Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fb8cab9e-a015-3814-931a-0a7dbf2d717d.roa
File:                     fb8cab9e-a015-3814-931a-0a7dbf2d717d.roa (raw, json)
Hash identifier:          waC2YHM9CrZSQM8PHigRs26owSFj1L/4ZESnBn1zG+0=
Subject key identifier:   98:21:19:EB:FA:14:9E:E9:5B:2A:C5:19:8A:F8:4B:F0:85:48:AB:22
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F56955C666A603D6D54E09500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fb8cab9e-a015-3814-931a-0a7dbf2d717d.roa
Signing time:             Tue 29 Sep 2026 17:55:55 +0000
ROA not before:           Tue 29 Sep 2026 17:55:55 +0000
ROA not after:            Mon 28 Dec 2026 18:55:55 +0000
asID:                     20231
IP address blocks:        150.181.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:56:95:5c:66:6a:60:3d:6d:54:e0:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 29 17:55:55 2026 GMT
            Not After : Dec 28 18:55:55 2026 GMT
        Subject: CN=18df563e-1bc3-4fd6-8921-9d6b7eda469d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:dd:34:c7:6a:c7:10:04:a5:b3:88:ce:78:
                    e9:12:d3:3f:f4:98:e9:34:f4:1a:de:5c:27:80:a7:
                    6f:eb:0b:72:99:9a:c1:35:97:bc:0a:31:7b:88:48:
                    fa:1f:29:43:71:d8:5e:de:74:c1:72:da:c3:9d:66:
                    4d:9b:9f:56:60:96:b2:53:37:96:a1:cb:ce:6d:4a:
                    32:08:ee:f5:9f:b9:d9:04:45:ce:15:a0:0c:7b:cf:
                    76:2a:e0:32:43:0b:21:0f:23:ac:16:0e:4a:d0:5b:
                    5b:f7:f5:57:8b:3e:df:34:2a:fe:10:ef:65:a4:95:
                    f4:38:e7:98:27:ab:b9:a7:9b:03:9a:6b:10:dc:86:
                    60:9f:cb:cf:ca:f8:b4:11:80:4e:1e:9e:94:f7:7a:
                    06:d5:d4:c4:f4:21:20:2a:14:69:49:4c:f2:5e:12:
                    a7:72:24:4b:4b:a1:55:06:cd:4f:67:2d:18:2b:dd:
                    06:18:85:c0:c2:3b:1f:a2:43:85:32:7f:41:d2:7d:
                    83:71:80:fd:5b:bc:ee:b9:ac:7c:99:f4:6d:5b:31:
                    da:21:cf:e3:38:5a:90:a6:fd:ac:95:ad:db:d1:09:
                    c7:ee:99:0b:c7:88:dc:1b:d9:24:0e:ab:47:a4:b2:
                    31:1a:8c:7e:e0:35:96:cd:cb:37:1e:16:17:a4:78:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:21:19:EB:FA:14:9E:E9:5B:2A:C5:19:8A:F8:4B:F0:85:48:AB:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fb8cab9e-a015-3814-931a-0a7dbf2d717d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.181.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ea:2c:07:7c:87:3b:06:b8:78:6f:49:03:a3:c3:5f:41:3b:
         81:6d:b6:a7:9f:9c:ca:ce:9b:c3:dd:1d:36:4b:3f:90:de:61:
         93:12:fb:49:ff:0c:f6:49:27:3c:0a:7d:30:7c:ef:c8:4f:47:
         74:d0:66:14:80:99:33:e6:4e:b4:6b:ae:17:5d:f6:84:ee:9c:
         0c:ef:33:7b:d8:17:ef:c9:cf:69:78:56:42:ed:19:31:ca:73:
         26:ba:f5:57:c7:be:21:71:da:68:9d:14:f7:4d:8c:e7:8f:7f:
         5d:c2:ca:71:3b:11:73:08:23:1f:d6:ed:f0:96:9e:ee:65:70:
         f3:cf:d6:37:10:c7:e9:20:7c:f8:87:b0:41:ca:06:8b:9c:42:
         0b:d9:0f:48:07:19:73:eb:bf:67:10:ba:cf:9c:98:6a:d3:57:
         a7:92:3b:82:5e:82:a5:f3:e0:de:ca:be:69:6f:75:8b:30:7f:
         73:b3:85:79:ca:7f:c7:0b:9b:7c:09:b3:96:ed:d4:1f:de:35:
         70:a5:c9:fe:c8:bd:94:f8:8b:f7:f6:99:9b:fc:0c:be:5b:57:
         90:ad:fb:a2:5e:eb:2d:08:e8:70:e2:de:a0:4c:1f:fc:66:7d:
         8a:4b:ef:38:f8:b2:82:84:86:b6:0b:94:ed:90:4f:42:09:85:
         d8:d1:cd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:45:49 2026 by rpki-client