Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/69743912-d96a-3cde-adce-182527e7f8da.roa
File:                     69743912-d96a-3cde-adce-182527e7f8da.roa (raw, json)
Hash identifier:          Ylzt844i0s5AqcvXOmvPditijBXoglyfYJ6FRRS3OzU=
Subject key identifier:   56:29:62:CC:81:6E:AD:A7:03:5C:47:5A:55:53:0B:77:47:C7:02:5A
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584BB192614CD7D1657E70BCC940
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/69743912-d96a-3cde-adce-182527e7f8da.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     203724
IP address blocks:        131.229.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:61:4c:d7:d1:65:7e:70:bc:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=282f714e-0de8-4706-9165-f16f3266947b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:86:1c:7e:a9:51:26:4f:8e:c5:f9:95:a6:0c:
                    56:87:97:7e:5c:a9:ba:f7:68:a9:f5:f0:81:25:3a:
                    27:31:74:c7:3a:a1:b1:c0:63:b2:3b:d5:25:4e:eb:
                    48:d9:db:7d:53:5f:79:46:30:a3:03:35:2b:ec:9b:
                    a8:ca:e0:02:96:df:4b:32:42:38:11:df:17:84:82:
                    7e:3c:e6:b5:c7:ae:4c:48:3f:dc:d6:26:db:7e:0d:
                    6e:c4:4e:33:8b:54:61:4f:10:e7:7d:59:8c:43:57:
                    80:37:e7:a3:26:5a:b0:a9:63:a3:35:14:29:2d:db:
                    86:4b:c7:04:e0:b9:89:b3:23:2a:65:ae:9b:62:fb:
                    56:da:d8:57:b6:e4:7e:c3:15:b3:87:cb:64:24:fc:
                    45:4e:8b:7e:18:da:38:16:c2:f8:95:96:fa:7a:97:
                    14:25:24:20:c2:18:c6:55:9b:e7:9e:6c:3f:a1:c4:
                    df:9c:70:88:4c:21:d1:93:21:be:89:b5:b6:7b:6f:
                    b7:ec:4a:50:9d:cf:92:7f:21:cb:73:46:63:c1:f9:
                    d5:4b:86:7e:74:cf:72:e7:44:74:14:d6:8e:40:ef:
                    fe:62:04:5b:88:0d:a4:e4:38:6b:5e:8b:f5:17:71:
                    9c:1e:41:0a:05:9c:93:6b:d9:d8:c4:97:00:69:cc:
                    a8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:29:62:CC:81:6E:AD:A7:03:5C:47:5A:55:53:0B:77:47:C7:02:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/69743912-d96a-3cde-adce-182527e7f8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:fe:43:87:64:27:76:28:24:bf:ae:df:bf:b7:07:da:e4:
         cd:82:d2:da:ce:d0:23:f3:57:8e:78:f2:61:a7:4a:63:5f:b6:
         a9:ca:ee:8c:e5:19:dd:8a:3f:21:e4:3a:2f:61:13:1a:6c:15:
         39:3c:09:15:d0:8d:c7:1f:a2:1e:b3:71:70:42:38:16:89:f4:
         d5:ad:c3:37:da:de:83:89:8d:a8:d0:63:db:48:09:8a:9c:ce:
         d6:ba:71:de:b4:a5:9d:ff:0b:27:03:8b:2c:ed:37:95:42:e5:
         e0:40:15:4f:6a:2e:03:ac:47:cc:30:ba:50:61:f6:2a:90:de:
         a3:59:cc:21:13:82:29:f4:68:f1:01:a1:5b:b6:9d:18:6c:9e:
         45:b4:42:d3:8d:a2:fb:ea:cf:02:f1:93:fd:c5:21:03:a5:50:
         53:a8:65:f3:90:d5:6d:45:fb:17:2a:c8:6e:26:4c:4c:9c:a7:
         41:de:50:15:f7:29:39:ee:59:76:97:2a:e7:fa:1a:8a:15:3a:
         2d:76:10:00:bd:ba:f9:74:2c:5b:f6:2f:9e:ad:8d:6f:68:df:
         95:87:5c:b4:d4:10:ff:5c:03:8f:26:ad:3a:a3:b1:04:00:0e:
         03:12:fb:eb:93:3c:b2:9c:d9:57:28:87:08:37:44:f6:9f:87:
         41:b2:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:13:52 2025 by rpki-client