Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa
File:                     d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa (raw, json)
Hash identifier:          FSIVaV7eqK6wf1ou1chs4PIAQelthfAWkS/1RsLuQ/Y=
Subject key identifier:   0C:40:9F:7E:90:BB:9B:BA:D9:82:FD:D2:01:97:6F:0D:52:96:76:C0
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584AC01626EDBBD5E0FCC5415E74
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     398391
IP address blocks:        131.226.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:26:ed:bb:d5:e0:fc:c5:41:5e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=968edbd9-0859-47d9-a2c0-b4290dcd30bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:65:21:91:0e:c9:c1:42:33:c6:0d:1a:04:ce:
                    87:a0:ec:74:7d:ea:66:63:2f:5b:8d:65:bf:f1:ae:
                    0c:3c:e0:0e:b9:cd:8e:a2:63:a2:ff:84:00:ad:d3:
                    54:ad:03:4d:4b:12:96:04:bc:ae:c1:48:fa:fb:c0:
                    a4:93:86:f6:51:ee:37:4b:b5:ef:00:fe:3a:26:f4:
                    c4:43:f1:bd:0f:10:a1:2c:10:af:c2:47:83:72:da:
                    e6:71:bb:6d:39:18:8c:b8:66:f1:a3:e8:52:ce:35:
                    72:bc:84:c3:ed:c9:ed:c8:7f:ab:49:b2:df:f7:41:
                    36:bb:ea:57:ad:4c:db:bd:36:af:a9:c6:0d:31:be:
                    40:bb:40:fc:f6:12:54:f2:3f:4c:1d:3f:29:67:57:
                    be:00:e2:aa:1c:8e:a5:a2:13:4b:ff:fa:85:04:01:
                    56:d6:4d:22:cc:75:12:4b:5e:49:91:fd:17:ca:f8:
                    ec:08:f0:04:d0:aa:d8:2e:b1:bc:46:b2:dc:9d:02:
                    81:d5:74:88:a2:df:ac:de:1f:b5:db:73:9c:c0:a6:
                    41:4f:86:de:17:56:5f:8c:c0:34:88:73:0c:a5:e5:
                    0f:14:e5:e4:87:5d:d5:4a:0d:97:5c:e6:15:c7:14:
                    5b:2b:6c:47:eb:58:1a:b3:ad:e3:71:40:d7:c5:5b:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:40:9F:7E:90:BB:9B:BA:D9:82:FD:D2:01:97:6F:0D:52:96:76:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/d4a3ee80-454b-3dac-89eb-2ef8923e1c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:24:f3:aa:9c:22:07:e1:b3:1a:30:19:e3:6c:29:99:18:4f:
         cd:03:f8:a2:1b:8f:0c:84:91:de:3d:44:6d:dc:19:29:10:b9:
         35:41:b6:9a:f8:d4:05:c0:d6:dc:2a:20:94:1b:b2:c9:18:3e:
         3e:ca:10:c9:4a:10:2f:f7:94:a9:1e:d5:eb:72:37:8d:b6:5c:
         6a:d2:58:b4:cc:34:ba:d3:3f:f9:c2:b0:09:74:95:f5:73:8d:
         79:45:15:3a:2f:55:f1:bf:59:36:04:53:6e:b1:19:32:ef:bb:
         da:14:3d:1d:fe:7a:32:b7:1d:49:6a:65:70:14:fc:c8:d4:6d:
         f8:ba:f2:56:e3:cf:1c:0b:df:ae:82:43:0a:c1:0d:b0:56:36:
         08:16:b7:46:96:32:ed:c4:ca:31:d4:fe:ff:ad:b8:e9:f2:bf:
         4f:af:fd:9d:70:88:c7:ab:fb:a4:d5:27:61:74:00:b1:4a:92:
         f7:e0:12:3f:3d:db:04:1b:1b:d1:34:78:0f:e3:4a:ca:19:eb:
         29:32:74:30:b6:b0:05:3a:9c:58:40:6c:63:9b:b1:be:12:aa:
         8d:76:16:d1:2e:8b:f7:49:4b:c4:e9:7f:02:1d:14:c7:71:ef:
         1c:84:42:b9:40:eb:45:9b:e9:de:5f:cd:33:01:d2:43:24:91:
         9d:a6:b1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:20 2025 by rpki-client