Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/10981304-519b-3f03-87d6-9a510cc0dfc4.roa
File:                     10981304-519b-3f03-87d6-9a510cc0dfc4.roa (raw, json)
Hash identifier:          lS4PoM2RPKJHYM20aLqm4o7Ksu4g/EG7caIEWlTcZIE=
Subject key identifier:   B0:7D:C1:F8:C8:9E:7D:8D:83:9A:03:49:08:C2:7E:6A:C1:07:B6:5A
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584DEDE0838CB2129C0DB9041400
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/10981304-519b-3f03-87d6-9a510cc0dfc4.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     203724
IP address blocks:        131.229.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:83:8c:b2:12:9c:0d:b9:04:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=42e5269c-64b3-47d8-b75f-51fca6a10406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:f1:92:36:e7:12:51:ba:48:1b:de:f4:17:
                    72:b6:24:1c:92:15:a5:10:3c:1a:b3:4b:55:f7:ac:
                    f1:2a:7a:ca:b5:8e:9a:7e:3b:57:d7:ce:3e:1f:b8:
                    d3:3f:40:13:f0:3e:df:e5:71:be:a4:dd:33:53:b2:
                    bb:a3:e6:a7:c5:d8:49:ec:8e:68:de:70:ae:c0:75:
                    a2:2a:fe:81:9c:a9:f6:ff:cd:84:a4:fd:c2:30:0c:
                    7d:7f:60:c0:9b:d8:f5:a0:f6:9d:7b:90:1e:1a:e5:
                    7b:74:59:bd:b4:ff:0a:6d:45:a5:9f:25:2e:ef:41:
                    01:55:fa:11:ff:f3:5a:09:51:7c:2b:3d:e6:66:da:
                    b3:b8:32:22:7c:9c:b1:9c:ea:09:ad:f3:d7:08:65:
                    f4:12:79:fd:2a:da:50:e9:5c:8a:ef:a0:92:d1:15:
                    01:0d:4c:68:d4:4e:a9:56:c6:90:c4:a5:36:57:01:
                    a6:a3:e1:f7:6a:21:70:15:9a:62:ac:2a:f6:62:61:
                    cc:1e:62:8c:69:db:35:b8:46:fc:c8:af:a8:94:3b:
                    20:f4:b8:46:29:b9:48:85:58:a3:1e:94:46:b6:a6:
                    36:ad:11:d5:40:eb:93:d7:b0:32:3f:91:7c:84:01:
                    19:9f:1a:9b:78:4e:15:9a:8e:c6:8b:37:3a:b8:b1:
                    16:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7D:C1:F8:C8:9E:7D:8D:83:9A:03:49:08:C2:7E:6A:C1:07:B6:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/10981304-519b-3f03-87d6-9a510cc0dfc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f4:c1:94:f3:a6:cd:4d:90:3f:6a:a6:84:51:23:2f:7c:23:
         75:2b:ab:0d:3f:32:2d:31:9f:07:6b:0c:41:51:3a:c9:46:bb:
         2f:6c:94:72:36:48:27:cb:6e:b4:4b:be:14:33:83:2d:87:1c:
         81:4a:d4:cb:0d:76:68:2b:7e:5c:6c:8b:63:0a:27:e2:f7:89:
         a9:bb:b1:13:52:f0:09:d0:db:ea:b0:02:4c:64:d3:0a:c8:82:
         7d:9f:69:c5:05:b6:98:e3:57:57:42:fc:ef:3b:da:87:e5:80:
         1d:74:75:2d:fa:52:b9:00:3e:5b:35:c3:af:36:66:9a:64:48:
         5a:5b:c2:64:2c:85:ac:82:e1:00:18:0d:57:9d:47:bc:be:74:
         c1:dc:2f:90:18:a1:16:d0:db:ef:3a:d2:24:53:8b:b4:95:c0:
         9c:79:f9:d5:65:31:48:3d:de:48:f2:c0:5a:ef:37:a0:d6:e6:
         cf:57:8d:60:27:d6:60:6a:fc:b7:34:98:ae:ac:37:5f:b3:aa:
         34:5b:36:05:ab:41:25:33:74:91:11:db:86:44:14:b3:61:72:
         a8:7f:fc:b7:60:b3:80:10:ba:b4:2a:36:f6:23:42:d7:65:11:
         b9:40:1d:02:9d:34:8b:72:0f:52:9a:3e:16:dc:d8:a9:ab:8b:
         7c:5b:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:04:21 2026 by rpki-client