Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d90a7b31-7c73-310b-b211-c82fd8c16393.roa
File:                     d90a7b31-7c73-310b-b211-c82fd8c16393.roa (raw, json)
Hash identifier:          +D/QUPRljpiEImXLOozILLmfbRbl3GpEL4NFsuaChd8=
Subject key identifier:   63:87:C6:85:18:DD:2A:EA:39:4A:05:60:D5:3B:BF:37:D9:7D:E3:93
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584CA5F6F69A520324AEBA7F7240
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d90a7b31-7c73-310b-b211-c82fd8c16393.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     398391
IP address blocks:        131.226.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f6:f6:9a:52:03:24:ae:ba:7f:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=f07b7d04-d5dd-47c7-a2e3-00be4afd6c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:c9:41:4f:ef:6c:6f:f5:b6:87:12:db:7b:
                    b1:45:5c:81:cf:c2:d0:15:f2:cf:4d:94:51:6a:e3:
                    b1:ef:31:b1:de:38:7e:84:94:f3:0c:7d:6f:84:11:
                    80:e3:05:fa:6a:ab:e1:06:7c:dd:96:12:a4:c9:87:
                    54:9a:78:d3:ce:e6:19:f6:07:5c:cc:c6:f2:33:6b:
                    92:1a:38:4a:16:d8:6e:cd:07:83:84:58:8f:1d:be:
                    c6:9a:4c:5b:c0:6e:a4:46:ce:8a:c0:10:55:d3:ba:
                    f4:dd:33:3a:e8:e7:f4:8d:75:3e:50:9d:b3:d5:d6:
                    3d:ce:f4:c4:d1:b5:2f:2b:7a:6e:01:cb:96:81:24:
                    a6:20:68:59:d9:d6:42:4a:af:f4:a4:ce:0c:e5:b4:
                    a1:02:f5:4e:2f:5c:4c:0d:6e:60:2a:80:1f:8a:d5:
                    24:2e:eb:17:2b:cf:ae:9f:a0:9c:76:b3:39:a1:8c:
                    26:8d:30:39:06:04:42:ec:fa:f1:c9:c2:ad:e4:dd:
                    1b:b3:34:fb:ce:4a:e1:e5:93:99:a4:d8:23:f0:70:
                    ab:c7:c7:bc:b2:34:da:25:7b:12:42:8e:fa:9b:5c:
                    42:48:44:8e:85:e3:39:2c:4d:e4:b7:54:ae:0e:8e:
                    94:46:28:85:fc:bc:fa:b2:bc:a0:91:69:c6:11:40:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:87:C6:85:18:DD:2A:EA:39:4A:05:60:D5:3B:BF:37:D9:7D:E3:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d90a7b31-7c73-310b-b211-c82fd8c16393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:db:de:bf:29:29:12:b7:ab:f7:ae:77:26:d7:81:35:c1:19:
         c9:ca:f3:0a:2d:48:57:5e:81:e3:63:d6:51:b0:00:09:cc:45:
         a9:12:a2:65:7e:f2:cb:08:cf:15:42:a4:30:52:fd:57:14:db:
         5e:04:02:c7:a9:5c:93:f1:82:6f:5f:04:d0:06:20:29:b9:89:
         78:03:fe:20:8a:94:d5:fb:e5:35:26:0c:b3:89:ba:d2:93:22:
         d2:09:96:7e:fc:c6:b2:b0:e5:4f:fe:11:6a:b8:18:5c:c9:fc:
         32:b8:ef:81:70:75:5b:1a:a2:95:41:ac:ad:8c:89:ac:a1:20:
         2e:c7:f8:c5:9c:7d:74:46:31:3e:ce:da:9c:ea:c9:1b:38:de:
         0a:e3:07:dd:73:fb:77:64:41:25:c4:e3:49:19:47:14:34:6c:
         0e:3d:80:c5:47:0b:95:a6:46:b8:bd:24:09:ed:00:49:b7:aa:
         e7:36:e0:04:64:e1:14:67:01:00:36:9a:6f:17:b0:a9:50:78:
         e8:9a:f0:2b:1f:ff:1d:17:66:2d:16:46:7d:22:ad:40:4c:55:
         35:9e:8f:7b:45:ab:8c:0d:87:cb:e6:dd:e3:db:a7:7f:49:b4:
         68:7b:2a:7b:60:1f:61:42:d1:3a:bc:48:76:25:d1:db:c2:d1:
         f8:be:be:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:08:20 2026 by rpki-client