Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c0ec376d-a696-318e-a407-4004b56f2028.roa
File:                     c0ec376d-a696-318e-a407-4004b56f2028.roa (raw, json)
Hash identifier:          mr43PDDnhQ0zUE7sEz6/Xz3gqcJFAI4oSr62GZZjIiU=
Subject key identifier:   5D:7F:BB:54:AE:E2:14:DE:97:00:50:76:A3:FC:75:A2:B3:DC:0A:10
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584BB02CF9E10ACED5C8DEC79F00
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c0ec376d-a696-318e-a407-4004b56f2028.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     203724
IP address blocks:        131.229.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2c:f9:e1:0a:ce:d5:c8:de:c7:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=6f4fc0cb-989e-49ab-80cc-9ba534469419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0a:1a:df:a3:75:8b:b9:0b:52:2e:34:63:8f:
                    15:be:0e:4a:51:a0:a7:df:0d:12:9d:ac:c4:59:a5:
                    16:bb:7e:f1:2a:7f:08:54:8d:ab:88:7c:b2:eb:8b:
                    9d:84:d3:09:70:f1:b9:f4:3f:47:c8:9f:ff:2d:90:
                    c7:02:22:8a:09:05:e5:ec:33:53:81:4b:e4:a9:4a:
                    57:3c:b5:db:ee:79:9d:d7:53:bc:da:99:9a:bd:18:
                    98:ba:c8:28:e3:0c:82:86:0e:8b:d1:6a:33:01:30:
                    51:8f:03:e3:8c:e3:e1:12:50:8a:37:43:af:15:01:
                    d3:1d:07:1a:ab:46:ae:d6:f0:dd:b5:34:8e:c5:7d:
                    5c:81:29:c3:2a:56:a4:9c:21:fc:11:81:9b:2f:d9:
                    fb:03:1d:f6:08:b3:c2:69:9b:b7:cb:9c:cc:48:b6:
                    9c:fa:5f:e5:79:74:de:3a:97:8d:44:df:42:fc:a3:
                    e3:4f:ce:88:c6:5f:22:22:30:5c:bb:f6:02:b8:72:
                    b6:2c:9b:98:bf:be:7c:a2:4d:e9:14:27:9f:6d:37:
                    91:d5:3d:dc:f4:ca:8c:d8:de:d4:83:0b:5f:27:29:
                    15:cf:17:78:a5:16:29:52:33:19:05:c5:14:e0:bf:
                    8c:07:97:83:c9:3e:f0:30:51:85:d9:fb:a1:f9:0b:
                    f4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7F:BB:54:AE:E2:14:DE:97:00:50:76:A3:FC:75:A2:B3:DC:0A:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c0ec376d-a696-318e-a407-4004b56f2028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:63:28:18:ce:01:01:97:3e:c9:f4:45:d0:bb:97:1b:d2:8a:
         38:dd:c6:fd:7b:13:5d:6d:5f:fb:c6:b5:48:84:47:ce:44:51:
         20:4e:41:92:f3:92:b4:42:b8:30:b1:b3:02:f4:c7:e7:8c:19:
         e8:84:55:90:f5:d7:4a:47:a7:57:2b:6b:a1:10:7d:8f:c2:2b:
         ee:f8:d1:af:50:35:19:c3:30:eb:e9:7f:17:1b:37:02:4a:11:
         74:05:d3:5f:87:fd:46:8a:bf:76:eb:e3:45:c2:97:5b:05:31:
         d2:cd:65:73:f9:40:20:06:de:a8:e7:84:39:8b:57:ac:e5:5e:
         3a:52:65:63:19:55:0f:c8:7b:c5:f9:0d:c8:c0:e6:ea:7b:30:
         ef:a0:2e:60:1c:90:5e:3e:88:4a:c5:b8:aa:ce:27:fe:54:be:
         e8:fa:fa:72:da:cc:a8:3c:1c:c8:19:84:9a:70:e2:e2:70:66:
         51:3f:00:00:a8:eb:ca:c2:b9:82:a4:78:ee:d3:4b:4c:d0:f6:
         de:ee:29:00:3a:4d:ec:64:82:12:b5:61:0b:7c:f3:62:1b:d7:
         bb:e9:e7:b6:66:bc:6a:09:39:ee:37:39:2e:c4:86:4d:dd:f0:
         4f:cd:fc:05:0c:11:d9:ee:e1:44:94:d9:90:e4:7a:7e:c2:f0:
         38:fd:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:39:25 2025 by rpki-client