Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/de11f0e7-b16d-3c06-ad8c-31ca7e17f458.roa
File:                     de11f0e7-b16d-3c06-ad8c-31ca7e17f458.roa (raw, json)
Hash identifier:          gUIGgGKR6FUV70edPbFCO3MNnkao7yAH9TkE773briM=
Subject key identifier:   98:72:F4:24:B9:4F:F5:9D:16:07:8A:6C:E7:90:41:04:35:BA:4E:AD
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584B4D11D2413EA20242815CF200
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/de11f0e7-b16d-3c06-ad8c-31ca7e17f458.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     203724
IP address blocks:        131.229.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d2:41:3e:a2:02:42:81:5c:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=b8b5d349-8c73-4372-acec-3450867d315a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:68:fa:90:2a:b8:3c:16:96:3e:67:c9:91:
                    16:a2:89:fc:17:b1:27:d9:2c:97:e7:74:b2:89:63:
                    50:66:30:74:ca:a0:68:fe:80:c4:b2:87:cb:34:1c:
                    f4:10:99:75:3d:3c:79:75:8e:fd:32:4c:bf:87:0f:
                    2d:b6:f6:92:21:05:8a:72:27:12:f7:9e:07:91:b8:
                    88:7e:4e:f3:78:d6:09:7c:29:e5:63:fa:1c:31:79:
                    a4:ce:57:23:46:0b:5a:7d:09:e6:11:09:94:f3:8c:
                    06:70:0e:e5:24:74:bc:c2:bc:d7:1a:27:b6:a5:4e:
                    48:19:ce:94:33:48:58:c3:ed:89:68:60:ac:ac:a8:
                    dd:f7:72:50:cd:3f:39:8f:2b:54:32:77:6c:f3:de:
                    56:93:6b:61:60:1f:0c:80:9e:34:62:f3:c4:ce:ed:
                    13:da:af:d9:6e:43:8b:23:80:b6:69:6e:38:97:2f:
                    79:0f:35:95:b1:19:fe:4c:63:33:33:d1:9a:65:b5:
                    bb:11:0f:52:c9:64:3b:89:cd:60:99:ea:14:92:37:
                    35:87:e5:e1:c0:78:34:73:51:1b:07:08:c1:14:cf:
                    96:8c:51:e2:65:a8:b2:5c:0e:42:9a:d1:71:62:a0:
                    90:04:ac:6e:ac:aa:30:57:38:af:66:4e:44:82:7e:
                    f0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:72:F4:24:B9:4F:F5:9D:16:07:8A:6C:E7:90:41:04:35:BA:4E:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/de11f0e7-b16d-3c06-ad8c-31ca7e17f458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:b7:c7:51:9c:a2:f6:e5:8f:98:1c:83:24:f7:57:87:38:72:
         99:bb:61:fa:52:ee:22:2e:b4:e9:60:7a:fa:18:f2:a4:ce:7e:
         8e:8b:4c:ac:b3:2b:27:c9:12:59:18:94:fd:38:d9:1a:95:9f:
         2c:9f:e8:49:a0:6c:0d:ec:32:5e:15:b4:b7:21:1d:3a:95:1f:
         ff:99:12:30:dc:c1:3e:03:a7:61:e7:da:66:ab:3a:36:f0:06:
         83:36:b8:c8:0f:fc:fa:fa:f5:02:83:bd:25:76:86:36:44:d2:
         2b:d0:3e:9f:8c:08:d6:20:32:54:45:fc:fd:81:da:13:14:79:
         8b:f9:16:7b:08:ed:8d:16:2f:7a:88:9d:22:5a:a4:98:60:92:
         5a:a8:fc:70:11:9d:07:a8:45:8a:c9:5c:df:9d:84:10:e9:79:
         b0:2b:e9:8a:8e:63:7c:fe:38:f0:78:19:6b:54:78:59:ba:c6:
         59:ad:49:dc:6b:75:4b:7c:86:5c:cb:21:88:70:56:6b:b5:05:
         7f:c9:92:9e:20:85:ad:31:67:ef:20:61:cd:f7:27:a3:f4:7b:
         37:19:f3:5e:b6:b6:ba:05:58:92:47:fe:9d:67:49:89:c3:d1:
         11:aa:31:75:f7:28:95:78:47:c2:25:ae:b5:cb:ec:ea:62:be:
         1a:19:c8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:20 2025 by rpki-client