Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f5cacb77-2ca9-3585-80cf-6d153b830d35.roa
File:                     f5cacb77-2ca9-3585-80cf-6d153b830d35.roa (raw, json)
Hash identifier:          RJ4nF8Z7rCbF91QKMdKynEUScktQoIuel7IP3FuG7Ho=
Subject key identifier:   EA:0D:AF:E1:F2:E4:24:D4:DF:2A:BC:4C:4C:F9:3E:47:5C:8A:F5:F3
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584ACF711CDEEC8A508827C34098
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f5cacb77-2ca9-3585-80cf-6d153b830d35.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     203724
IP address blocks:        131.229.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:1c:de:ec:8a:50:88:27:c3:40:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=5812704e-9758-464f-8a5a-5f0977b95586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:64:f9:27:08:d9:03:5a:6b:b5:50:a9:39:37:
                    57:44:86:e0:7c:3e:b4:d3:14:2a:3a:db:fb:89:dc:
                    ea:d9:64:47:dc:95:5e:24:d4:de:92:eb:6a:ca:c7:
                    d4:a8:98:9f:4d:59:db:8b:7c:cf:28:da:42:d1:74:
                    f7:68:d6:ba:90:0f:99:ad:76:ab:e0:60:13:1d:2c:
                    b8:5a:36:23:ff:49:21:99:6d:96:78:3a:71:4c:da:
                    b4:3d:8c:0f:4d:e3:36:97:50:f6:e8:27:8d:a3:51:
                    48:a9:03:90:c2:69:42:39:35:80:1d:0f:31:cf:68:
                    d8:89:ac:ec:d3:83:35:c6:2a:ae:09:ff:15:89:4e:
                    8e:58:24:24:42:41:94:65:48:0b:c1:cd:9b:61:b3:
                    42:19:8d:92:30:c8:aa:15:a8:9f:c2:bb:19:a6:04:
                    f9:7e:9e:45:ba:a9:ce:e9:27:1f:a5:34:09:80:ea:
                    bb:14:df:6f:06:62:7b:ae:80:4c:44:57:7a:b0:ea:
                    97:12:b8:af:d6:da:ce:e7:47:20:af:98:bb:ab:75:
                    9b:9e:03:1c:c3:89:d7:d3:90:30:94:66:4f:5f:44:
                    54:52:91:1a:e1:7b:c5:ed:e9:6d:42:88:e4:a9:5d:
                    02:c8:8b:6a:6c:a3:a8:53:36:38:3e:f4:5b:a0:e0:
                    1b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0D:AF:E1:F2:E4:24:D4:DF:2A:BC:4C:4C:F9:3E:47:5C:8A:F5:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f5cacb77-2ca9-3585-80cf-6d153b830d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f6:b1:62:6e:88:d9:c9:84:9b:c9:2a:49:94:1d:bc:3e:4f:
         a2:55:b7:48:31:ac:c4:3a:0b:aa:f5:a6:06:7e:6d:57:1d:70:
         50:0d:c8:84:2b:7e:92:a5:ab:47:e1:01:15:1f:8c:ac:11:45:
         86:f3:44:18:b0:ce:1b:3e:9b:e4:04:aa:85:9d:a5:08:76:7b:
         81:2e:cc:5f:58:f2:b0:34:f9:7d:84:f9:12:c9:1d:18:8d:2b:
         a5:00:31:b0:96:c2:9c:2f:a7:65:65:8c:b2:48:a2:67:70:b7:
         5d:b8:7f:c2:38:5b:9e:e0:dd:6a:82:df:52:67:f4:25:56:37:
         ec:e8:12:b3:a7:3e:de:c0:70:24:96:53:4d:55:20:a0:b6:7e:
         24:4e:4a:0f:fd:f8:b7:22:a7:d2:76:2a:dc:35:30:b7:0e:81:
         fe:cc:b1:12:3f:13:ec:0e:51:4f:45:59:e6:dc:15:53:b1:0c:
         c7:42:65:89:d6:16:55:48:24:5c:06:17:cf:39:11:08:35:6d:
         63:86:5d:08:fa:1e:84:93:8b:c8:6d:a7:4e:62:37:e0:ea:6b:
         5f:ed:aa:c6:2e:40:f4:be:02:cf:f3:eb:f0:7b:b9:46:78:32:
         c2:a5:9f:68:32:70:3c:54:32:ed:1b:45:35:26:6b:3d:28:6d:
         8b:98:73:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 11:54:48 2025 by rpki-client