Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fd7a9666-8f4f-3de5-9fd0-a6d8b6443ee2.roa
File:                     fd7a9666-8f4f-3de5-9fd0-a6d8b6443ee2.roa (raw, json)
Hash identifier:          C9LeAzntiD9Toj+JmFs0M7e3VRtlJAhWY0HC9JvIqIc=
Subject key identifier:   B4:C7:D3:2B:2B:CD:D2:9A:43:C8:56:83:97:DE:58:30:5E:F9:84:7F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37203D1A517DAB1C5AE6F00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fd7a9666-8f4f-3de5-9fd0-a6d8b6443ee2.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        131.150.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:03:d1:a5:17:da:b1:c5:ae:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=319f007b-e25f-44c7-80e8-1140bef8124c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:96:8f:72:0f:c1:76:63:47:45:a5:1b:50:87:
                    df:c2:7a:cb:ab:d6:6d:a7:d7:1f:a0:09:42:73:af:
                    d5:34:93:99:e0:69:f6:89:d2:93:51:0e:ba:17:e5:
                    76:b5:15:a5:df:aa:82:5e:61:6b:11:a5:ba:bd:cb:
                    e7:d1:1c:1e:b0:a3:79:f9:c2:af:43:aa:55:ee:55:
                    f8:af:ac:80:59:59:65:12:15:1e:65:f7:eb:13:5f:
                    96:f6:e7:f6:b7:ce:d5:85:12:88:7a:0e:48:81:b7:
                    c0:98:19:65:a9:e1:e0:25:38:96:77:ea:d4:9c:b9:
                    af:81:b7:17:87:c9:2b:68:f6:22:91:4d:1e:a8:e4:
                    8f:8d:9e:77:a3:d9:bb:0a:30:55:32:76:45:72:8b:
                    d1:f4:a0:e0:66:02:04:f4:fe:ab:95:12:25:1f:6e:
                    c4:55:44:17:76:48:98:a1:ce:1f:1e:79:cc:22:ee:
                    a7:a5:36:71:82:7c:7b:6d:aa:9b:5a:49:6f:c9:15:
                    91:78:64:9f:db:15:12:6c:10:d6:2d:54:a5:9b:fa:
                    8f:2d:03:a4:4a:d7:99:3f:9e:14:56:85:76:15:43:
                    47:7f:4b:93:cb:b1:ae:97:8c:e1:aa:30:2e:69:41:
                    3d:93:87:82:de:f4:dc:d4:24:d5:2e:9b:67:f1:cc:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C7:D3:2B:2B:CD:D2:9A:43:C8:56:83:97:DE:58:30:5E:F9:84:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fd7a9666-8f4f-3de5-9fd0-a6d8b6443ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.150.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:34:24:8c:fb:21:c2:cc:e3:8f:3d:de:1d:98:b9:22:83:36:
         31:4b:c6:d0:00:6c:dd:20:da:2f:3c:04:7a:9f:e9:c1:b8:50:
         27:23:4e:ad:17:23:03:05:13:43:17:76:60:24:b3:ed:07:84:
         87:4b:28:c8:79:39:1e:b4:a4:1c:5f:44:8a:3a:ae:03:20:07:
         83:85:2b:47:d1:26:55:dd:5e:db:bb:33:1c:97:80:8b:28:d4:
         6b:e5:a8:f4:db:02:f8:33:9f:54:75:11:96:30:4a:e7:ee:9f:
         1d:4a:44:ce:e4:38:09:3f:af:16:54:38:0c:83:19:90:19:7a:
         69:48:5a:f8:da:71:15:8b:50:2b:6e:85:b4:c2:8f:f1:b7:f2:
         35:5b:4f:d4:c7:6e:1f:a6:58:37:d2:a3:6f:f3:7a:99:31:e9:
         ca:80:31:fe:bc:92:cb:40:b7:cb:a6:2c:0c:20:56:53:ee:54:
         1d:a8:b9:7e:1b:76:fb:02:17:9c:1b:03:3f:9e:50:a9:fe:b3:
         1f:ae:8f:ad:50:d0:19:26:cf:13:17:b5:2b:45:48:1b:ce:db:
         2f:6d:b0:cf:2a:a7:53:ed:bf:b8:26:46:7b:af:cf:88:88:33:
         be:5e:e1:33:e3:5e:1d:a5:89:0d:8b:c6:20:26:45:12:95:c7:
         5d:f4:bb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:13:41 2026 by rpki-client