Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ff12024b-6536-3a3d-8885-376052232e6b.roa
File:                     ff12024b-6536-3a3d-8885-376052232e6b.roa (raw, json)
Hash identifier:          srbT+T35HNu5XcL9hz1tPCSxBIQxzImIPrKJkGPbkHo=
Subject key identifier:   AC:3D:DE:8A:4D:5F:C4:1B:9A:B4:BE:59:15:AE:72:02:D4:67:DC:5C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FA2BEB691718439498380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ff12024b-6536-3a3d-8885-376052232e6b.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        131.150.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:a2:be:b6:91:71:84:39:49:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=3a7a9df1-abfb-4164-9b01-c3b027d78433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:91:33:9b:06:62:f6:3c:e8:c4:69:02:1d:
                    5e:7b:a7:f9:fe:1b:50:9b:83:2a:d3:cf:9e:a7:fe:
                    04:05:92:59:bb:1b:49:d1:27:d2:a2:07:24:bd:53:
                    8e:e5:6a:64:9f:7b:04:9e:56:a0:d0:43:a9:01:72:
                    d0:b4:f8:f6:a6:91:fa:78:c6:2d:40:81:fe:91:55:
                    bc:33:47:44:5e:94:50:d6:30:d0:9e:7f:d9:e1:39:
                    83:18:44:82:7e:53:6f:15:d0:65:65:bd:7d:67:7b:
                    1f:34:3f:d6:19:9f:78:b6:65:27:d3:4c:30:b5:a2:
                    1e:4c:e1:45:ee:a4:7d:9c:63:63:24:ef:85:0d:93:
                    fc:3d:82:9d:c3:a6:2c:d3:29:2f:cc:e4:7e:6b:88:
                    39:ed:fa:de:3f:ce:e0:52:63:d8:28:4e:13:aa:bb:
                    9d:0f:41:72:8a:48:32:80:51:07:a7:ff:6d:75:4a:
                    2a:6a:11:75:f3:be:58:7e:09:03:53:d4:62:fc:c7:
                    5e:45:61:d0:c2:e4:a3:40:2e:68:ad:ac:ed:9e:ad:
                    a6:00:73:88:99:12:d1:aa:b7:5e:90:63:43:df:da:
                    d0:cf:e5:81:de:f5:bb:70:30:6e:54:90:bc:39:e3:
                    f2:30:95:d6:de:a0:73:a8:bb:05:19:c5:0f:e1:2e:
                    a2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3D:DE:8A:4D:5F:C4:1B:9A:B4:BE:59:15:AE:72:02:D4:67:DC:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ff12024b-6536-3a3d-8885-376052232e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:4c:77:2e:f8:29:d5:ea:19:46:4c:37:8a:97:0d:cb:01:51:
         00:54:bd:97:aa:7e:00:21:ea:57:f8:9e:29:93:95:01:fd:5b:
         7b:0f:e0:4c:2e:05:34:42:60:eb:48:90:5a:2c:5d:06:c2:e0:
         09:15:ff:8d:5b:5f:7a:20:82:c9:84:cf:a3:fc:f5:a3:27:aa:
         a6:f7:97:ab:8a:8c:75:ab:71:70:0a:bb:90:04:dc:39:12:06:
         be:12:f6:6e:8b:33:eb:e1:26:58:0d:fc:dd:0f:d8:38:f7:92:
         3c:d1:fa:13:1a:0c:b0:84:4f:d7:72:b4:81:ee:2f:21:eb:34:
         cb:58:5c:d7:8d:d7:95:45:f2:08:5a:b4:d8:3a:63:73:0c:43:
         ec:90:21:db:91:9f:c0:de:43:0a:c6:1d:79:fe:92:70:0c:d7:
         f2:74:82:0f:b0:ec:cd:ad:eb:88:66:ec:20:53:a2:ea:db:8c:
         7a:45:7b:ce:8d:57:71:8f:ff:e3:23:71:50:d7:e3:98:c4:99:
         21:98:12:e5:86:fe:03:e1:ac:09:1e:34:0d:6c:6f:8a:a1:4c:
         37:cd:11:0d:72:e9:f7:8c:79:de:9d:7a:f3:ee:32:c2:7f:10:
         fa:33:0d:b5:89:cf:d0:e7:f3:2d:9c:be:44:84:18:16:9b:02:
         79:bc:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:16:02 2026 by rpki-client