Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/471e492f-b6e9-3e87-86d8-fe8e4d8cb600.roa
File:                     471e492f-b6e9-3e87-86d8-fe8e4d8cb600.roa (raw, json)
Hash identifier:          l06EJsGAS+xFj5yyMrEknRxK5lDGrrEj7Oku/vlAtTY=
Subject key identifier:   06:63:9F:8E:1B:F1:56:4A:ED:67:C2:2C:91:8D:A6:DD:BF:D6:69:EE
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584F4974179CBDD874E12E5DF9A0
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/471e492f-b6e9-3e87-86d8-fe8e4d8cb600.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        131.229.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:17:9c:bd:d8:74:e1:2e:5d:f9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=12410121-e89f-4070-a934-5c20cad6274c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ff:86:2a:3b:f9:f7:6d:b8:bc:27:9e:83:c8:
                    35:54:d6:1e:be:b5:b6:59:20:3d:75:ac:93:56:71:
                    77:8a:cb:d4:97:a2:89:fd:fb:94:27:34:e9:76:19:
                    40:42:68:1f:a7:66:94:33:cc:bb:d7:60:2a:dc:8d:
                    0c:7b:bc:76:9c:45:6a:3d:9e:14:98:11:44:0a:16:
                    d7:d7:09:21:40:72:33:af:aa:15:7a:20:e0:fe:91:
                    67:3a:14:93:e0:89:0e:c3:7e:bc:3f:63:25:e4:86:
                    6c:31:16:e7:c3:07:a3:1a:0d:4d:ab:1b:cb:28:35:
                    4d:7a:d6:19:05:55:17:b4:28:2e:3c:84:0a:b9:71:
                    36:59:51:a8:72:09:ce:2b:90:4f:3e:1a:4e:e5:ef:
                    65:a0:66:b5:c7:6e:70:f7:bd:a8:24:c3:7b:81:7e:
                    02:6e:29:d8:af:b9:86:dd:04:ed:12:60:fd:06:c4:
                    8d:85:4d:51:74:3c:13:25:38:54:ed:07:53:85:60:
                    d0:b5:89:91:b9:58:e0:d7:bc:e1:ce:cb:42:93:a4:
                    6b:e6:8f:d1:20:6e:17:80:d8:59:4f:e1:91:fa:f3:
                    a1:8e:43:de:9e:d2:8c:e9:43:03:68:d5:ad:da:bf:
                    af:3c:91:0d:0b:ed:a3:eb:e9:b5:6f:48:8c:d2:0a:
                    2f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:63:9F:8E:1B:F1:56:4A:ED:67:C2:2C:91:8D:A6:DD:BF:D6:69:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/471e492f-b6e9-3e87-86d8-fe8e4d8cb600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:5a:2e:01:32:bb:9b:26:c0:f2:92:d8:7b:0d:34:93:9b:
         a5:e4:2f:e3:0e:78:1d:79:bc:5c:ec:76:86:8e:4d:26:ea:bd:
         3f:f0:0b:fc:8d:1e:25:11:d5:c2:3e:d5:ec:0e:28:7a:35:5d:
         ff:70:66:d8:c3:c6:54:96:7a:f4:e0:eb:d2:63:bc:18:56:3d:
         74:5e:68:56:e4:53:fd:14:a3:25:5d:1d:ca:18:7f:88:b1:71:
         d3:2c:58:f0:6f:4f:76:89:37:1d:c1:9f:6b:b2:85:5f:3c:0e:
         f2:fb:cb:e7:5f:b7:10:b0:7e:96:72:4d:85:87:82:4d:8e:fa:
         7b:f4:ec:4b:d4:ca:db:8d:12:75:f5:14:0c:51:b6:72:27:f4:
         08:5c:19:ad:57:6a:09:2f:d1:30:0a:69:33:8c:f8:96:19:1b:
         fb:4a:03:3b:4d:45:f4:b3:a0:bc:2a:5c:39:36:b9:12:04:55:
         69:67:60:25:27:d4:e2:bc:49:a9:43:d9:0c:91:89:26:7b:ff:
         1f:93:7f:e7:3e:72:0c:df:1b:1a:6a:bc:3e:e6:1c:e2:98:b2:
         3a:98:20:a3:93:d3:95:5e:d0:62:e5:ae:b0:45:19:78:b7:91:
         a1:0f:e8:09:ef:5f:36:e6:5e:f7:d2:09:46:8a:e8:7a:ef:61:
         31:6a:e7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:04:40 2026 by rpki-client