Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f60a1bb1-dd5e-35e7-a663-854e841b681c.roa
File:                     f60a1bb1-dd5e-35e7-a663-854e841b681c.roa (raw, json)
Hash identifier:          bYBg0yWfDG4irbL6tjj31FXB6qdMpldov7N8STzgfAg=
Subject key identifier:   C1:7E:75:42:64:05:BF:72:95:F3:5E:F5:43:72:47:FF:8D:D5:EA:6A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B39C541D216B121A5556C9900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f60a1bb1-dd5e-35e7-a663-854e841b681c.roa
Signing time:             Wed 17 Sep 2025 15:06:13 +0000
ROA not before:           Wed 17 Sep 2025 15:06:13 +0000
ROA not after:            Tue 16 Dec 2025 16:06:13 +0000
asID:                     0
IP address blocks:        131.150.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:c5:41:d2:16:b1:21:a5:55:6c:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 17 15:06:13 2025 GMT
            Not After : Dec 16 16:06:13 2025 GMT
        Subject: CN=a2e64666-db72-49d2-ae3a-c276ee18022e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8b:86:70:95:21:f2:a1:fd:78:35:87:44:ab:
                    72:36:96:e8:06:bc:ad:34:17:e2:d5:b4:ea:d4:47:
                    d8:03:9a:f7:be:1c:14:14:4a:80:8d:da:b2:a0:99:
                    f9:cd:73:ab:cd:b9:20:98:02:cb:e8:bc:5c:3d:f1:
                    7f:5d:8b:ca:08:d2:9f:51:12:20:85:2b:83:8c:f0:
                    3a:7c:c3:4e:a0:df:b0:bb:0f:57:54:c4:39:37:9a:
                    95:e7:a8:31:d2:be:a0:76:2c:e0:c7:e1:ae:0f:85:
                    28:10:57:c6:9e:c8:c5:e8:3e:e3:22:9e:c6:9a:d8:
                    6c:0d:17:26:47:a1:19:90:e8:91:28:98:71:0e:02:
                    d6:25:21:56:6f:b8:83:cc:8f:f3:17:67:94:d0:12:
                    02:d0:80:25:ad:43:a6:9e:0f:ec:8f:e1:c4:49:fb:
                    ff:40:2e:aa:78:5d:9c:33:d8:47:a9:03:4e:2a:73:
                    97:a3:40:0f:e4:e0:2e:53:35:33:b7:d1:3f:4c:88:
                    bb:4a:d5:10:58:69:29:c8:34:a0:77:63:db:0e:6d:
                    d0:f4:e6:27:4c:eb:77:f3:24:40:de:6a:7f:7e:60:
                    e0:c7:fc:f6:63:1e:47:97:0e:09:b5:58:1d:8a:28:
                    c4:03:99:23:f5:24:33:da:44:47:83:eb:a7:c7:1f:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7E:75:42:64:05:BF:72:95:F3:5E:F5:43:72:47:FF:8D:D5:EA:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f60a1bb1-dd5e-35e7-a663-854e841b681c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:37:6b:84:87:41:63:eb:e5:f1:19:05:a5:85:d1:13:31:35:
         88:e4:46:ba:f8:b9:55:31:5c:92:df:44:a9:f1:ab:38:c9:c5:
         d8:14:69:46:a4:67:66:b8:7b:6e:cd:62:6b:71:d3:ee:31:05:
         10:b0:df:19:5a:9a:c6:d6:df:ed:f9:cd:a6:60:f4:4a:71:ea:
         ab:3b:19:18:3a:80:cb:af:80:a7:14:c4:ca:08:69:cb:a5:6f:
         a9:88:fd:3b:3a:9f:ab:fd:bf:fb:24:7d:dd:42:c9:cc:ed:0e:
         43:6d:18:25:81:1e:43:76:83:e9:e7:26:01:5f:0f:58:f7:54:
         24:a2:e6:21:d3:fe:72:38:b3:9b:2f:07:3c:51:69:6c:16:ee:
         b6:e4:3d:64:8e:f8:36:9f:c3:08:86:dd:67:eb:70:29:b2:31:
         26:be:77:ef:cb:19:c0:ac:04:0f:03:16:96:18:53:50:c6:73:
         7d:10:90:85:1a:60:a5:0e:11:0b:73:a5:48:23:0e:56:36:6e:
         02:36:df:3c:eb:5c:38:84:99:63:0c:62:37:20:c3:bf:5f:7d:
         5d:b4:35:8e:3a:4b:34:83:41:72:b1:94:99:4e:68:93:1c:21:
         f4:ad:83:61:76:b5:5c:4c:43:21:77:72:fb:a1:40:97:bf:83:
         0d:bb:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:57:46 2025 by rpki-client