Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ebba6214-749a-36f6-bdcf-e6c78ddcc6c6.roa
File:                     ebba6214-749a-36f6-bdcf-e6c78ddcc6c6.roa (raw, json)
Hash identifier:          0b2SxNspGYZLCm4l+XlcOnJt0PwL/TGyjZjcUiFwUxE=
Subject key identifier:   81:8C:26:1E:92:21:65:12:F4:85:1E:2C:F3:A7:59:0B:ED:62:03:3C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F5A32CC8CF633F8F62C9571A0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ebba6214-749a-36f6-bdcf-e6c78ddcc6c6.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        131.150.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:cc:8c:f6:33:f8:f6:2c:95:71:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=df837a56-7fcf-4880-a6f0-044f3fb1775b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:0a:ae:6f:12:ac:f5:7e:65:bc:27:bf:34:
                    8b:a8:f2:3b:8e:41:eb:9f:63:ae:f0:84:c0:d4:bd:
                    85:9a:44:8c:28:8b:74:cc:19:99:57:97:ce:27:43:
                    24:0e:37:d4:87:98:44:0e:10:23:6a:66:54:5b:8d:
                    99:9b:67:19:06:af:9a:af:d6:3a:42:17:37:61:82:
                    ea:b6:c2:05:5d:f9:a8:4c:a0:d2:cd:a0:87:0b:7c:
                    9f:78:b8:68:03:38:5f:cc:bd:bc:3d:77:cf:c9:ab:
                    33:84:e8:fe:ca:fc:e5:60:d4:6a:24:11:55:9a:00:
                    9e:44:19:2c:ef:44:bb:ef:1d:10:54:a3:9f:fd:9b:
                    90:77:ca:83:76:c7:3f:6b:19:fe:16:5d:ea:79:f9:
                    c1:2c:06:54:b9:ce:fc:da:87:82:c9:5f:98:71:4a:
                    b6:03:42:cb:fd:00:14:0d:ab:20:96:43:ef:56:9c:
                    5e:0b:47:d1:33:41:e9:d4:fb:7e:c5:35:c6:e4:a1:
                    41:8c:cb:d3:c2:90:3a:13:e2:d7:24:53:a1:86:c9:
                    73:19:a5:39:1b:cd:0b:10:61:fe:8e:c5:a4:b6:3c:
                    fe:9c:26:0e:66:18:34:45:96:3b:9a:bd:d1:f9:97:
                    4b:bc:49:a2:b8:d9:a9:49:59:7d:e7:11:bd:81:04:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8C:26:1E:92:21:65:12:F4:85:1E:2C:F3:A7:59:0B:ED:62:03:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ebba6214-749a-36f6-bdcf-e6c78ddcc6c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ff:40:b2:1c:bc:57:bd:17:a2:57:17:6e:b2:03:50:24:46:
         73:7f:85:ba:95:d7:fd:46:e0:c4:ff:47:44:47:4b:4f:50:4b:
         3a:23:9b:02:27:87:1e:a0:30:87:e4:a6:9b:53:3a:2e:b6:97:
         f8:2b:4c:50:79:f1:41:06:24:ce:55:1d:7e:e0:f9:ce:15:0e:
         d9:31:7f:2d:05:5a:02:a2:3b:2b:3e:7a:05:de:87:87:aa:76:
         ba:f4:1d:37:30:f2:33:05:53:cf:97:59:8d:2e:d9:39:39:12:
         03:0d:52:63:7e:d2:e4:0a:a8:81:6b:de:d1:b2:14:79:38:69:
         93:e9:77:1b:8f:8b:aa:10:da:90:24:a6:bb:35:59:ee:e1:19:
         05:01:6c:6a:97:11:b4:b6:40:97:d7:2a:11:47:52:eb:49:6a:
         d0:58:0b:d0:b3:ed:12:fc:08:cd:e0:28:01:17:c7:d2:0f:2b:
         98:0e:98:d2:fa:eb:98:19:5e:ee:16:8f:af:77:b5:05:4e:06:
         fd:39:14:69:c0:79:53:6a:ad:ea:6b:d7:2d:e9:2c:8d:bd:3e:
         fa:dc:0a:79:25:5d:f4:c9:8c:7f:e7:64:b1:d2:4f:1d:c0:70:
         3d:da:9f:4b:4d:bc:5a:b8:ed:25:ea:5d:f5:4e:d8:4d:e3:6f:
         74:13:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:34:52 2026 by rpki-client