Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/5ed64f9a-65b4-39d9-a79a-64dc37f92672.roa
File:                     5ed64f9a-65b4-39d9-a79a-64dc37f92672.roa (raw, json)
Hash identifier:          uRzxH1vBqu1nehR4QH1NZ7sqUodKpNKQaJ6Yut9CxbU=
Subject key identifier:   7F:55:12:2F:8A:C0:B3:25:75:F7:CE:15:03:2D:CD:CC:6F:75:5C:F1
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584DEDE09A29461C7908DBBCF200
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/5ed64f9a-65b4-39d9-a79a-64dc37f92672.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        131.229.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:9a:29:46:1c:79:08:db:bc:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=2337535f-221e-4b9e-a1f5-d6c317e34255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:8e:92:61:58:85:6b:da:56:01:bb:b4:a3:
                    16:86:17:46:ec:8c:fd:66:8d:64:dc:21:d0:a6:e1:
                    30:2f:39:75:2b:8d:a4:0a:ba:4b:12:ae:cc:a9:3d:
                    41:e4:66:66:52:20:27:26:4b:65:b7:42:27:ca:16:
                    f0:ab:0a:fc:56:3f:b6:41:94:b8:b8:22:ad:11:32:
                    9c:1e:56:a9:fd:38:d0:07:fd:d0:90:f8:5f:ec:52:
                    38:86:b1:8c:99:1b:2a:01:b3:fa:b4:a8:84:d7:bc:
                    c7:eb:e0:9a:03:af:a8:c6:c1:61:a7:27:6a:63:df:
                    96:f6:5d:bc:56:0f:24:b1:e1:77:51:2c:13:0a:92:
                    85:06:15:98:59:0c:01:80:84:98:a8:28:64:37:6b:
                    25:96:50:d4:ff:fa:44:f4:67:3b:09:d9:17:32:59:
                    e6:87:8f:eb:ce:1a:58:05:2d:4b:06:fa:b4:ea:e6:
                    80:3c:34:ec:4d:af:24:0e:8c:4e:c9:85:d8:1e:a5:
                    35:cc:e5:49:f9:7b:b6:1a:5d:e8:c9:4d:70:f9:21:
                    f1:6f:d5:11:d2:55:eb:26:76:f8:d3:88:ab:aa:a8:
                    30:6c:ff:75:1a:10:23:6b:21:b0:5d:60:45:24:6e:
                    89:11:99:c9:63:0f:f3:8d:3d:a6:aa:b1:29:f4:1a:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:55:12:2F:8A:C0:B3:25:75:F7:CE:15:03:2D:CD:CC:6F:75:5C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/5ed64f9a-65b4-39d9-a79a-64dc37f92672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:10:ce:ac:29:f7:5f:f4:26:06:35:56:ca:39:45:d2:8b:63:
         65:c4:69:0d:ac:42:b9:2f:11:2c:95:07:c5:ed:d7:d6:d0:f2:
         3e:a4:d9:42:b3:50:2b:70:10:86:13:61:a3:61:df:f6:08:98:
         ee:15:61:59:3a:22:f3:b4:27:34:af:9a:2e:41:bd:94:54:ad:
         57:66:a9:10:04:6a:ab:01:e7:ea:c2:04:76:6c:e0:0c:23:88:
         c3:d8:e5:95:9c:bd:55:92:0a:c1:03:4a:1c:b7:0e:a8:11:4b:
         3d:a0:b5:b3:ff:a2:89:b5:90:2a:ae:11:ec:55:7d:c1:a5:50:
         31:fb:9a:bf:c2:b5:15:d5:83:7b:22:09:f8:f6:e5:f6:f6:6d:
         59:1d:fc:f1:db:98:d7:52:2c:3d:a6:82:ef:63:c6:be:c5:e1:
         3d:60:e0:61:8b:aa:91:ff:7e:ed:5a:f4:23:d4:66:f3:83:c0:
         0f:90:48:50:66:ee:77:87:fa:87:ce:9d:07:f1:48:58:e3:de:
         39:bc:04:94:79:94:b1:19:c5:8e:cb:25:76:ec:61:e5:13:a6:
         2a:12:00:bc:7d:14:4c:db:95:44:71:0b:b5:9b:42:8d:aa:ab:
         f9:1e:29:e7:8e:8c:5d:ce:e3:bb:ee:f4:06:25:b2:9c:c6:06:
         f4:41:ca:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:03:33 2026 by rpki-client