Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ddaf04d4-9457-3b81-8980-050f77953123.roa
File:                     ddaf04d4-9457-3b81-8980-050f77953123.roa (raw, json)
Hash identifier:          gThYRpaTkEreospCkQCEvI+jrMLdmkp2SqMCo+mMSMw=
Subject key identifier:   41:57:CD:FB:0A:0C:E1:1A:5B:14:E1:ED:4A:2F:8B:47:EA:6E:60:C5
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584D55BCB5C06D43C3B0F9E8C400
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ddaf04d4-9457-3b81-8980-050f77953123.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        131.229.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:b5:c0:6d:43:c3:b0:f9:e8:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=50581605-66aa-4eb0-84ef-56256820c7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2f:62:da:1a:b2:aa:d9:94:0e:d5:22:82:cd:
                    a1:89:6f:b1:70:99:fc:3e:33:d1:26:c6:53:ce:8f:
                    7e:96:03:95:5c:07:f0:de:4f:6d:3f:21:31:97:f5:
                    18:65:2e:be:bb:9d:16:07:43:83:8e:9d:9e:53:24:
                    79:34:15:1e:2e:05:02:fa:9d:78:d9:78:61:a1:9c:
                    70:14:fa:57:15:de:88:30:6a:27:4d:88:bf:f5:a3:
                    8a:92:7e:27:42:87:a7:79:b9:6e:11:6e:70:67:d2:
                    76:d5:76:f3:0e:60:34:13:1d:e7:37:be:38:2f:29:
                    c3:e8:a1:9b:60:9d:e4:20:7a:01:75:0a:ce:c7:2e:
                    6c:8c:72:42:5e:06:51:6f:3f:8e:25:d9:f1:c0:7e:
                    2a:ef:11:1e:d7:16:6e:fc:68:b8:71:e9:fd:bd:7d:
                    77:df:5b:f3:9d:5c:ba:e4:80:10:65:69:67:d1:b4:
                    24:0d:ec:18:19:b7:cc:e8:29:ef:cf:e9:24:12:45:
                    25:4c:a3:44:1b:54:87:e9:f8:bf:2d:33:77:26:be:
                    67:b4:c3:03:99:38:e8:b5:c1:a9:42:99:05:51:34:
                    02:66:5c:43:ec:70:80:ba:8f:3d:65:12:73:10:32:
                    54:51:77:67:44:0c:53:cf:36:fb:e8:41:eb:07:49:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:57:CD:FB:0A:0C:E1:1A:5B:14:E1:ED:4A:2F:8B:47:EA:6E:60:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ddaf04d4-9457-3b81-8980-050f77953123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:01:ff:74:c9:ef:09:64:67:f1:57:82:08:98:2b:1c:a4:6a:
         3d:a1:08:ad:e6:c2:e3:8e:65:ed:7a:2c:03:d6:e7:ae:6c:dd:
         08:1d:8e:99:b8:e7:91:fd:ed:4e:ce:ae:cf:91:08:7c:99:06:
         af:1f:b7:32:e1:80:b0:60:64:2f:6a:ac:42:37:21:3e:b3:08:
         d6:30:5d:a0:3a:1c:9d:0d:84:90:59:67:33:0b:56:3c:37:7b:
         55:4c:22:a3:aa:a4:90:9f:b3:cb:1f:94:75:10:93:22:2d:6d:
         96:79:e4:a5:8f:bf:64:30:93:bd:50:32:09:5d:d4:1a:08:a5:
         48:e1:0f:95:dd:1f:73:43:98:13:5b:13:10:d3:f4:12:22:34:
         de:55:71:48:1a:77:3d:f0:2d:db:dc:3a:de:47:a6:21:f0:69:
         32:67:93:49:8a:60:61:82:ac:86:de:16:2c:7b:9c:f1:44:1d:
         a8:a1:4e:45:47:1a:05:6e:08:37:bb:a5:13:f4:2a:ec:00:a0:
         a9:ec:76:86:3a:b2:c4:a5:dc:e3:1b:16:b7:95:b2:4a:0a:f0:
         27:70:c8:4b:26:3b:34:98:ef:45:a2:32:d4:ec:eb:ef:3c:46:
         3c:2e:6c:c7:dd:6c:14:d4:4d:a1:4b:69:f4:d6:ce:03:1e:1a:
         e7:fe:17:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:18:12 2026 by rpki-client