Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/9b0b7248-01da-3655-80c1-81c6fac87d9e.roa
File:                     9b0b7248-01da-3655-80c1-81c6fac87d9e.roa (raw, json)
Hash identifier:          uEIeTG2py1ywYCLULlaxm2AXo/k3Lywl3e7Wll76CRY=
Subject key identifier:   C8:26:B5:54:E7:BC:A8:95:0E:B4:79:3F:8D:F1:67:B7:B5:69:40:73
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584A612B0D9AD4633DFCFCE7F100
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/9b0b7248-01da-3655-80c1-81c6fac87d9e.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     398391
IP address blocks:        131.226.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:0d:9a:d4:63:3d:fc:fc:e7:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=96faedf3-2e2c-4c25-bd9a-283350ba5b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:d6:e1:6d:03:7f:d0:66:f2:21:b3:10:98:
                    a1:aa:31:2c:e8:36:a9:51:97:c4:50:56:cb:d1:95:
                    d9:50:09:e3:e2:60:3c:e7:b2:49:8e:99:9d:eb:89:
                    9a:68:7f:f1:24:cf:df:22:64:f7:3b:9d:65:bc:85:
                    e6:a1:ae:1f:33:5e:70:d9:3c:3d:e7:a5:d0:30:96:
                    67:46:eb:0d:59:fc:33:d7:c2:34:7d:c8:e0:fd:70:
                    ec:42:1d:fa:02:31:a5:19:07:77:7c:01:b9:7c:a9:
                    b2:80:9f:33:e0:07:ed:33:95:9a:da:36:83:79:3b:
                    00:1e:05:c7:2b:73:d5:d6:b5:42:bd:b2:87:49:67:
                    67:63:c8:d9:18:a5:34:3e:e7:ae:fd:4d:cc:f0:c1:
                    d9:49:15:45:2f:c5:04:8c:72:bb:e8:10:f9:9c:a8:
                    87:06:0e:7e:53:50:31:31:23:9b:fa:05:39:c5:bd:
                    ab:01:61:cb:38:5e:53:20:02:5b:fa:f3:20:aa:4d:
                    a3:1b:b4:56:ae:26:07:b7:8c:80:c2:17:3d:ef:18:
                    b5:86:a9:3d:e2:34:1b:59:a1:85:2f:2e:e5:01:cf:
                    e3:61:e9:1b:ae:c3:10:40:6f:86:73:73:1a:05:74:
                    f3:2a:4e:c7:cd:2e:67:7c:5e:82:86:4d:2d:5e:16:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:26:B5:54:E7:BC:A8:95:0E:B4:79:3F:8D:F1:67:B7:B5:69:40:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/9b0b7248-01da-3655-80c1-81c6fac87d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8d:b9:8e:aa:41:d3:cf:c9:1b:b9:6a:9b:1a:0b:c6:b3:7e:
         4e:4c:22:86:91:c5:62:8f:37:d2:c8:94:d5:a9:0e:fe:42:dc:
         29:e7:aa:a6:72:e0:51:6d:1d:08:56:63:6c:92:b5:a4:0a:b3:
         33:19:f7:97:53:e6:fe:93:13:29:ee:70:3b:70:13:f2:98:ee:
         a1:97:cb:ae:96:08:f6:51:4f:d4:98:2d:dc:20:0d:ec:fc:d1:
         c9:9e:95:cc:5d:39:6a:77:4d:a3:f7:d1:6d:82:f9:9b:47:79:
         f7:55:a6:fe:b4:21:e0:6f:7f:dc:1d:7a:d7:ca:a6:9d:b5:aa:
         11:1b:ba:7e:92:50:2c:99:a3:be:6c:30:5f:0d:ae:95:36:14:
         32:52:a0:d7:74:b5:d0:e4:e4:6d:82:f8:12:bc:e9:1b:f0:bd:
         8d:e4:d7:a8:6e:37:eb:4b:5c:9d:8c:d9:74:fd:4f:fe:85:85:
         b9:be:5b:dd:61:25:90:7f:cc:57:06:ee:4a:90:db:7e:09:3a:
         7f:99:04:64:c8:16:40:3f:ca:19:c9:43:16:3b:42:9c:c9:89:
         ff:2a:ff:c8:49:1c:10:49:57:0e:e2:8f:cf:3f:26:ca:ad:b4:
         c5:e2:3f:00:0a:b0:72:26:39:09:5d:c0:d0:6a:10:63:74:b1:
         be:83:66:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 08:02:17 2025 by rpki-client