Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/5476b7ee-ffcd-3685-929f-f2122185619a.roa
File:                     5476b7ee-ffcd-3685-929f-f2122185619a.roa (raw, json)
Hash identifier:          FxXVzX2KvwleF+6PIyN3wbaD18mGhlSmXorYiY9hRFE=
Subject key identifier:   16:81:7D:13:17:5D:68:38:D8:4E:A5:82:53:C1:FF:8B:E2:6F:3A:63
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584ED861D73025A7E78D8099B380
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/5476b7ee-ffcd-3685-929f-f2122185619a.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        131.229.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:d7:30:25:a7:e7:8d:80:99:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=db950fa5-fac0-4d55-a9d2-9b1026e4bce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e8:2e:21:08:b7:47:5d:32:6f:03:1f:08:5b:
                    62:dc:3b:0c:ef:95:1e:a0:63:32:1b:ff:dc:89:9c:
                    65:cb:ec:df:6e:34:cc:d0:87:31:ed:60:ac:1b:1c:
                    26:56:46:78:3d:53:3e:69:4f:1e:12:af:cf:b9:72:
                    43:de:75:7a:61:56:be:ef:fa:46:1d:73:e8:25:9e:
                    a2:dc:6b:0c:e0:c9:69:29:e1:68:90:6b:61:57:40:
                    ab:e8:01:75:c1:90:37:96:84:74:b0:a2:7c:b8:8c:
                    47:03:d0:42:44:6d:d7:d0:76:52:9c:0a:f6:4c:10:
                    9a:1b:75:ae:2b:28:e2:07:8f:e1:c4:4c:28:d2:31:
                    39:48:7f:eb:7d:1a:c6:c2:c1:ff:09:ae:bd:1f:69:
                    ef:2a:dd:9c:42:7d:86:ff:c4:2d:d9:fb:f0:f8:21:
                    d3:94:15:d2:67:ff:10:2a:0f:15:fd:89:4c:06:6b:
                    a8:60:a3:7c:5b:2c:a6:0e:5e:80:38:55:f2:cd:9e:
                    18:ef:c8:4a:c8:c0:f3:50:12:d3:07:90:a7:29:d7:
                    09:44:63:e2:f3:a6:0a:a6:0b:49:b9:1c:c5:3e:42:
                    cf:1b:b2:5f:21:32:87:84:52:3e:0f:bf:3f:2d:81:
                    3f:56:63:35:09:cd:05:ec:8a:49:a7:72:9f:3f:2d:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:81:7D:13:17:5D:68:38:D8:4E:A5:82:53:C1:FF:8B:E2:6F:3A:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/5476b7ee-ffcd-3685-929f-f2122185619a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:56:22:f7:e4:9a:13:d8:e4:ad:98:a9:7a:f8:3b:bc:d8:73:
         ba:98:4b:9c:d3:03:de:87:e3:cb:c1:3c:16:f1:01:3f:9d:07:
         c1:83:28:8d:23:01:ca:fd:9e:ff:a0:86:00:70:2f:c9:61:62:
         4d:b7:78:fe:a7:a0:26:33:84:05:b9:0a:cc:91:22:96:7e:22:
         c7:45:dc:1c:cf:d8:0f:fe:3a:38:56:ef:49:0a:c7:91:1b:83:
         bb:51:87:b2:fe:ed:06:37:4f:a3:9e:a6:be:bd:55:0b:92:de:
         54:0b:9c:94:0d:da:2f:5d:65:2e:0e:c8:dd:81:22:26:39:23:
         92:51:94:ae:15:74:32:b4:74:95:c3:e4:2c:3e:eb:5f:5a:b9:
         32:f2:f4:71:2b:6d:bd:db:95:da:01:6b:bf:ee:46:01:75:02:
         06:b6:38:34:41:d6:c8:dd:43:cd:76:54:3a:20:d9:ee:c2:c2:
         53:32:bc:40:da:03:4e:dd:17:ed:b6:91:1d:b6:b5:c3:24:d2:
         dd:f2:4e:ec:02:09:e1:e6:11:6f:61:b2:7b:e4:d3:10:b3:91:
         39:b9:6b:fa:fe:65:69:14:f1:f2:54:62:a9:47:35:87:23:0c:
         56:8d:4f:e1:24:ff:15:79:e5:06:31:a6:e7:6c:8b:06:0f:e0:
         7f:d5:12:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 03:24:33 2026 by rpki-client