Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/74f33ec5-96e0-381a-a770-f9eba462700d.roa
File:                     74f33ec5-96e0-381a-a770-f9eba462700d.roa (raw, json)
Hash identifier:          9RUwSTPFU2IW2HeN6ItAR+CCZdwsasc8nMWV4rRc2MM=
Subject key identifier:   7C:08:ED:B0:CF:21:88:86:29:2C:D1:22:F8:6C:39:FA:E9:63:2A:A1
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584B1806C2A0BE99E88BF3FC58A0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/74f33ec5-96e0-381a-a770-f9eba462700d.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     398391
IP address blocks:        131.226.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c2:a0:be:99:e8:8b:f3:fc:58:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=0eed26f2-af3a-4239-aade-b346c81d58ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:25:df:48:c7:4d:91:f3:6a:1b:21:1f:34:65:
                    10:89:2c:01:5f:c3:71:61:93:45:d7:3e:ed:f9:c7:
                    ed:71:d1:1e:db:90:c7:2d:e5:dc:1e:74:a4:eb:42:
                    30:d4:ff:67:89:36:2b:47:45:74:7d:b8:70:8d:ab:
                    59:02:86:8d:05:85:24:92:ef:24:af:6d:b9:12:87:
                    30:95:cb:95:db:03:35:dc:bc:15:56:2b:1a:93:28:
                    70:b0:1e:21:d9:df:7c:3d:d5:42:9b:e7:64:41:16:
                    37:95:3c:99:a7:f2:e9:ef:35:1c:dc:1e:74:bb:51:
                    0f:70:66:86:fc:69:fb:78:28:3f:e7:68:07:5f:25:
                    b2:bc:41:37:3f:58:07:e9:9a:33:e1:fc:78:87:98:
                    bb:d4:62:a1:68:e3:6a:0c:b9:b9:b9:eb:2b:fa:4f:
                    84:b0:49:e8:53:95:ad:b4:9e:e1:60:26:40:9c:bf:
                    da:67:e3:6d:a3:60:cd:2c:3a:96:ad:9f:95:b1:f6:
                    7b:58:eb:3d:18:5b:70:2d:51:a3:32:58:a7:60:15:
                    a7:70:ad:63:8a:be:ce:07:1f:56:d8:f4:48:a8:a2:
                    02:19:4f:2c:f0:ab:72:ea:57:cc:25:ed:38:4e:08:
                    57:b2:9d:93:a6:de:00:d9:cb:2e:8a:0b:c4:bc:2f:
                    df:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:08:ED:B0:CF:21:88:86:29:2C:D1:22:F8:6C:39:FA:E9:63:2A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/74f33ec5-96e0-381a-a770-f9eba462700d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:13:31:20:3d:0d:11:db:2b:6d:cc:b4:c4:b7:1b:fd:7d:
         f6:cf:02:59:62:02:37:9a:7f:dd:07:ad:0d:b7:7d:57:6b:09:
         ad:10:93:15:22:58:fa:24:f0:0d:ee:66:20:11:16:98:0e:45:
         fd:64:c3:ec:50:ff:dd:dd:15:0e:82:2e:88:54:c9:38:92:0b:
         8c:0d:37:17:f6:02:bb:45:7b:1d:37:fa:7a:16:f2:df:ed:17:
         08:2b:19:c2:80:74:56:45:ad:e7:b7:96:e8:a2:16:59:e4:69:
         4a:d5:45:f1:1b:93:dd:a1:7e:29:ce:10:6f:43:f6:bd:4f:eb:
         1d:04:41:b6:79:e5:ef:59:4e:59:d3:94:ef:99:c4:9c:0e:3d:
         5c:7c:81:7f:4d:77:e0:91:6f:57:50:81:eb:f4:65:85:9b:4d:
         39:93:aa:08:b2:c5:b8:41:ba:b2:57:85:6f:89:f9:b4:c2:60:
         5b:cb:c0:1f:e4:f8:10:7b:f7:40:72:b8:e3:73:ca:52:57:a5:
         56:fa:08:58:b4:8c:8f:e0:82:a1:6e:12:d5:c5:04:88:b4:42:
         18:ff:d3:3d:95:df:31:3c:12:d5:7a:16:7e:01:80:aa:f6:aa:
         ec:d8:07:98:3e:57:f0:bd:62:0f:71:d7:b7:4b:e0:6e:b8:a9:
         c6:86:9f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 17:14:28 2025 by rpki-client