Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/44a48ed9-2b37-3a6e-b9a5-ab527965206f.roa
File:                     44a48ed9-2b37-3a6e-b9a5-ab527965206f.roa (raw, json)
Hash identifier:          wqDYOaayPIMjKrHoIMbqubkChe9vXXNmpzrWYz6bGqQ=
Subject key identifier:   20:6F:A5:7B:39:8E:D8:07:63:DE:A8:37:89:4E:22:B8:FB:DB:3B:83
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584B4D11F31A4DE1690C8D1B2800
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/44a48ed9-2b37-3a6e-b9a5-ab527965206f.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     203724
IP address blocks:        131.229.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:f3:1a:4d:e1:69:0c:8d:1b:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=083ca21c-4741-4175-bfda-236c37e17184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3f:5b:2c:0e:1d:ce:e0:3d:e5:6a:52:e7:fe:
                    b5:3f:7b:b5:6d:a5:80:56:50:5a:ab:bb:1d:9f:fb:
                    21:4b:4c:65:78:f7:fa:72:82:b6:ad:cf:72:e7:7f:
                    70:5e:73:ae:20:0b:2d:6d:c2:32:a5:58:60:2b:dc:
                    0a:4e:e5:bb:13:16:66:08:00:3e:97:d7:1e:83:61:
                    e0:90:ea:0f:cc:a3:9e:21:ee:da:f6:50:c0:e3:08:
                    ee:e8:21:8f:eb:97:41:51:a9:d9:df:c6:b3:b4:1e:
                    27:c6:41:c0:8b:d0:5c:80:13:72:94:9d:ad:01:f7:
                    3d:3d:8f:95:72:45:27:1a:6f:ed:ea:81:98:a1:af:
                    3d:2a:9b:6e:ed:8a:e5:1b:03:1b:b3:c4:5b:d3:24:
                    e8:7a:a7:4c:95:09:08:99:e8:0f:27:c9:97:3a:e1:
                    7d:2a:80:44:35:e7:f7:30:43:d4:da:30:a5:55:93:
                    21:95:3d:95:be:2c:1c:df:a9:73:bd:59:c3:53:c8:
                    c9:e7:56:10:32:ee:0e:34:15:99:9d:c7:2b:23:9b:
                    7e:4c:82:43:5f:ad:ec:1c:56:f5:d4:8d:d8:e3:ce:
                    0d:bc:bd:6c:7f:c3:c2:c1:34:64:69:e0:f2:10:23:
                    c9:73:44:0d:ec:44:90:8d:4f:fc:ac:97:26:8e:ec:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6F:A5:7B:39:8E:D8:07:63:DE:A8:37:89:4E:22:B8:FB:DB:3B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/44a48ed9-2b37-3a6e-b9a5-ab527965206f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:66:12:e8:8c:50:6d:49:a6:a3:f6:fa:39:3d:d3:4d:0c:5f:
         1d:4e:61:a7:ab:19:1e:22:cb:6f:76:7c:5c:ee:20:df:fd:f4:
         a1:8b:c1:67:34:88:82:0d:1d:18:3f:8d:94:f5:25:e8:ac:dd:
         71:3e:2a:33:1d:4f:ad:54:da:49:e8:5c:74:01:b0:e6:c7:9b:
         1f:1f:24:88:03:49:71:2c:ec:e2:ad:e5:9d:bb:3a:b3:13:86:
         f1:51:13:5d:ac:37:99:dd:18:3f:02:4d:51:99:b6:76:cc:e4:
         42:66:0e:6c:0f:71:f5:86:2e:f0:e4:7d:bd:a7:be:9f:ef:ca:
         c6:36:9c:1f:46:49:1a:9c:20:7f:fe:17:46:59:a3:f5:27:c3:
         fb:71:75:6e:49:e8:fa:90:86:3f:67:49:a4:ed:da:fb:71:c7:
         d7:01:58:51:f8:c8:65:20:a0:d9:22:6a:be:8b:c9:61:72:40:
         7b:6b:b5:0f:03:79:08:1f:f9:92:de:51:e9:38:e6:fa:6d:af:
         7d:de:a2:23:9e:63:9e:91:56:86:2c:5f:8d:c7:6b:71:c4:72:
         3d:84:6c:b6:8a:03:1b:3b:99:b7:82:1a:9a:cc:0d:9a:c2:51:
         bc:9d:cf:fd:73:20:28:9d:8f:98:c0:59:a8:fa:70:0f:c9:e9:
         91:ce:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:30:32 2025 by rpki-client