Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/95103d67-8389-3cd3-89db-7f643e7d9cd5.roa
File:                     95103d67-8389-3cd3-89db-7f643e7d9cd5.roa (raw, json)
Hash identifier:          f9ZGIoH55viOHmQM0Mqgpr8xQ+xRZMr21vz/PhKbeLY=
Subject key identifier:   F3:4C:0E:EE:72:8C:D8:B7:CA:4A:A0:31:EE:58:9E:9F:64:6E:1D:6C
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584A6C55C41415148FF729A19880
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/95103d67-8389-3cd3-89db-7f643e7d9cd5.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     203724
IP address blocks:        131.229.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:c4:14:15:14:8f:f7:29:a1:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=cc618b90-c91a-400f-b98f-97cdf9823d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:9d:21:2b:17:67:ed:67:8f:a3:5c:b5:60:
                    c2:44:42:99:53:00:da:78:5b:32:90:22:fc:a9:3f:
                    f6:61:a8:af:7b:92:90:67:c9:f4:7f:97:a4:f8:71:
                    92:26:82:ad:cf:11:f7:55:d0:71:74:c8:e7:33:6e:
                    aa:43:72:b4:98:ae:63:e5:e0:6f:e0:dc:d1:e0:1f:
                    e5:36:23:1d:db:13:6d:9f:6e:b6:49:66:0c:e6:14:
                    82:3f:ff:13:f6:94:07:a9:72:f1:bf:2f:b4:de:ca:
                    a0:35:77:a3:5c:e5:67:ce:32:81:c3:fc:fa:40:cf:
                    e7:ec:1a:72:cf:2d:cc:a7:9e:8d:3c:a2:53:c4:a4:
                    8e:86:0a:a3:b6:6a:67:6c:88:cf:09:a9:cc:a9:84:
                    09:5a:aa:a6:ed:21:36:47:65:1c:f8:88:6c:67:86:
                    3f:66:64:19:0c:33:2d:64:33:bd:cb:bd:ad:e4:c0:
                    65:5f:6c:4e:74:00:89:a3:e0:8a:b8:9a:02:b3:6d:
                    41:31:9f:ea:ff:33:87:b3:6c:13:9f:de:e5:85:79:
                    ac:ed:00:80:95:19:4b:a9:b7:ee:17:90:ae:d2:c2:
                    73:8d:2d:b2:92:0f:30:9d:83:9c:5f:54:21:b1:3e:
                    fc:fb:e5:ae:9f:87:14:69:3c:72:e1:21:ee:4f:ab:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4C:0E:EE:72:8C:D8:B7:CA:4A:A0:31:EE:58:9E:9F:64:6E:1D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/95103d67-8389-3cd3-89db-7f643e7d9cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c2:2c:d7:05:81:0c:2b:d1:b7:4d:98:1c:7f:37:89:f4:8a:
         37:33:c8:62:8a:30:fd:e2:8c:90:e4:28:8e:52:00:61:35:4b:
         06:29:f6:65:34:e7:b1:1d:67:8b:ff:fa:51:23:10:82:f7:2e:
         09:ef:48:fb:c8:ae:b4:2a:00:38:73:47:87:b2:25:f2:99:94:
         65:fe:a3:13:fe:a4:b6:c8:bb:28:c0:ff:fe:91:ca:2c:a0:04:
         7a:a2:d1:ce:ed:69:05:f5:22:f3:e3:2b:2d:43:cf:6f:11:61:
         73:ee:2d:35:02:ed:d9:53:44:5d:8c:0e:7c:5a:41:38:db:36:
         c5:4c:34:11:53:44:25:6e:c2:7e:05:d0:cc:1a:e8:24:8c:8f:
         f5:78:cd:d6:0e:ca:da:67:10:47:8c:b9:aa:cd:1a:ec:1a:78:
         e1:56:da:bb:5b:7b:5c:4f:99:49:31:c8:3b:66:0b:d1:27:22:
         32:58:d5:de:f6:eb:be:0a:d3:39:6c:44:e3:ad:f1:1e:2e:1a:
         72:f5:16:b8:34:c0:56:3b:eb:b1:51:c5:f2:be:f8:3e:f6:5f:
         de:3b:e8:a8:a1:4d:57:81:9a:1d:f6:e5:07:d2:1c:19:64:e1:
         05:64:23:c9:ad:2b:59:a0:29:81:91:09:03:b6:ea:f0:1d:b0:
         66:0f:47:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:54:09 2025 by rpki-client