Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/9b0b7248-01da-3655-80c1-81c6fac87d9e.roa
File:                     9b0b7248-01da-3655-80c1-81c6fac87d9e.roa (raw, json)
Hash identifier:          fCInuIbOTdXqUqC0QsI/PZBT/70rHILgS/wyDaz4weI=
Subject key identifier:   03:8B:63:6D:72:5E:FC:1D:E5:95:6F:4A:8C:CA:CA:8A:FF:EA:98:A5
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584D021797F77F6F2CEA00E04AE0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/9b0b7248-01da-3655-80c1-81c6fac87d9e.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     398391
IP address blocks:        131.226.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:97:f7:7f:6f:2c:ea:00:e0:4a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=8c8d657f-3868-46a1-9101-41d1671c9c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:93:49:06:14:0c:cd:17:2e:66:22:67:1d:
                    15:a0:6a:b4:eb:96:10:ab:14:eb:da:11:06:44:2d:
                    ea:00:e8:f0:c3:89:a8:27:af:c4:55:49:ac:10:a6:
                    f4:c8:cd:54:91:d9:c5:f8:fb:a0:27:9e:18:f3:79:
                    b9:b2:f9:9e:55:14:c7:fe:e5:45:60:36:01:e1:64:
                    b8:d5:14:25:76:61:0a:df:34:72:43:1c:a3:1a:54:
                    26:af:33:07:f4:98:ba:23:1d:a4:22:8a:81:05:21:
                    85:34:22:cf:74:5c:ee:60:20:03:a8:9b:07:a6:7f:
                    9b:c8:d8:3f:00:20:0a:74:6e:47:21:af:bf:e9:1d:
                    3c:c4:b8:87:59:9f:21:0e:c4:53:2a:93:af:d8:32:
                    a0:f9:6f:31:9a:0e:f9:79:d8:2d:63:cd:8a:84:b7:
                    5a:7f:a8:b4:3c:98:d2:59:bc:16:ab:33:da:c3:d6:
                    3f:27:cf:8c:4e:4d:80:35:27:7a:61:01:ba:d8:36:
                    37:18:f2:d6:d3:33:18:9c:99:0b:19:3c:0f:18:a0:
                    d4:6c:7f:aa:20:1b:22:2c:d1:2e:cb:73:1b:d6:bb:
                    bb:42:78:14:c7:d3:53:53:f6:4f:a0:40:c5:e8:b8:
                    e0:86:0e:8b:37:52:4b:4a:50:72:0a:94:53:16:5f:
                    76:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8B:63:6D:72:5E:FC:1D:E5:95:6F:4A:8C:CA:CA:8A:FF:EA:98:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/9b0b7248-01da-3655-80c1-81c6fac87d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:53:80:75:69:99:e4:b1:19:e0:cd:99:2f:68:fa:60:39:50:
         3c:b5:56:ef:a6:e1:73:92:10:55:9e:f5:8a:b7:1e:8a:56:24:
         04:b1:fe:98:26:32:fc:68:d6:f0:8b:0d:07:9a:7e:d3:05:e4:
         5e:49:79:e6:56:9e:b4:2d:cb:86:a1:ce:54:bd:6f:d2:11:f4:
         8b:bd:ae:b7:82:41:02:91:45:65:df:5e:68:56:3f:c3:b5:ec:
         73:61:e4:ab:c3:7f:ed:9d:d8:4c:74:78:df:28:4c:d2:d1:87:
         92:46:86:68:ff:fc:b3:87:79:ea:f4:54:7d:c5:59:c0:2b:30:
         41:ea:75:be:dc:be:b9:1c:75:ab:0f:b2:30:c5:60:77:29:c9:
         b9:e2:ac:c3:34:66:21:4d:a4:5d:e9:6c:45:8d:99:39:91:c2:
         6a:d5:c9:f9:63:a1:87:9a:69:a7:2d:2e:9b:a9:c6:2b:02:c9:
         8a:63:70:54:19:44:2b:f1:4f:6e:95:cc:b0:07:51:7a:1f:2f:
         6c:5e:c1:22:a6:7e:14:74:f6:ba:df:fe:54:92:cb:2b:f6:94:
         34:e4:a9:f3:c3:97:94:2a:a0:50:41:ec:ca:a1:89:fb:62:57:
         e8:e2:93:e8:b6:e6:3a:de:de:06:33:92:7b:b5:d5:c3:20:af:
         9f:b9:58:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF5f3f28s6gDgSuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQyMzk4MjUtZDNlNi00YjFmLWEzMzktZjczZjJkYjg5
ZWU5MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
OGM4ZDY1N2YtMzg2OC00NmExLTkxMDEtNDFkMTY3MWM5YzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0+TSQYUDM0XLmYiZx0VoGq065YQqxTr2hEG
RC3qAOjww4moJ6/EVUmsEKb0yM1UkdnF+PugJ54Y83m5svmeVRTH/uVFYDYB4WS4
1RQldmEK3zRyQxyjGlQmrzMH9Ji6Ix2kIoqBBSGFNCLPdFzuYCADqJsHpn+byNg/
ACAKdG5HIa+/6R08xLiHWZ8hDsRTKpOv2DKg+W8xmg75edgtY82KhLdaf6i0PJjS
WbwWqzPaw9Y/J8+MTk2ANSd6YQG62DY3GPLW0zMYnJkLGTwPGKDUbH+qIBsiLNEu
y3Mb1ru7QngUx9NTU/ZPoEDF6Ljghg6LN1JLSlByCpRTFl92CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAOLY21yXvwd5ZVvSozKyor/6pilMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDIz
OTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNmMmRiODllZTkvOWIwYjcyNDgtMDFkYS0z
NjU1LTgwYzEtODFjNmZhYzg3ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQyMzk4MjUtZDNlNi00YjFmLWEz
MzktZjczZjJkYjg5ZWU5LzY0MjM5ODI1LWQzZTYtNGIxZi1hMzM5LWY3M2YyZGI4
OWVlOS5jcmwwHwYDVR0jBBgwFoAUiYq+4lrGIGWwmxKaCUUuy2q5rIMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDIzOTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNm
MmRiODllZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+IiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxTgHVpmeSxGeDNmS9o+mA5UDy1Vu+m4XOSEFWe9Yq3HopWJASx/pgm
Mvxo1vCLDQeaftMF5F5JeeZWnrQty4ahzlS9b9IR9Iu9rreCQQKRRWXfXmhWP8O1
7HNh5KvDf+2d2Ex0eN8oTNLRh5JGhmj//LOHeer0VH3FWcArMEHqdb7cvrkcdasP
sjDFYHcpybnirMM0ZiFNpF3pbEWNmTmRwmrVyfljoYeaaactLpupxisCyYpjcFQZ
RCvxT26VzLAHUXofL2xewSKmfhR09rrf/lSSyyv2lDTkqfPDl5QqoFBB7Mqhifti
V+jik+i25jre3gYzknu11cMgr5+5WI4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:26 2026 by rpki-client