Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d17d5ae8-be36-35af-ac50-557daa251272.roa
File:                     d17d5ae8-be36-35af-ac50-557daa251272.roa (raw, json)
Hash identifier:          UeTkMw9LLip4cqYszYNM+LLk0utLyctoAwLvyaKeY7Y=
Subject key identifier:   E5:07:20:0F:D3:27:FD:B7:47:EB:43:28:FE:25:FF:80:48:F1:C9:DC
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584DEDE0997DF8329A08BC0D9100
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d17d5ae8-be36-35af-ac50-557daa251272.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        131.229.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:99:7d:f8:32:9a:08:bc:0d:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=eaad7601-9855-43cb-805e-cb465add2362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1d:57:1d:26:19:18:e8:5f:74:40:98:cf:f1:
                    7d:90:ef:a3:ad:f0:0f:41:13:e5:9c:81:f4:48:33:
                    2c:eb:dc:7b:cc:e7:9c:27:a1:2c:43:45:e4:6e:5a:
                    2b:7a:97:7d:78:92:33:0f:51:a9:17:31:b3:a3:bc:
                    55:ec:f9:be:e2:0b:8e:43:2d:9e:56:af:d0:d5:e9:
                    86:d3:37:c9:89:56:b7:8b:66:52:fa:dc:05:8a:b0:
                    95:b2:f2:bb:4c:ee:16:bc:77:9f:7d:a6:d6:d1:cc:
                    aa:53:e9:bc:76:c7:5c:fe:e7:53:b8:ef:80:9a:2f:
                    6a:20:e2:9b:89:20:02:1d:fa:34:b5:02:9c:b1:46:
                    56:ba:86:22:5d:22:6f:0b:d2:82:e5:c1:c2:7b:be:
                    59:a0:e3:26:f7:41:fc:3e:a1:7b:5b:ea:ba:e5:d1:
                    27:fb:f7:53:84:72:c3:c7:d5:18:b7:c7:c4:06:a1:
                    7d:43:0d:f7:ec:b3:df:fb:1c:ac:f5:a4:95:82:3e:
                    01:60:a0:78:bf:20:2c:43:60:5a:3d:1a:64:ab:7a:
                    ae:b6:72:5a:92:0c:d9:d1:31:58:8b:56:d0:71:1d:
                    93:7d:17:da:3e:47:53:d5:5e:02:88:e5:2b:61:6d:
                    77:9a:a6:9c:2c:58:22:35:a2:42:fe:3f:0b:87:9e:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:07:20:0F:D3:27:FD:B7:47:EB:43:28:FE:25:FF:80:48:F1:C9:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d17d5ae8-be36-35af-ac50-557daa251272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e3:6e:8a:18:36:dd:66:45:b6:97:0f:e3:a3:15:25:d1:85:
         ff:87:7f:cb:43:56:46:7c:88:84:3a:83:08:09:4e:52:f8:32:
         66:24:90:b4:13:04:40:78:fc:ee:9c:4a:fd:71:3c:6d:ed:d7:
         d2:aa:53:95:04:3a:2f:a1:ae:05:3e:ee:4b:7a:ff:35:35:ff:
         4e:e2:0e:2e:b9:b5:05:78:9b:c0:91:98:9c:fd:d8:7b:2d:5b:
         0a:e8:33:5b:a5:31:eb:82:3a:de:84:16:75:35:77:d0:ad:e2:
         44:a8:c1:37:03:42:6d:84:e1:5e:6f:9f:41:bc:9b:2c:19:d6:
         84:37:d4:4b:ea:f7:48:40:2d:87:e5:fa:41:bc:62:c2:49:79:
         49:17:f3:d7:25:69:eb:55:32:18:fb:c4:39:98:54:ce:f1:b2:
         c7:c3:ca:be:eb:45:d1:54:8b:23:db:e2:b5:38:03:c5:2c:f6:
         c7:8a:94:95:77:ce:e5:b0:10:35:0a:7e:c2:5a:90:88:47:7d:
         ef:b8:93:ab:9e:7f:98:81:30:35:f6:9b:41:45:ed:8f:e0:22:
         98:ec:97:01:38:db:0e:8e:d5:d5:15:d5:69:8b:2e:07:2a:69:
         b7:cb:24:26:7f:58:63:28:4f:ab:ee:cc:ff:fc:e5:41:c4:12:
         61:4c:cd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:05:09 2026 by rpki-client