Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7f05a679-b4c3-375e-bbec-aeb09c9d2a58.roa
File:                     7f05a679-b4c3-375e-bbec-aeb09c9d2a58.roa (raw, json)
Hash identifier:          tpGs+MQLXiWsvVFIK02L4lNXZf3bkT9zlLIa/ksb7PI=
Subject key identifier:   49:14:7E:46:89:3F:B1:91:DC:DD:6B:2D:8E:85:AB:D7:04:57:20:87
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584B3C51B7069CAD404417755900
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7f05a679-b4c3-375e-bbec-aeb09c9d2a58.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     203724
IP address blocks:        131.229.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:b7:06:9c:ad:40:44:17:75:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=90c09f74-b081-4e58-940a-e261dab29809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:ed:1b:80:a8:20:3e:2c:49:a9:aa:bc:76:
                    dc:8e:c9:0e:f4:b9:95:56:ed:cf:6d:6b:95:41:fb:
                    90:35:ba:7e:0f:8c:e2:c6:80:79:bb:5e:89:50:58:
                    92:b7:bd:47:fa:7a:75:0c:8c:63:d3:33:05:8d:7b:
                    8f:ae:b7:ac:d9:b6:22:ff:9e:6a:89:d3:57:65:41:
                    94:68:75:4f:d8:0b:03:52:34:a6:c0:6b:67:d4:31:
                    9c:43:3e:42:96:30:97:d4:b5:b8:b0:72:06:3b:c8:
                    3c:9a:f6:75:d8:1d:04:52:44:06:64:81:ce:38:af:
                    95:33:f8:e6:12:3e:30:fa:52:dc:e8:5c:93:69:32:
                    d9:63:de:ec:1e:15:5a:4d:b7:65:17:46:53:9c:5d:
                    95:89:81:2a:6b:b6:d4:d1:04:f0:3c:65:0a:3e:16:
                    4d:8b:c6:a5:cc:d9:38:07:84:c7:f5:d3:c1:f5:f3:
                    85:d8:8c:8d:ad:82:8e:4f:ad:1b:28:1f:9a:ef:2c:
                    ad:bc:97:01:84:e0:6d:1b:10:93:54:a4:f5:bc:40:
                    45:8b:4d:96:36:1a:dc:db:c0:40:cc:0b:80:fe:db:
                    39:d5:d6:a2:de:c3:98:05:11:3b:f5:0e:ba:97:da:
                    a9:bb:0a:09:70:de:81:bd:3b:24:cf:bf:f5:8b:41:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:14:7E:46:89:3F:B1:91:DC:DD:6B:2D:8E:85:AB:D7:04:57:20:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7f05a679-b4c3-375e-bbec-aeb09c9d2a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:0e:5b:eb:2a:4a:3e:4a:61:40:4d:f3:df:11:6f:b7:fc:4a:
         0c:9f:c7:e9:78:89:e3:2b:9f:59:a7:89:39:fe:0a:2c:83:e9:
         60:be:4c:d3:e9:72:a5:2c:c5:d0:03:6e:f9:4c:27:46:ae:aa:
         69:db:99:89:5c:4c:28:9f:86:c6:cb:a6:aa:d5:84:c2:36:86:
         c2:f3:c5:7c:82:16:39:b3:85:a8:93:06:b8:ef:0c:d3:bb:9d:
         63:1f:80:da:13:8c:e1:62:85:8c:97:a9:f2:0c:64:29:17:0c:
         3d:f6:5c:da:52:63:e5:aa:ab:7c:08:20:08:94:bf:c7:eb:ec:
         b7:18:e8:cd:92:5e:c4:56:b6:2b:7f:42:13:4a:43:c1:54:c6:
         ca:4c:bb:cd:9f:a7:e3:92:23:bc:70:d1:89:83:6e:25:93:9b:
         b5:dc:f9:e7:ee:c4:21:0c:eb:de:8a:98:d7:15:e1:80:73:e3:
         82:22:79:fb:ee:23:af:ba:bd:d5:6f:ad:76:cb:8f:f8:54:c3:
         b9:be:55:25:df:69:d5:22:ba:db:45:d0:a9:d8:35:4f:bd:73:
         82:43:59:dd:95:f8:39:0a:99:43:ed:57:97:e5:f4:5a:3e:46:
         b1:01:7a:55:96:a8:f8:75:ff:af:6c:f5:10:49:ee:2a:9b:dc:
         0e:f7:fd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:38:29 2025 by rpki-client