Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121574f4-e8e8-38cf-8b9e-3220f0bfad79.roa
File:                     121574f4-e8e8-38cf-8b9e-3220f0bfad79.roa (raw, json)
Hash identifier:          Ler9oz1vXoLz7vabu7zYgfXHiKQaMoHciQ1hYqwHCzc=
Subject key identifier:   36:60:65:C7:AA:23:59:50:41:84:EB:84:D1:46:65:E1:9B:9B:82:D4
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584AF5212E64F967B90B6E27DB80
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121574f4-e8e8-38cf-8b9e-3220f0bfad79.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     398391
IP address blocks:        131.226.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:2e:64:f9:67:b9:0b:6e:27:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=e1cabd07-f26f-4b51-b2d4-a12ffaeb3854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:28:79:37:4d:74:5d:66:5c:5c:3d:49:86:
                    99:02:73:c7:76:8d:5e:b6:67:c3:5a:28:6b:c1:50:
                    a6:f6:f6:3e:97:eb:71:00:c2:86:3f:ab:25:e5:63:
                    84:f0:8b:1a:ff:7a:4d:21:09:b7:b0:94:1a:84:c7:
                    be:50:e1:87:e6:d4:61:3d:20:23:a8:cf:a5:02:ca:
                    2d:be:fd:aa:89:25:20:6e:c1:68:29:86:82:d3:ec:
                    97:da:da:f9:df:5f:83:25:38:8d:1a:65:6e:3e:9a:
                    80:b8:88:c8:40:f1:c8:7b:a9:7b:29:57:25:e7:11:
                    dd:ad:66:c6:5c:bb:e9:45:dc:a1:10:70:62:3f:81:
                    5a:a2:83:e2:f7:d4:32:c9:75:7c:16:9d:86:6b:2c:
                    c4:ae:1f:85:8e:b7:ec:fd:a1:87:22:d5:a5:bd:0e:
                    a8:cc:31:fd:52:7e:a7:d2:8b:bf:84:59:c3:da:97:
                    4b:b0:ba:83:d9:00:74:1b:6c:70:bf:66:40:dc:da:
                    62:cc:61:6d:d2:71:02:d3:48:42:90:1d:91:23:f0:
                    d8:b8:51:ec:57:b9:8c:04:8e:26:18:c7:30:f8:7b:
                    8d:c6:e9:c2:9d:c9:32:02:36:2a:98:d6:5e:9e:ba:
                    1f:5b:18:7e:a2:d9:85:b5:bc:c9:34:86:8b:82:15:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:60:65:C7:AA:23:59:50:41:84:EB:84:D1:46:65:E1:9B:9B:82:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121574f4-e8e8-38cf-8b9e-3220f0bfad79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f6:41:37:ab:3b:0a:ba:8d:20:05:7e:10:f6:c6:6d:c6:b5:
         5b:0c:e6:eb:a1:23:cd:c4:2d:74:d0:5f:4e:df:16:ad:1c:73:
         96:13:62:12:26:5b:06:44:f9:69:f2:6c:e4:e5:55:2b:bd:ca:
         c6:21:18:28:a0:ef:26:09:61:bb:a5:0e:4f:ce:19:37:20:8c:
         a7:94:e0:85:97:dd:4e:8f:55:67:24:e8:f4:81:f6:85:2e:d4:
         ec:71:e6:5e:28:5c:fd:74:1b:0e:04:f2:42:a3:45:10:1f:be:
         35:b9:6d:d9:db:3a:5f:dc:46:f7:fe:35:45:03:42:46:b0:25:
         0d:a2:ca:92:7c:06:a5:4a:b6:6a:32:53:d7:fa:9f:df:b8:de:
         4a:e2:3d:79:f5:4d:0f:dc:90:6c:e1:0b:aa:94:ba:e4:3c:9c:
         79:cf:cc:3d:81:18:f0:ff:07:9e:a4:7e:40:a7:7e:5f:3d:7a:
         8b:44:fd:24:dc:24:bf:87:ef:e7:b0:ae:1e:5e:c0:c2:2f:4f:
         34:c5:40:ce:a2:5a:95:24:be:c2:6a:2c:78:8a:67:03:0f:9a:
         1c:79:ee:28:f8:99:aa:3c:89:48:ed:38:1d:f2:ca:b1:24:15:
         8a:86:4b:21:eb:fc:5f:8f:bc:ea:f7:01:30:6e:1f:d1:d6:bf:
         51:83:96:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 17:07:33 2025 by rpki-client