Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ff12024b-6536-3a3d-8885-376052232e6b.roa
File:                     ff12024b-6536-3a3d-8885-376052232e6b.roa (raw, json)
Hash identifier:          XGijqjeiMieG9jF+PBLoJQPDoxdrv+GekAaNYVNqm44=
Subject key identifier:   76:02:EA:CE:D6:BF:FF:67:D3:6E:24:F6:9B:E9:72:F8:3D:55:A0:3A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161BF40162C4A8D8C0F9100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ff12024b-6536-3a3d-8885-376052232e6b.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        131.150.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:bf:40:16:2c:4a:8d:8c:0f:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=09bb61a6-42f2-4d68-b2d8-ad96feaef853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:26:62:d9:7a:2e:e2:1b:8c:a4:13:7f:34:
                    2d:6d:f3:bf:5f:50:8f:f4:92:55:1f:68:03:f9:8c:
                    ce:32:96:0b:6f:d9:6c:1f:4d:bd:5a:a2:12:79:c8:
                    d1:92:e7:6b:23:6f:f4:ab:36:65:7f:86:3e:21:9a:
                    67:82:85:a2:36:f6:29:f3:bb:79:99:85:8c:61:a8:
                    d9:30:72:f0:92:45:6c:33:a6:dd:c2:25:37:e1:49:
                    82:57:4e:5d:fe:6c:c7:ec:fa:35:36:50:0e:53:9c:
                    a4:b6:17:c2:f2:a2:4a:b0:e0:75:c7:26:07:97:c2:
                    be:be:b7:37:a2:77:1f:b1:45:58:93:c5:61:ed:38:
                    42:ac:6d:59:91:38:7f:f0:c5:c6:ef:4f:db:f5:64:
                    1d:6f:7f:f7:38:d1:c2:0f:a4:73:45:45:23:d5:e6:
                    de:18:24:73:0e:43:10:8e:db:c9:bb:cb:5b:08:65:
                    fb:ba:96:e4:70:22:e8:bf:27:f7:76:cc:1e:0c:36:
                    a3:2c:e5:5b:8f:b0:0e:d8:30:45:54:bd:77:1d:d6:
                    6f:ba:ba:2e:56:5b:68:9c:4c:a0:b4:2d:8e:ff:c7:
                    cb:a5:ef:d1:5d:38:58:29:ed:d0:f0:90:e7:55:43:
                    56:d7:83:1a:fe:2e:22:81:09:1f:da:a5:07:a2:cc:
                    9e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:02:EA:CE:D6:BF:FF:67:D3:6E:24:F6:9B:E9:72:F8:3D:55:A0:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ff12024b-6536-3a3d-8885-376052232e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:60:43:da:13:35:c5:98:7e:31:d5:7c:34:cc:26:0d:31:6b:
         60:6f:e4:48:b4:86:57:b5:b8:cb:aa:05:96:60:b3:fe:99:80:
         68:00:a6:77:a9:4a:4f:5a:3d:21:c5:48:e8:21:82:fd:3e:3e:
         2d:3b:af:70:c6:b1:dd:ea:2a:27:31:ec:11:d0:92:0a:1f:ec:
         48:4a:a6:49:0a:fc:ee:ed:82:61:1f:cf:66:f8:09:1e:d9:65:
         de:c4:95:de:e4:39:20:bf:b7:0b:57:47:c8:ff:36:39:3d:0e:
         42:bc:71:67:09:ef:d1:a5:88:e6:74:63:4a:80:f8:3b:3e:d2:
         23:aa:60:50:80:3c:4f:e9:df:91:b7:22:c6:ca:17:20:63:0e:
         d6:99:f8:b1:2a:be:69:c2:63:bd:40:48:3a:9d:4c:31:4c:51:
         13:a9:38:58:92:1f:0a:e9:1f:15:68:5c:7a:ad:14:4b:14:dd:
         f8:6b:34:54:9e:23:df:25:8a:40:5d:aa:4c:ee:2c:ed:1a:41:
         4e:00:3b:a1:ac:cf:58:ee:d3:22:63:7d:25:fa:d8:43:a9:ed:
         92:6f:4b:44:6a:d1:91:1a:98:ae:25:08:36:94:76:71:7f:ab:
         d2:1f:d1:62:28:a8:35:dc:e1:cc:a5:58:5d:8d:26:95:07:2f:
         9b:be:51:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYb9AFixKjYwPkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
MDliYjYxYTYtNDJmMi00ZDY4LWIyZDgtYWQ5NmZlYWVmODUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVImYtl6LuIbjKQTfzQtbfO/X1CP9JJVH2gD
+YzOMpYLb9lsH029WqISecjRkudrI2/0qzZlf4Y+IZpngoWiNvYp87t5mYWMYajZ
MHLwkkVsM6bdwiU34UmCV05d/mzH7Po1NlAOU5ykthfC8qJKsOB1xyYHl8K+vrc3
oncfsUVYk8Vh7ThCrG1ZkTh/8MXG70/b9WQdb3/3ONHCD6RzRUUj1ebeGCRzDkMQ
jtvJu8tbCGX7upbkcCLovyf3dsweDDajLOVbj7AO2DBFVL13HdZvurouVltonEyg
tC2O/8fLpe/RXThYKe3Q8JDnVUNW14Ma/i4igQkf2qUHosyefQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYC6s7Wv/9n024k9pvpcvg9VaA6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZmYxMjAyNGItNjUzNi0z
YTNkLTg4ODUtMzc2MDUyMjMyZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5YYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANgQ9oTNcWYfjHVfDTMJg0xa2Bv5Ei0hle1uMuqBZZgs/6ZgGgApnep
Sk9aPSHFSOghgv0+Pi07r3DGsd3qKicx7BHQkgof7EhKpkkK/O7tgmEfz2b4CR7Z
Zd7Eld7kOSC/twtXR8j/Njk9DkK8cWcJ79GliOZ0Y0qA+Ds+0iOqYFCAPE/p35G3
IsbKFyBjDtaZ+LEqvmnCY71ASDqdTDFMUROpOFiSHwrpHxVoXHqtFEsU3fhrNFSe
I98likBdqkzuLO0aQU4AO6Gsz1ju0yJjfSX62EOp7ZJvS0Rq0ZEamK4lCDaUdnF/
q9If0WIoqDXc4cylWF2NJpUHL5u+UYY=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:34 2025 by rpki-client