Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/785140a7-bbb7-374c-ba3f-70ccac456248.roa
File:                     785140a7-bbb7-374c-ba3f-70ccac456248.roa (raw, json)
Hash identifier:          2jhC87YKu7Qd6JXTgd6MUE31eAOyjpSrcx2947o0IiY=
Subject key identifier:   A8:32:80:05:03:5F:2F:B8:C4:D5:E7:02:13:F1:07:D1:26:58:EE:0A
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584B4D11F21250E92BAE6C453580
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/785140a7-bbb7-374c-ba3f-70ccac456248.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     31898
IP address blocks:        131.229.128.0/24 maxlen: 24
                          131.229.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:f2:12:50:e9:2b:ae:6c:45:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=126e8366-dead-437d-8fd0-9e4c860206fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:7e:de:bc:e8:b0:a7:7d:7f:53:37:63:7a:
                    0d:51:db:7b:75:d8:7a:0d:03:f9:c1:d8:97:34:50:
                    60:9e:27:4a:63:e5:2d:a5:5b:09:f9:53:49:84:c3:
                    37:44:d5:8f:76:a8:81:1a:99:50:50:27:61:f0:0b:
                    0d:c9:db:1f:76:10:31:d3:3d:7c:74:61:1d:83:36:
                    26:c7:98:49:4b:81:35:e3:7e:ac:96:e0:54:5f:9a:
                    25:b1:22:f9:17:61:82:72:46:0e:60:8e:39:10:fa:
                    3e:33:5a:af:a6:53:2b:35:f3:12:77:73:d8:6f:04:
                    a9:c7:30:df:2c:3e:db:fb:92:87:22:9d:23:4b:5e:
                    8f:b3:67:14:1b:6e:96:20:64:1f:d4:eb:4b:1b:a8:
                    c9:9b:e6:fa:c3:c9:85:81:1b:7b:e6:9f:3f:fc:a2:
                    af:02:3e:e9:96:91:16:16:ce:b6:e7:29:65:92:36:
                    9c:ab:ed:ac:74:bd:a1:c2:69:89:17:75:5f:33:0f:
                    da:4a:e2:8a:fd:0f:51:0e:99:f5:ce:68:3b:fe:9b:
                    e7:19:9c:27:cb:1b:cd:7a:87:44:a1:94:2a:17:ef:
                    ca:6e:61:b8:0f:4c:18:50:2a:e1:bc:f0:96:9e:b7:
                    31:7c:17:67:8d:c7:d1:a8:95:bb:35:0a:c8:43:f6:
                    bc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:32:80:05:03:5F:2F:B8:C4:D5:E7:02:13:F1:07:D1:26:58:EE:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/785140a7-bbb7-374c-ba3f-70ccac456248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.128.0/24
                  131.229.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:8a:67:5f:6b:c6:3e:56:37:62:94:92:a2:47:ee:9a:a5:5d:
         56:33:11:f0:f6:af:17:62:41:fb:d9:32:45:27:87:22:eb:88:
         a6:e9:1f:f0:0f:76:20:8d:3e:35:45:36:41:5f:bd:cf:15:8d:
         af:d1:f1:53:ee:91:6f:45:d2:e6:3d:71:b0:f4:16:ad:f4:20:
         14:af:99:b4:e7:6a:e0:bf:9d:7d:c0:02:80:0a:9e:37:48:51:
         1f:79:d0:d9:e7:fe:d9:60:22:bb:d3:42:ec:e6:6a:8b:cb:5a:
         0c:8f:8a:bd:49:03:b0:d7:d3:4f:48:8a:3b:0a:e1:e2:ec:59:
         ac:05:aa:38:6f:42:16:82:14:fb:71:e7:0a:8e:60:fe:d1:37:
         dd:18:f0:85:a4:6f:a6:7e:67:46:f5:cf:de:7b:52:e6:83:31:
         85:93:4e:e4:0f:d4:06:41:89:57:08:52:c2:1f:3e:37:12:92:
         60:5b:62:29:f1:ba:d1:ec:c1:eb:eb:98:d9:82:30:ae:9a:ff:
         c2:f5:c7:3b:b4:28:da:6c:f7:79:e7:95:25:02:8c:15:43:2b:
         63:38:d4:46:52:de:c3:ab:44:be:71:36:17:60:ed:12:79:1a:
         2e:38:21:9d:7f:26:20:e4:3e:5d:b7:df:68:d0:5c:b0:69:6d:
         b5:42:61:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:15:34 2025 by rpki-client