Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b99ab2ab-3369-34bc-b63f-7c57501869fe.roa
File:                     b99ab2ab-3369-34bc-b63f-7c57501869fe.roa (raw, json)
Hash identifier:          NOxyO+5K2E5CtfReJMagROPl0EDNQUYeqxkRPdwSigw=
Subject key identifier:   CC:0A:11:CB:E9:F4:B5:20:E6:9E:4C:20:4F:DF:A4:1F:E9:F9:14:84
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37204003B5DA5D1825D65C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b99ab2ab-3369-34bc-b63f-7c57501869fe.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        131.150.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:04:00:3b:5d:a5:d1:82:5d:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=54d651a2-3906-4af5-a7e5-09b3e699c611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:38:2d:e0:c7:02:b2:df:6b:6a:1b:27:08:a2:
                    ac:85:bd:4b:76:92:1c:4e:af:ce:78:3f:24:f1:8e:
                    b9:72:ba:59:8d:40:94:51:dc:e0:71:ce:09:cf:20:
                    cf:57:b1:a8:23:98:72:71:40:a5:9a:02:a4:5b:9d:
                    22:cd:d5:f3:5c:f2:93:7e:d7:8a:95:3c:d3:52:57:
                    c8:7e:fd:49:6b:81:16:a4:1e:2f:14:c6:f9:2b:96:
                    5b:42:a1:99:89:e7:7a:f1:1d:2e:c0:ec:8c:85:20:
                    6d:d9:9a:06:c7:7f:31:26:8f:2f:df:1d:73:0e:02:
                    36:49:3b:ed:2f:f6:ed:a4:85:70:20:d6:a0:ab:bf:
                    98:3b:f2:0c:fe:01:ac:36:ed:8c:ca:1d:d2:d1:cf:
                    42:81:ad:b9:69:ee:f4:39:f3:0a:19:8a:ea:9d:76:
                    73:0c:23:ed:fc:84:0e:f5:fa:e0:b1:10:3c:0d:43:
                    9c:28:12:97:5c:50:91:3e:2d:58:dc:c3:9d:c5:cc:
                    ea:f3:89:64:e8:57:ed:21:b4:58:0b:f5:cc:c2:f9:
                    03:02:73:41:40:a2:72:db:9c:8c:27:de:b0:2b:11:
                    65:bc:53:b0:1a:bd:a9:ef:12:a7:65:9d:90:f7:12:
                    55:da:9b:5d:8e:5b:a0:3b:e5:9f:58:25:fa:21:a6:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0A:11:CB:E9:F4:B5:20:E6:9E:4C:20:4F:DF:A4:1F:E9:F9:14:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b99ab2ab-3369-34bc-b63f-7c57501869fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ed:5f:ce:6d:37:da:d7:e5:62:81:63:95:c0:a3:7b:4b:3b:
         03:08:e0:3b:47:4e:34:d4:0a:8e:4c:f5:70:cd:4f:fa:b5:84:
         cf:ce:ae:81:41:53:92:9d:d1:53:ed:6c:bd:92:69:d5:9a:de:
         f2:f5:51:72:f4:76:20:c0:1d:11:32:63:bc:ef:33:22:64:ef:
         29:45:b6:9b:47:88:a9:52:9a:66:8c:22:41:5c:f1:38:6d:3a:
         46:d3:03:38:ef:29:3a:36:1c:03:4c:7e:f7:74:c9:3f:11:a0:
         54:63:92:63:d5:f4:75:9d:7b:3d:d1:69:d2:9e:cf:f5:99:de:
         10:52:8f:b4:bf:e6:08:50:ae:19:c7:5c:95:e2:fd:e5:90:13:
         b6:66:f0:8f:35:ad:d7:2f:31:56:5c:8c:73:08:07:43:54:33:
         84:17:9f:64:ec:17:ab:e6:ef:e0:e8:36:81:66:5e:bd:66:4a:
         da:ac:20:64:ff:3f:03:f0:40:c2:bd:a8:b9:88:6b:1f:b0:df:
         3e:0a:07:9e:f0:3d:c1:e6:4f:d5:8b:43:78:3f:4f:ac:7a:a2:
         eb:32:60:e9:92:15:bf:f3:91:28:1c:e6:c8:ea:8f:f4:f3:c5:
         8c:64:19:a2:0a:f8:89:e6:6b:36:ef:8a:77:ff:f8:0c:90:25:
         97:38:38:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:18:14 2026 by rpki-client