloLZieQjp8pkVkOyTSZ/Dw=
Subject key identifier:   4D:37:78:EA:A8:72:BE:2D:8B:2F:FE:C4:75:AE:10:F9:5F:6B:37:F9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161B804C7B59D55DC85FE40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ecf1ff06-795c-317e-afe1-0175015a9f1e.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     7843
IP address blocks:        131.150.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:b8:04:c7:b5:9d:55:dc:85:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=c935ed7b-e0eb-4518-80f0-097fb1fe2b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:3c:14:84:07:45:c7:36:af:56:08:51:76:
                    b4:ea:50:53:75:35:f5:1c:57:2c:b0:38:4e:e4:0e:
                    25:d8:cf:ab:40:8f:5a:4d:6a:99:12:c8:fe:ee:80:
                    25:c1:3c:80:09:24:8a:da:1d:88:0c:36:a9:cc:94:
                    b3:ed:e9:77:6f:b3:c9:d4:8b:01:5e:50:55:d1:49:
                    fc:ed:23:e1:79:fe:5a:7d:71:73:9b:b1:95:5c:2b:
                    2a:fd:ce:62:7b:e9:29:60:e3:99:5f:e5:3c:f7:56:
                    b1:c6:b4:c5:d7:90:45:c4:44:ce:e8:8f:9a:2c:28:
                    b2:d8:29:87:3f:44:c2:89:80:db:8a:9b:e7:50:60:
                    99:e0:9f:c5:7e:01:47:36:e9:c7:16:d8:2f:01:88:
                    fc:e5:9b:85:9d:a9:10:9b:f4:15:37:c6:0f:6c:c6:
                    49:16:4b:9b:0f:6b:1e:ec:9d:c6:01:f7:db:a0:2f:
                    e0:d7:b4:50:17:c8:2e:6c:7e:4a:3b:99:fd:22:57:
                    0d:c4:26:ed:da:5a:42:60:b5:23:6b:4e:27:a2:80:
                    5d:6a:e7:2d:64:48:59:97:b3:20:b9:6e:51:31:f5:
                    c0:b5:f7:cb:32:35:b3:16:92:ad:bd:6a:f4:d2:f8:
                    f6:81:50:c9:30:34:8a:cc:ce:60:5f:e9:e0:0e:59:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:37:78:EA:A8:72:BE:2D:8B:2F:FE:C4:75:AE:10:F9:5F:6B:37:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ecf1ff06-795c-317e-afe1-0175015a9f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:8a:bb:2f:b3:e9:1a:49:cc:f7:76:39:58:09:c0:8e:23:24:
         ed:73:64:02:b5:65:c6:c5:bb:41:40:46:49:f9:82:78:cc:c5:
         05:5c:ab:81:0b:68:38:21:38:d8:d0:28:11:11:7d:15:c9:6b:
         c4:1b:60:68:f1:1c:cf:3c:e6:17:81:70:a4:e0:ef:45:2c:ba:
         0c:51:32:46:78:ac:ad:75:54:c5:e2:dd:f0:6a:b2:c6:db:eb:
         1a:cd:08:7b:68:88:e4:50:7d:eb:a5:92:62:29:df:77:e3:15:
         f1:ab:39:b3:33:22:a6:91:86:ab:df:41:5a:8a:d2:5b:55:9b:
         da:61:bf:4d:ba:75:a1:de:c2:86:7c:72:c3:87:be:bd:bb:1e:
         f6:d4:da:4e:68:d0:f0:8c:b1:41:fe:83:0a:8b:86:24:cf:ed:
         5c:fb:e2:ad:19:cc:23:82:88:89:ce:2b:2d:fa:7f:05:e9:63:
         30:6a:bc:45:d5:7f:eb:9a:51:7f:e0:3b:58:ca:60:3f:a5:ff:
         d0:b0:52:4c:60:8a:1c:e1:50:1c:40:fc:f5:89:b0:a2:82:94:
         9c:b7:23:9e:b1:38:3f:31:22:5e:53:0f:1f:14:67:df:e1:3a:
         ba:0f:da:8b:01:78:88:9a:18:2a:c3:ac:82:6d:d2:fe:4c:a8:
         78:dd:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:42 2025 by rpki-client