Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/5061b76e-778c-3b56-b778-1a97e31bf308.roa
File:                     5061b76e-778c-3b56-b778-1a97e31bf308.roa (raw, json)
Hash identifier:          hHRu9WStKaKVgLdCLcpvWEVySWAlLsxtCErQNskkzVk=
Subject key identifier:   0C:83:56:71:C9:48:EA:C0:96:14:C5:07:8A:B0:EA:C9:59:EB:99:13
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584A8146453DE4D93C90BD2A3200
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/5061b76e-778c-3b56-b778-1a97e31bf308.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     398391
IP address blocks:        131.226.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:45:3d:e4:d9:3c:90:bd:2a:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=bf51e444-1b3b-49d7-ac00-217b6a03c845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:28:27:be:b8:9f:fc:11:bd:2e:7e:9a:40:
                    70:5a:6f:9f:3e:b0:2e:6b:5c:12:dd:dc:42:d8:cb:
                    7f:bb:30:11:72:f2:3d:19:18:17:67:65:17:da:c0:
                    b3:8c:ba:a5:39:15:cd:57:9e:09:8e:bd:bd:b3:ab:
                    1b:81:d0:9e:63:0a:53:dc:56:e3:04:3d:fe:c3:81:
                    42:ba:10:3b:6e:70:cd:e2:78:63:ba:a1:69:42:ab:
                    58:35:93:b3:65:e6:ea:2a:38:ff:88:98:fe:02:a2:
                    80:c0:a1:22:ed:45:72:a3:e5:85:4b:f4:1f:29:cf:
                    91:99:da:ea:77:20:3f:0a:05:fe:68:35:96:16:39:
                    ff:d8:19:2d:dd:8b:41:90:82:90:55:8f:ca:08:54:
                    f9:dd:ad:6f:aa:3a:c3:b8:65:0b:1b:36:05:5f:48:
                    3c:be:b1:f1:67:cc:9a:10:0a:6e:99:3f:74:41:9f:
                    7f:99:b2:77:5e:1c:32:a3:81:a0:c0:3f:c1:cd:e7:
                    11:83:c8:f2:92:9e:37:43:f3:ad:d3:26:20:30:1d:
                    50:3c:f5:a8:9b:a7:02:11:51:47:35:9a:42:4f:a7:
                    9a:86:f8:d3:0f:50:c4:a0:23:ac:6b:45:21:92:4e:
                    1e:c1:d0:bb:62:ba:6a:06:c0:cc:76:ec:7f:ae:ad:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:56:71:C9:48:EA:C0:96:14:C5:07:8A:B0:EA:C9:59:EB:99:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/5061b76e-778c-3b56-b778-1a97e31bf308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:80:16:37:ea:b1:35:39:8e:60:d6:6c:9f:9b:c4:0f:62:7c:
         91:e0:22:35:00:c7:2c:1d:da:fe:44:df:2b:20:7f:d3:fb:fd:
         8e:6a:1c:85:06:ee:6c:93:9e:c3:d9:3c:d3:77:47:94:6d:1d:
         ba:7d:7a:65:26:6a:34:f5:56:48:f9:73:ac:e7:21:0c:eb:5d:
         5d:27:ad:26:b3:a8:f9:43:2e:f6:75:9f:7b:d5:93:d7:1f:8c:
         33:7e:08:8f:e6:29:ec:32:33:14:f4:e0:a0:f8:1c:3b:33:32:
         fe:1f:5f:bd:62:93:8b:cf:27:d3:5c:22:b2:5e:32:48:43:ea:
         a4:d7:7a:80:77:2e:d4:3e:e0:b2:ab:7c:e5:21:9c:35:00:36:
         b4:c5:8b:b6:49:f9:48:6a:22:32:f8:12:cc:c5:74:81:68:ce:
         59:42:9e:67:6f:8c:a2:c1:d1:c7:ac:e2:35:16:4d:5d:4a:78:
         e0:0a:fa:4c:8f:aa:5b:4e:96:8d:6c:45:5d:79:cc:63:b7:2a:
         0f:af:a2:8a:6e:12:09:f9:4e:1a:5a:5b:8a:bc:aa:80:aa:fe:
         8f:5b:cb:f2:46:48:c7:66:0c:d7:4f:7e:40:8d:69:bf:48:bd:
         54:fd:78:5a:7a:45:4c:05:74:8f:cd:04:9a:a4:0a:e2:d2:f7:
         03:8b:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:35 2025 by rpki-client