Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9b8f0aef-b4b1-3f32-8480-62e5a5906b18.roa
File:                     9b8f0aef-b4b1-3f32-8480-62e5a5906b18.roa (raw, json)
Hash identifier:          2hwBNTlCVHiIHKWh9aKrOnJYBKxdQ3S8KEZjzzsCLos=
Subject key identifier:   14:BA:18:B3:77:3C:67:CB:7E:4D:40:2B:89:E4:AA:2A:64:24:17:E1
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584A6C55C5CCCBC28D0121C2A080
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9b8f0aef-b4b1-3f32-8480-62e5a5906b18.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     31898
IP address blocks:        131.229.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:c5:cc:cb:c2:8d:01:21:c2:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=ed326d4b-419f-4ba7-9ebe-fc5a426c902b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e2:28:7d:f0:1b:d3:1a:a3:3a:08:a2:05:e7:
                    f2:86:1e:97:da:1f:00:4d:60:d6:88:72:50:dd:4b:
                    94:52:3e:63:a9:35:2e:1c:59:5d:e6:fc:7c:13:a3:
                    2e:28:f7:46:85:a5:c5:d8:99:45:5f:94:6f:44:d6:
                    7f:31:eb:42:10:39:53:90:b0:31:ad:90:a4:1f:c8:
                    c5:64:16:2c:54:e6:70:78:96:78:a7:2e:6e:7d:b1:
                    fd:96:96:88:26:b9:e8:7f:cf:00:65:f1:ab:86:d0:
                    8b:f3:ac:3a:33:68:04:b6:32:6c:71:d7:14:ad:a3:
                    43:5d:a7:50:81:76:8d:77:04:d4:96:56:1d:e9:80:
                    bb:57:a5:31:e2:87:d7:b3:62:a8:63:e2:6d:58:60:
                    5d:4b:f9:42:ff:6d:5b:d6:73:3a:48:5a:e5:7b:8a:
                    7f:71:a3:9c:5d:87:4f:af:8a:52:2d:c4:bb:8c:a0:
                    a6:05:d6:2f:08:2b:08:01:da:a1:6d:96:f1:28:a2:
                    23:6c:fc:38:1e:c4:65:41:76:1f:9e:d7:3f:0a:cd:
                    35:3f:b4:ff:6d:c4:ab:26:ab:24:92:eb:a1:f9:6f:
                    fd:b1:26:56:e8:ff:c4:b2:d0:ea:12:80:e6:cf:46:
                    78:f8:8e:37:11:e0:42:90:e8:02:10:23:43:81:89:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BA:18:B3:77:3C:67:CB:7E:4D:40:2B:89:E4:AA:2A:64:24:17:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9b8f0aef-b4b1-3f32-8480-62e5a5906b18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:56:db:e2:d2:99:3b:7a:e4:31:0b:a4:2f:09:77:d8:23:d5:
         49:18:b3:7a:73:d5:cb:7b:22:9f:0d:d9:8a:de:f7:97:e3:19:
         9a:01:c8:cc:ed:78:42:a3:f2:c3:66:f0:b6:71:03:fd:45:08:
         8d:12:25:4b:ad:2c:84:26:de:16:d6:66:06:98:b7:9a:c7:d7:
         d6:04:8e:fe:c2:d4:b7:5d:26:d4:45:9d:54:0d:6e:ec:cf:58:
         55:33:eb:61:3f:cc:56:3c:cd:a5:7f:15:68:e0:70:fd:ae:3a:
         46:89:a5:3c:dd:61:d4:8e:42:92:2e:e5:29:fd:89:2d:58:29:
         b1:90:42:18:cb:2b:45:14:5e:13:b6:ca:95:76:eb:87:e3:ef:
         25:e9:af:37:39:5a:d8:25:fc:f9:ba:38:8a:77:22:d8:a0:6b:
         60:d6:a2:3c:93:43:e1:88:8c:61:ee:83:ee:83:2f:31:60:00:
         4c:6c:f7:37:e1:c9:fb:4c:db:30:a8:91:c6:a1:eb:aa:af:3c:
         fb:ed:59:09:6d:a6:1e:e3:79:7a:59:86:53:28:ab:93:bd:fc:
         83:f8:a4:dc:5e:de:b7:5b:d9:ad:68:b9:60:a0:d7:de:36:c5:
         07:1e:36:e1:02:da:0f:45:de:6f:84:7f:43:c4:14:ee:1b:b1:
         32:81:1e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:42:22 2025 by rpki-client