Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa
File:                     d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa (raw, json)
Hash identifier:          hTwjOb4LPOGxRPhDoDUfxqCBXVWGJy/Ev2YG609gj+8=
Subject key identifier:   02:46:9C:18:A1:B9:18:8A:0A:2C:32:62:B2:62:3B:FD:68:EB:EA:79
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584BA0D24596140D0E3DDD6F3780
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     398391
IP address blocks:        131.226.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:45:96:14:0d:0e:3d:dd:6f:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=95754c95-f07f-41f6-8dc3-eb50cd2050a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:00:12:88:a8:8d:25:11:5e:90:aa:b2:f3:
                    57:52:52:b8:4b:0a:e1:0f:9f:2e:52:26:be:07:55:
                    a6:b6:dd:fb:12:ff:5f:fb:97:d5:10:14:7f:4b:00:
                    3d:d1:dc:7f:71:35:c6:f8:07:4b:b9:e8:56:d7:12:
                    19:9c:82:2a:63:36:9f:b0:4e:29:e0:fa:7a:b7:e9:
                    fe:74:63:40:89:26:e0:c2:14:bc:bd:1c:3a:d3:f3:
                    d0:f0:83:1e:53:1d:62:c9:cf:86:1f:b6:69:2c:51:
                    3d:33:de:78:31:2d:c9:3c:88:35:97:6d:1a:2b:60:
                    a2:49:86:cf:d2:4f:ac:1e:71:52:fb:30:74:df:8f:
                    5f:5b:37:de:ad:45:3b:94:6f:30:9b:72:97:09:67:
                    1c:b4:09:fd:c2:ec:b2:b9:70:74:9e:68:cc:a0:53:
                    6f:91:96:3a:e0:1c:91:e0:13:08:bd:29:03:e8:12:
                    bb:25:77:b2:07:90:56:a1:17:00:46:1b:81:3b:a8:
                    fd:c3:56:c8:39:ba:a6:6c:db:96:b5:81:13:d0:46:
                    81:12:3c:f0:68:d9:45:4d:f2:c0:52:7b:45:c6:10:
                    00:57:00:13:27:aa:fb:30:0d:f4:c2:22:64:d9:bd:
                    28:df:0e:cb:5e:96:eb:71:2e:93:70:85:c9:fd:e1:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:46:9C:18:A1:B9:18:8A:0A:2C:32:62:B2:62:3B:FD:68:EB:EA:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fb:46:14:09:11:e9:c4:0e:a2:a1:e7:5c:ad:45:6c:d5:f3:
         03:e0:38:99:23:60:f9:54:de:bb:c6:b7:fa:1b:e6:8a:48:60:
         da:80:e6:65:5d:16:a7:a1:80:02:a2:40:6f:c4:a4:04:a7:7c:
         dc:5a:84:dd:7f:a9:3f:b5:dc:b5:c9:2f:9d:6b:52:9d:84:29:
         04:1a:e3:3b:c4:bb:b6:55:b9:6a:de:b8:c6:a5:5e:89:6b:a0:
         40:02:d9:08:9f:84:75:c0:5d:6f:1f:06:45:39:f1:b1:f8:31:
         f7:42:ef:e3:f3:6c:6a:e8:ed:50:bb:20:b9:42:e4:06:d5:f4:
         80:c2:90:9e:97:fe:58:d2:d9:2c:07:50:4f:ec:e7:b8:81:73:
         59:b7:88:15:b7:94:d2:69:c9:8e:02:63:b1:c7:75:2c:92:a4:
         ce:6a:ba:3b:19:c4:54:47:43:f2:f0:d1:62:b7:89:3e:3e:62:
         88:a8:2b:bc:dd:1d:08:a2:4e:f2:9d:3c:fa:3b:c8:54:b6:c5:
         4f:1b:28:77:a7:b0:3c:00:3e:a0:e6:53:13:5c:e2:33:f9:43:
         80:bc:a4:cb:ff:c3:8d:80:c9:07:8d:0f:92:c9:93:2e:1f:01:
         14:8f:2b:0b:bd:04:84:2c:fa:42:54:05:f0:af:e8:10:ec:13:
         30:e9:78:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:37:50 2025 by rpki-client