Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/c5005106-9415-31d1-8d7a-361d6382eb35.roa
File:                     c5005106-9415-31d1-8d7a-361d6382eb35.roa (raw, json)
Hash identifier:          ZdNWAg9xiaLgqDZ7Qdt0mh6FTA+maWCueis5lHWB3g4=
Subject key identifier:   4F:ED:8B:B4:20:90:E3:CA:7A:1F:C8:08:76:72:91:DA:EE:B2:14:10
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F4328584ECD372633F95056AC41D0DF60
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/c5005106-9415-31d1-8d7a-361d6382eb35.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        131.232.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:26:33:f9:50:56:ac:41:d0:df:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=efe44326-8d6a-44e7-9e38-0a32d1ce631d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:51:19:b8:b9:d6:7b:9a:be:d2:2b:71:c4:
                    73:40:30:e4:8a:b1:9f:0c:9e:82:6c:ce:14:62:40:
                    18:9a:97:cf:56:10:fa:db:ce:15:d5:7f:93:03:c0:
                    7d:45:fb:e7:72:f5:a9:7d:2b:be:00:6b:54:90:fa:
                    20:21:84:05:e4:f6:ac:d6:b7:bb:15:be:99:a5:1a:
                    8f:2d:00:b8:3b:63:f8:dd:12:70:f2:5b:65:55:0e:
                    55:73:e9:24:d8:a3:01:6f:35:a1:8e:97:1f:5c:d9:
                    1f:d7:f3:39:92:60:0f:01:58:a0:b3:b1:ce:39:37:
                    01:e8:15:87:66:19:9a:99:39:ca:ac:c6:c2:97:b9:
                    36:e7:08:6c:b1:7c:a5:a6:40:a3:5d:c8:fb:71:9b:
                    b1:26:35:b8:f8:b8:a6:03:a6:49:6c:1b:61:13:d2:
                    35:95:a6:67:b8:89:b2:23:19:94:36:31:ba:24:74:
                    cc:15:fa:31:4e:73:1f:37:02:cd:02:51:b2:39:38:
                    f1:4d:17:2f:4e:dc:e5:ab:1f:0e:cf:d6:46:bb:b5:
                    d0:ec:1a:5f:d7:51:50:c8:34:8a:a5:21:54:84:c5:
                    39:8f:33:23:7a:68:b6:13:4c:8f:f9:0e:fa:15:7d:
                    8a:a1:87:19:fd:ac:13:d0:ea:2a:d4:d1:9f:e2:4b:
                    05:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:ED:8B:B4:20:90:E3:CA:7A:1F:C8:08:76:72:91:DA:EE:B2:14:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/c5005106-9415-31d1-8d7a-361d6382eb35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4e:a2:f0:cb:dd:bb:2e:80:d8:81:e3:c7:17:a5:e1:8e:e7:
         35:84:30:82:68:04:24:20:c6:51:62:5d:75:60:59:02:1a:b0:
         c8:2e:da:6a:71:c1:11:9e:f9:79:31:37:e3:c5:e3:f2:29:69:
         0d:9b:aa:1e:4a:dc:0d:52:29:43:f7:2e:b9:64:cf:55:94:d4:
         22:61:c9:63:ac:58:2b:7e:15:8e:67:75:f8:79:f1:84:7d:59:
         f4:a6:c0:e5:e9:cb:77:8f:2c:01:cc:c1:1c:5c:92:88:c0:96:
         c5:d5:78:28:cc:c4:e0:85:c2:92:cd:71:b7:7b:3c:4c:15:af:
         3a:d0:72:47:eb:9d:be:68:5a:a0:7d:fd:a0:ee:fd:08:7c:47:
         cf:8c:c3:ff:fb:99:81:57:27:2b:31:00:b5:c9:02:90:7c:98:
         3b:ba:de:17:c4:75:fe:07:91:ef:7c:2a:8b:f2:5f:be:f4:a5:
         5f:a2:38:33:e0:04:8c:52:3e:2e:8e:0c:ba:7b:5e:ea:3c:cd:
         7b:ba:d9:e8:83:f0:dd:c0:5e:72:d7:db:9a:b3:52:5d:e5:cc:
         e4:e6:61:fb:0c:47:6e:a5:ce:a3:cf:53:dc:f4:2e:14:aa:3f:
         45:e4:7a:11:03:2c:58:cc:39:e2:11:20:5a:41:89:89:1c:cb:
         8a:3e:b4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:54:39 2026 by rpki-client