Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/8071aa16-3c22-35d1-9365-c82b84adcff0.roa
File:                     8071aa16-3c22-35d1-9365-c82b84adcff0.roa (raw, json)
Hash identifier:          w6XMwTBc2Qh6WYt01Na90eGF8FrVBeM2A4pPR4HH+wo=
Subject key identifier:   5B:86:58:B5:E6:0C:4A:F8:9B:03:86:2D:C0:6C:35:0B:CD:79:7B:76
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584EA794611EF7A378E91A0BCE00
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/8071aa16-3c22-35d1-9365-c82b84adcff0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     31898
IP address blocks:        131.229.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:61:1e:f7:a3:78:e9:1a:0b:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fef10e66-6dbb-47ab-b61a-7eac3d21aa83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:fa:18:10:0c:a8:8c:44:84:1c:f2:50:2a:
                    92:01:7d:46:de:36:c3:68:01:25:70:3b:47:f0:8b:
                    09:36:62:ea:48:ce:9f:a4:45:48:fe:c6:d3:c2:6e:
                    8c:14:f6:75:5d:af:ae:5c:6a:a6:39:5c:8a:d1:13:
                    58:90:d5:a9:70:03:53:98:17:37:89:75:16:9a:c3:
                    3a:f5:a5:3c:72:14:75:9a:7c:b5:ab:ab:8d:02:fb:
                    16:24:96:a2:41:da:6a:f1:93:97:9e:d1:82:f6:39:
                    a3:87:e7:64:0a:48:23:e0:72:26:ad:dd:03:06:cc:
                    76:90:dd:30:99:cd:69:ba:60:f9:c5:bc:a7:7e:e2:
                    9e:24:28:34:be:6a:0a:d2:10:33:f9:fa:30:bc:90:
                    97:e3:25:b3:e4:c2:a6:21:0f:22:6a:28:45:58:af:
                    72:cf:91:e3:f6:74:0b:5a:37:21:9c:09:90:db:6e:
                    da:d9:82:92:85:d6:72:1a:9a:00:97:17:6c:87:7b:
                    a7:ab:4e:c4:62:e9:16:77:fe:1f:0b:1d:98:ef:e1:
                    76:cc:50:d0:03:ce:cb:c4:03:ca:92:d4:43:de:01:
                    59:cf:34:8c:1f:28:0d:bd:9a:f2:35:0f:e3:ae:fd:
                    61:16:0a:15:ef:be:8c:50:90:ba:6f:1b:c9:2f:e2:
                    9d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:86:58:B5:E6:0C:4A:F8:9B:03:86:2D:C0:6C:35:0B:CD:79:7B:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/8071aa16-3c22-35d1-9365-c82b84adcff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a0:4b:6a:25:ef:7b:cd:b8:95:8e:09:94:23:5e:94:d2:73:
         06:8a:32:51:01:0a:c6:be:4f:32:af:a0:4a:77:43:51:28:61:
         23:71:8e:8f:da:33:30:eb:6b:f5:e1:96:98:dc:62:06:47:ec:
         9c:13:1d:53:c5:ec:7f:7e:5a:6e:ea:85:cd:41:31:7c:8f:43:
         c4:eb:84:15:6d:27:7e:6f:83:06:a5:26:31:42:24:e1:4c:57:
         b3:cd:e7:3c:34:91:02:37:27:7b:a2:5c:4a:65:12:f1:57:ee:
         79:e6:f4:f4:b1:4e:89:30:2b:2d:84:3a:8b:8f:73:d5:23:7c:
         a6:35:c2:72:14:fd:9b:48:1b:92:3b:f7:77:20:87:a9:c0:e8:
         68:2a:d3:d4:f2:e6:be:b9:2d:ed:05:51:91:18:d8:10:a1:f3:
         ba:71:9b:fc:ed:40:4b:70:fd:5a:c5:0e:65:b2:5f:79:38:03:
         be:79:4a:96:79:35:cf:fb:d4:29:7d:94:3e:4e:9c:90:eb:ab:
         c5:a3:01:1f:be:6a:61:4e:3b:ec:81:8f:9b:39:28:bd:56:72:
         6b:0c:6b:4b:dd:c0:6c:2e:e5:87:cd:b4:4f:7f:5c:e4:84:ee:
         45:a5:d6:d7:b8:02:6d:5b:f5:23:d0:49:eb:ac:7e:75:cc:04:
         eb:33:fe:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlGEe96N46RoLzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3
Yjc0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZmVmMTBlNjYtNmRiYi00N2FiLWI2MWEtN2VhYzNkMjFhYTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFz6GBAMqIxEhBzyUCqSAX1G3jbDaAElcDtH
8IsJNmLqSM6fpEVI/sbTwm6MFPZ1Xa+uXGqmOVyK0RNYkNWpcANTmBc3iXUWmsM6
9aU8chR1mny1q6uNAvsWJJaiQdpq8ZOXntGC9jmjh+dkCkgj4HImrd0DBsx2kN0w
mc1pumD5xbynfuKeJCg0vmoK0hAz+fowvJCX4yWz5MKmIQ8iaihFWK9yz5Hj9nQL
WjchnAmQ227a2YKShdZyGpoAlxdsh3unq07EYukWd/4fCx2Y7+F2zFDQA87LxAPK
ktRD3gFZzzSMHygNvZryNQ/jrv1hFgoV776MUJC6bxvJL+KdwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFuGWLXmDEr4mwOGLcBsNQvNeXt2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5
MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvODA3MWFhMTYtM2MyMi0z
NWQxLTkzNjUtYzgyYjg0YWRjZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl
ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5
N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll
OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGygS2ol73vNuJWOCZQjXpTScwaKMlEBCsa+TzKvoEp3Q1EoYSNxjo/a
MzDra/XhlpjcYgZH7JwTHVPF7H9+Wm7qhc1BMXyPQ8TrhBVtJ35vgwalJjFCJOFM
V7PN5zw0kQI3J3uiXEplEvFX7nnm9PSxTokwKy2EOouPc9UjfKY1wnIU/ZtIG5I7
93cgh6nA6Ggq09Ty5r65Le0FUZEY2BCh87pxm/ztQEtw/VrFDmWyX3k4A755SpZ5
Nc/71Cl9lD5OnJDrq8WjAR++amFOO+yBj5s5KL1WcmsMa0vdwGwu5YfNtE9/XOSE
7kWl1te4Am1b9SPQSeusfnXMBOsz/gw=
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:17:50 2026 by rpki-client