Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa
File:                     4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa (raw, json)
Hash identifier:          Sx7aXskSg34yQJk+Ip0ZW5hhjSx6+uhCNwmGR1enoSw=
Subject key identifier:   C1:3D:35:0A:EC:4F:CF:7F:1E:BE:4E:78:E5:80:DC:EF:E2:22:B0:CE
Certificate issuer:       /CN=0c23b672-82ba-4697-9783-b36dad570d90
Certificate serial:       010D0C9F4328584ED9C75D5B38008EF0EAFECBA0
Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     399381
IP address blocks:        131.201.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:5d:5b:38:00:8e:f0:ea:fe:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=0607799f-38b7-4386-b743-68c0b491a71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:4b:56:fb:d2:4d:c2:90:2b:b8:bc:1a:3d:2b:
                    97:0f:2a:a0:1d:42:ee:71:ef:48:1a:09:06:8e:b8:
                    af:be:3d:01:dc:b7:7d:d9:4f:d1:70:30:4e:67:6c:
                    d3:ca:ed:fe:56:04:10:c1:7f:49:f1:8a:e3:1e:8a:
                    d3:df:4f:01:3e:12:46:9d:c7:42:49:f8:f0:64:55:
                    7a:89:85:9a:e3:9d:b3:32:0a:72:45:e7:bf:42:cf:
                    8c:6f:72:c1:e6:35:da:af:ec:1d:9c:46:2f:8a:3b:
                    65:9c:07:e6:4b:1f:e2:04:48:57:a8:bc:3e:3a:a3:
                    84:60:02:75:dc:6d:b4:eb:4a:53:77:64:15:ec:44:
                    a6:8b:9e:f5:b8:52:0d:ac:1e:92:4f:3e:aa:f5:58:
                    ef:2b:77:5e:10:c7:ae:3e:44:29:c0:a4:bd:5d:71:
                    86:08:4a:44:16:d7:68:c3:a2:34:21:d4:4c:4e:64:
                    f2:48:59:4b:56:cf:d1:bb:0b:2c:10:d2:ec:94:b1:
                    dd:9d:b6:bc:d8:d6:ca:77:75:2e:e6:56:40:63:54:
                    f3:7c:f1:79:f3:df:ef:f4:63:64:ee:20:71:56:bd:
                    47:bd:d2:63:f8:56:a1:54:5b:33:4f:f3:71:c3:83:
                    41:10:35:1b:48:5e:f4:3d:7e:1f:b3:f4:e6:b8:e1:
                    40:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3D:35:0A:EC:4F:CF:7F:1E:BE:4E:78:E5:80:DC:EF:E2:22:B0:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl

            X509v3 Authority Key Identifier:
                keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.201.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:90:25:45:ed:3d:71:96:72:d5:de:b4:44:36:f6:49:f5:4b:
         92:cd:d8:29:3a:bd:35:47:e7:95:cc:c7:0c:aa:f6:a6:25:ce:
         95:02:34:fc:b2:41:2a:c3:52:e4:11:50:e5:77:aa:9c:80:5e:
         a0:40:c9:65:ef:90:fc:c1:be:94:c4:95:c0:60:c0:cb:e2:ff:
         40:b3:59:3b:a4:94:88:4a:49:92:a2:a0:5a:01:ce:dc:cf:dc:
         c0:c0:bf:4f:78:59:88:e6:9f:52:0b:eb:d0:3c:8c:36:fe:75:
         04:0c:7e:64:93:c7:9b:81:c6:a9:aa:9d:fc:46:90:e5:85:27:
         0e:bd:2d:0d:03:75:7e:40:df:e1:73:f3:e1:c2:60:cd:c4:c0:
         d3:4c:ff:8c:62:1a:74:7c:bf:57:fd:47:5b:32:da:3f:2d:c3:
         2e:95:2d:7e:e3:dc:85:8b:84:45:6d:30:42:21:c2:05:10:90:
         19:2d:70:2e:25:ab:ca:19:f6:b1:d6:61:48:5a:c0:05:c0:41:
         18:e5:12:cc:35:36:59:b1:ec:71:1c:3b:ea:21:3b:5d:1d:1c:
         11:e5:91:d1:95:10:24:59:c9:98:93:a6:bf:d1:8d:32:2e:f3:
         a6:4d:99:7a:a9:7f:aa:33:57:be:ec:5e:62:3f:09:28:16:84:
         8f:d2:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:45:17 2026 by rpki-client