Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3937b6de-fd14-3461-ac84-97aa1a98bbdc.roa
File:                     3937b6de-fd14-3461-ac84-97aa1a98bbdc.roa (raw, json)
Hash identifier:          ReVuN6SC+4igWm90DxhyiBey1oKs23FqiUBD/2tmroE=
Subject key identifier:   82:08:83:94:C3:4C:C5:D4:6C:02:C1:DA:A1:FA:FA:AE:C9:02:E1:18
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584A9FFB89259501DD23434C8A00
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3937b6de-fd14-3461-ac84-97aa1a98bbdc.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     398391
IP address blocks:        131.226.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:89:25:95:01:dd:23:43:4c:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=03e298f9-b3fc-48ca-9d83-f814a69aaa5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:e3:b9:1a:d1:1a:13:82:84:2f:0c:aa:09:
                    a2:b7:e2:04:b6:c7:93:c4:d6:a5:c4:79:a9:28:b5:
                    8c:d6:d8:2b:64:a5:b4:15:2b:a6:3a:b3:48:41:1d:
                    ab:31:4f:16:35:a3:40:3d:8d:3f:ea:a7:60:7e:9b:
                    c6:8a:e6:3d:0a:26:18:cf:ac:90:7a:ed:04:91:29:
                    3d:9b:57:ab:ec:74:b3:42:83:2f:82:2e:cf:c9:84:
                    ba:12:b5:ec:10:7b:08:b9:bf:2d:35:a7:48:da:2e:
                    60:ab:4c:ce:8a:18:1e:b6:68:83:7f:38:2d:da:cb:
                    31:ed:2a:1e:4c:a2:e3:9d:8e:5c:88:f3:a2:22:ed:
                    73:39:f6:7d:6f:19:df:e2:d5:a3:50:9d:6a:76:0d:
                    d9:c6:28:c5:56:35:30:7a:9b:d2:35:76:5b:cc:77:
                    1c:04:54:96:91:b9:ac:b6:b6:9c:73:e1:c3:80:d6:
                    cb:4b:cc:28:f4:3c:03:c4:a6:c3:33:a9:e7:70:f7:
                    95:c1:8f:9e:7b:46:f8:c9:90:65:09:29:1c:f6:9f:
                    df:0c:dd:8f:02:1e:07:88:88:f4:4f:25:bd:d0:1b:
                    51:cc:4e:dc:87:20:28:f7:c7:3c:55:69:f2:95:93:
                    5b:6d:27:c9:7a:84:a8:71:86:42:86:9c:88:cf:5a:
                    c1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:08:83:94:C3:4C:C5:D4:6C:02:C1:DA:A1:FA:FA:AE:C9:02:E1:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/3937b6de-fd14-3461-ac84-97aa1a98bbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e3:39:36:08:b3:df:b0:81:de:d3:76:5c:5c:08:42:c3:8b:
         45:0d:ae:16:51:f7:10:b8:3e:91:f2:02:a1:d1:a2:92:f6:a2:
         8f:22:65:1b:bc:cd:98:a4:43:0d:45:da:c2:0e:c4:6f:17:8f:
         bf:fb:e6:31:4c:e2:6d:55:c1:45:ba:58:c7:d4:cd:4e:55:e7:
         bc:55:2f:e4:4e:8d:45:c7:a4:2a:cd:88:ed:bc:b4:e9:c8:0c:
         ba:93:4d:27:04:c8:91:52:ab:75:bc:ed:68:61:e7:b1:23:f0:
         8e:9d:53:e1:c9:6f:3f:5f:b6:9b:2e:dc:15:1a:4c:59:71:79:
         18:91:61:8f:58:41:e9:26:60:68:31:ac:3c:84:5d:7f:62:96:
         06:4a:2a:16:2f:c9:ab:22:e2:8d:24:2d:45:bb:c4:7a:41:31:
         8c:62:1b:9a:c5:0f:74:55:5f:bc:62:cb:2c:3e:51:d5:0e:88:
         78:75:c8:e4:7b:20:f8:05:8f:17:40:85:f5:b7:99:81:46:bb:
         74:9b:5f:5e:f0:f3:49:89:25:c2:aa:23:cf:ba:34:67:77:fd:
         3f:21:a9:e9:e1:d4:32:bf:64:fe:38:62:9f:d4:52:35:9c:e1:
         c9:87:1a:98:28:f6:7f:28:7c:22:27:73:1e:49:83:f2:9c:52:
         c2:7c:38:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:45:02 2025 by rpki-client