Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fe030520-5db9-3f1e-9f93-7f560e4b1ccb.roa
File:                     fe030520-5db9-3f1e-9f93-7f560e4b1ccb.roa (raw, json)
Hash identifier:          dFsTxGAMcIb8+dJMjLNoxItmoycKdUl98qhgqc3BAdA=
Subject key identifier:   4D:D3:C1:A6:E1:11:D8:BD:B9:E7:CD:43:F0:5C:30:B1:87:55:48:F8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B3FAC90592FF02DE15F85C600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fe030520-5db9-3f1e-9f93-7f560e4b1ccb.roa
Signing time:             Fri 19 Sep 2025 17:51:19 +0000
ROA not before:           Fri 19 Sep 2025 17:51:19 +0000
ROA not after:            Thu 18 Dec 2025 18:51:19 +0000
asID:                     0
IP address blocks:        150.220.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:ac:90:59:2f:f0:2d:e1:5f:85:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 19 17:51:19 2025 GMT
            Not After : Dec 18 18:51:19 2025 GMT
        Subject: CN=88bf3861-4dcc-4d5b-8779-bf7a9e4a3b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:08:dd:4e:d0:dd:40:97:a9:c8:a1:b9:4b:09:
                    9b:3d:7f:37:9c:d6:d4:82:27:dd:04:aa:13:84:88:
                    37:79:02:20:c4:31:c6:cd:74:2d:a0:cf:b0:70:07:
                    a8:b7:8c:65:72:2b:57:7d:53:90:6c:e1:96:f9:bd:
                    cf:04:88:12:04:14:9a:a6:b1:14:f5:d6:ed:69:1e:
                    7c:8c:e4:4b:db:81:0a:3d:3a:60:b3:83:c4:3d:73:
                    cc:24:d9:fc:5c:3c:b9:1b:22:a8:f0:54:e5:95:3f:
                    97:12:28:05:34:4d:07:26:9e:48:40:d2:54:1a:f7:
                    e6:07:83:df:58:da:1e:ed:fe:95:90:ca:5f:49:cc:
                    e8:a7:9c:99:13:28:6f:5f:6d:0d:9e:dc:3e:af:9b:
                    95:70:4d:99:40:dd:26:45:94:63:30:96:1a:da:7c:
                    73:a3:8a:cb:37:5a:c8:24:26:e4:f8:3a:c1:60:ac:
                    ef:f9:c5:b9:51:26:dd:e6:c6:15:4b:bd:c8:25:da:
                    b6:9c:24:30:cb:5b:ed:67:bb:03:dc:f6:6c:59:27:
                    78:a3:fd:4c:18:ee:0a:58:ae:4a:8e:97:8c:6a:01:
                    1c:f9:39:15:a2:66:74:d7:83:17:64:8d:51:72:6d:
                    ab:e9:14:a3:ac:cb:c8:c0:9b:61:89:5b:d8:b4:56:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D3:C1:A6:E1:11:D8:BD:B9:E7:CD:43:F0:5C:30:B1:87:55:48:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fe030520-5db9-3f1e-9f93-7f560e4b1ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:24:62:ca:64:3a:25:39:ae:ab:be:c6:ce:85:18:44:24:ec:
         63:d9:8a:a0:d5:f9:3a:6e:53:bf:55:e6:84:d6:2c:22:78:58:
         5c:d4:08:02:d5:6a:01:65:19:63:5a:b9:92:87:f5:41:73:37:
         43:a1:c5:ff:14:36:a1:fd:d4:ed:27:57:21:fd:b3:98:a9:d3:
         2f:ec:0f:47:e3:13:be:24:e3:97:f7:20:68:54:86:b9:dd:6c:
         b8:27:8c:8a:a6:5f:26:e6:53:5c:af:5e:96:76:d1:21:48:69:
         2c:69:52:9e:43:64:0f:a7:3d:f4:a5:94:38:8a:9b:0f:42:f2:
         92:b0:66:c0:89:d4:01:b4:d4:ab:e2:28:c2:67:f6:9c:16:ca:
         93:71:3b:8c:c5:f2:bf:08:26:4d:c6:53:e7:ea:a6:d5:f8:5b:
         5d:87:e7:c4:af:e1:11:17:9e:80:91:30:4b:ef:e7:5f:88:58:
         61:19:89:dc:91:76:63:20:1c:1f:15:90:4f:4b:16:85:2c:69:
         ed:71:61:11:b2:b9:41:79:d6:4b:c7:d2:0f:cc:51:20:52:40:
         88:94:60:13:aa:b0:fd:ee:16:09:68:19:95:bd:5e:b9:14:c7:
         b9:f5:09:53:ac:20:f3:0b:85:d1:ec:c5:c7:cd:8c:8c:9e:6a:
         57:ac:e0:68
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs/rJBZL/At4V+FxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDkxOTE3NTExOVoXDTI1MTIxODE4NTExOVowLzEtMCsGA1UEAxMk
ODhiZjM4NjEtNGRjYy00ZDViLTg3NzktYmY3YTllNGEzYjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwjdTtDdQJepyKG5SwmbPX83nNbUgifdBKoT
hIg3eQIgxDHGzXQtoM+wcAeot4xlcitXfVOQbOGW+b3PBIgSBBSaprEU9dbtaR58
jORL24EKPTpgs4PEPXPMJNn8XDy5GyKo8FTllT+XEigFNE0HJp5IQNJUGvfmB4Pf
WNoe7f6VkMpfSczop5yZEyhvX20Nntw+r5uVcE2ZQN0mRZRjMJYa2nxzo4rLN1rI
JCbk+DrBYKzv+cW5USbd5sYVS73IJdq2nCQwy1vtZ7sD3PZsWSd4o/1MGO4KWK5K
jpeMagEc+TkVomZ014MXZI1Rcm2r6RSjrMvIwJthiVvYtFaUYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE3TwabhEdi9uefNQ/BcMLGHVUj4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZmUwMzA1MjAtNWRiOS0z
ZjFlLTlmOTMtN2Y1NjBlNGIxY2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAltwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgSRiymQ6JTmuq77GzoUYRCTsY9mKoNX5Om5Tv1XmhNYsInhYXNQIAtVq
AWUZY1q5kof1QXM3Q6HF/xQ2of3U7SdXIf2zmKnTL+wPR+MTviTjl/cgaFSGud1s
uCeMiqZfJuZTXK9elnbRIUhpLGlSnkNkD6c99KWUOIqbD0LykrBmwInUAbTUq+Io
wmf2nBbKk3E7jMXyvwgmTcZT5+qm1fhbXYfnxK/hEReegJEwS+/nX4hYYRmJ3JF2
YyAcHxWQT0sWhSxp7XFhEbK5QXnWS8fSD8xRIFJAiJRgE6qw/e4WCWgZlb1euRTH
ufUJU6wg8wuF0ezFx82MjJ5qV6zgaA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:19 2025 by rpki-client