Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa
File:                     5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa (raw, json)
Hash identifier:          uAuZMfhQIVRzS6mb9y5shGqYMjhQan+6vb+WspT1pro=
Subject key identifier:   4B:09:AE:F2:2A:D0:35:DF:94:BE:46:35:2F:28:C3:3D:F5:79:EC:79
Certificate issuer:       /CN=af86fe52-5b77-46b6-9502-51ccccf3a755
Certificate serial:       010D0C9F4328584B3556E89A372377BA738FAA90
Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        131.226.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e8:9a:37:23:77:ba:73:8f:aa:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=5d458744-22dd-411f-a74a-a2fb5786174b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:02:a6:09:a7:b6:92:4a:ed:db:94:13:41:
                    31:20:b4:64:cb:21:69:43:af:7e:53:fa:3d:3b:33:
                    22:c0:06:68:bb:d4:df:3d:75:0e:72:ac:ae:9b:fd:
                    41:03:09:58:1d:da:8f:8b:45:08:28:86:02:c2:ea:
                    93:f3:66:b3:c4:80:86:fb:98:99:c3:88:ad:b4:f7:
                    5a:d3:a6:75:01:be:08:c4:ac:aa:a4:38:e1:e0:81:
                    e0:d9:41:f5:27:b0:c3:71:5f:66:64:92:29:82:f3:
                    36:45:a8:a4:75:24:42:c4:b7:6a:59:57:e7:43:00:
                    3b:46:7d:28:5d:6f:7f:d8:76:58:dd:34:ef:65:8c:
                    f5:d6:7a:63:7f:78:e1:79:05:02:ad:ea:a9:02:35:
                    25:d3:da:fb:3c:de:ce:4f:8f:96:48:c0:ec:f9:d4:
                    33:c8:84:d8:6b:c5:35:15:37:5b:ef:34:68:8b:7c:
                    37:23:cd:e9:a7:53:20:bc:30:9e:5e:93:18:35:dc:
                    c0:d1:fd:7f:0c:3f:b7:1f:5a:86:eb:53:74:80:52:
                    89:d5:aa:88:d3:e0:5a:f2:3a:92:d9:2c:0e:5e:28:
                    b1:8b:5b:58:cb:ab:a6:57:b4:d4:b2:66:b3:f1:7b:
                    42:dc:fc:6d:e4:15:8a:7b:5e:99:09:ac:13:bb:2a:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:09:AE:F2:2A:D0:35:DF:94:BE:46:35:2F:28:C3:3D:F5:79:EC:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl

            X509v3 Authority Key Identifier:
                keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2c:50:43:4f:b0:53:dd:6e:9e:41:ef:d1:43:12:95:4b:8b:
         ac:38:cc:c2:44:f3:42:c4:e6:6d:3b:2e:0c:a7:17:e1:bf:ae:
         f9:9a:b5:4a:cf:aa:4c:74:22:a5:86:cc:10:22:6d:4a:b1:64:
         bf:37:22:ec:07:ee:98:23:d7:28:02:45:0a:dd:5b:e9:a7:49:
         3d:8c:41:66:31:5f:1a:68:a2:c6:a5:f3:41:bb:3c:ae:3c:bf:
         0b:1b:1c:51:31:c1:54:d8:0e:73:db:5a:65:34:a3:5a:98:8d:
         ab:1d:60:da:5d:85:9e:bb:90:66:b6:90:f9:e2:e5:73:e2:1b:
         6b:5f:57:5b:97:01:31:e9:db:d2:8b:49:05:77:43:59:a5:cf:
         59:b1:d9:9a:d1:6d:de:ad:5f:fd:13:b5:ae:e0:61:97:f0:00:
         60:5e:8b:c6:b0:f8:ed:d4:09:08:ce:c0:57:a1:26:7b:c6:de:
         61:ff:53:aa:4f:3b:36:47:6a:8b:48:85:9a:79:a5:46:2b:6c:
         14:ec:03:da:42:38:5b:a9:69:c2:a5:9d:0f:18:16:55:b4:cd:
         87:d7:c0:6a:5f:a5:f6:0c:75:37:53:08:5c:a9:a8:cd:f5:c8:
         92:0e:bf:21:8d:ef:b4:0e:45:24:5e:98:31:63:ee:d1:aa:55:
         10:a8:02:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:38:42 2025 by rpki-client