Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ee9324f3-2f99-36c2-ad3c-f54de6ed54c9.roa
File:                     ee9324f3-2f99-36c2-ad3c-f54de6ed54c9.roa (raw, json)
Hash identifier:          cC5n5AGRImHWF6TdySc+zoqjREk7svGadFudzIsRPwE=
Subject key identifier:   25:7B:80:4C:4A:D4:9D:A7:C0:C3:DF:4A:07:93:C6:C1:82:4A:F6:B7
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584B4D11F338ADBA1DD0AFDE8880
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ee9324f3-2f99-36c2-ad3c-f54de6ed54c9.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     203724
IP address blocks:        131.229.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:f3:38:ad:ba:1d:d0:af:de:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=924aa65b-ad51-41f5-a224-f9077af3fa69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:19:77:c6:03:50:a2:64:26:04:94:52:8d:93:
                    20:ce:7d:56:b8:ed:a3:29:c4:d6:75:23:0c:2d:a4:
                    aa:1a:74:bc:5f:8a:ab:08:2c:d6:ed:af:f1:b0:b2:
                    ec:d7:0c:f9:0c:d9:1d:62:83:7c:ce:d6:87:bb:52:
                    b6:94:36:21:c9:e0:a9:ef:ff:e8:8c:f5:d8:65:d3:
                    9a:87:90:2d:6d:4f:9a:a6:ed:80:4b:9e:e0:c6:c3:
                    e1:54:18:e0:aa:2e:fc:b8:d3:eb:71:e4:ba:89:4c:
                    5f:cd:d3:c8:89:3c:10:a2:88:68:42:08:2c:18:c7:
                    c7:ca:ff:f3:d7:b3:75:6f:9a:55:bf:ca:b5:68:ea:
                    11:d5:68:8f:07:ec:c5:ab:c2:b0:e5:33:c8:97:1e:
                    92:cf:77:70:2f:42:01:52:5a:04:d5:c2:0e:a7:b9:
                    de:58:37:b7:b7:cb:1c:60:39:3d:2c:b9:33:18:0d:
                    1a:d7:18:ab:5a:e7:45:eb:e1:ae:7e:84:bb:ed:3e:
                    9c:f2:f5:2e:35:3b:32:8f:52:53:1c:a0:86:5c:0f:
                    9a:6e:c8:19:d6:29:97:fd:0e:da:48:85:e6:ea:07:
                    9d:cf:51:16:f4:52:4e:a4:43:de:64:f9:c5:fd:b8:
                    77:86:ba:99:b5:06:d7:00:98:30:c4:16:9a:79:d7:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7B:80:4C:4A:D4:9D:A7:C0:C3:DF:4A:07:93:C6:C1:82:4A:F6:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ee9324f3-2f99-36c2-ad3c-f54de6ed54c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2b:3b:fd:9e:ea:3f:8d:e6:9d:b5:ee:9b:2a:c3:fc:df:7d:
         01:7d:19:a4:ad:a7:14:4a:de:f1:77:a5:ac:e7:15:a5:e6:c9:
         25:f5:af:ba:7e:ef:8c:d4:aa:97:cd:d1:ec:24:43:a0:56:59:
         ff:a7:9b:91:24:7d:a8:b3:75:51:6c:53:34:f7:43:d0:ea:b1:
         4d:21:62:fa:12:7b:e8:f5:b1:cb:22:63:7c:2f:37:e6:6c:67:
         70:a3:7a:d6:16:d7:80:91:76:39:3a:1f:e8:42:3c:03:df:a0:
         76:f0:5d:79:9a:26:74:3e:e3:34:97:72:96:54:12:f2:aa:cb:
         ac:6f:25:5f:53:c6:63:ef:33:de:3b:a3:bb:76:43:44:5b:9c:
         0d:2f:00:fe:be:ac:44:a9:00:1f:78:09:6e:00:31:ec:19:a1:
         21:0b:d6:07:a3:e2:9c:00:f5:66:55:dd:ef:f0:a3:2f:bd:59:
         bb:c9:b9:b3:17:80:ed:fe:18:6b:3d:3c:63:6f:58:56:55:bd:
         8e:bd:87:59:fe:83:d6:99:b0:7f:0b:c2:93:59:00:4e:0c:81:
         32:77:48:7f:21:91:61:57:2e:07:96:8b:58:ed:b2:ff:11:cc:
         03:70:2e:01:04:3c:dd:b5:f2:3c:34:38:74:30:88:8f:55:f4:
         a0:a4:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:21 2025 by rpki-client