Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/8e16760f-f7b2-3cfc-a9a5-4edddb1294ea.roa
File:                     8e16760f-f7b2-3cfc-a9a5-4edddb1294ea.roa (raw, json)
Hash identifier:          y4r8jYGOFUExBk0ulAVjq+au05Z7qVkas+uXd4OxHBE=
Subject key identifier:   47:A7:F5:80:6D:62:4A:5F:71:DF:09:F3:D6:9D:52:01:E9:1F:71:70
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584D39CF815A5876CEA9A85078E0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/8e16760f-f7b2-3cfc-a9a5-4edddb1294ea.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     398391
IP address blocks:        131.226.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:81:5a:58:76:ce:a9:a8:50:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=acb3956b-cbdc-498e-b262-92613ac08a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:f4:66:07:06:d4:d3:34:ea:53:74:aa:2d:
                    98:e5:0b:10:64:af:29:84:1a:63:9a:41:1b:b6:13:
                    fc:e8:76:56:54:17:9c:03:83:4a:9b:16:f7:bf:41:
                    12:91:da:f3:5b:5e:25:4a:d7:18:f7:4e:53:b1:f5:
                    66:87:4a:b1:0d:42:f4:7e:23:8d:ed:98:ce:85:ea:
                    c5:88:ef:d0:19:03:3e:79:de:ab:50:4a:93:2b:ed:
                    31:56:f5:db:56:3a:c9:40:de:ed:99:51:1c:82:da:
                    59:7a:e2:26:c9:6f:4e:1f:55:f3:ac:7d:a8:10:15:
                    09:4e:34:48:ca:75:1b:7e:b2:c4:f8:92:d5:aa:22:
                    90:83:ce:e2:cb:d2:50:ed:00:e0:f5:ab:47:11:dd:
                    b8:b1:18:14:d1:90:f8:96:60:cb:60:1e:fa:b7:c4:
                    e0:62:3a:ec:31:de:c0:ac:40:b5:61:14:15:ac:af:
                    07:4e:ed:62:79:1b:90:31:8d:b1:3e:df:6e:e2:e3:
                    e1:69:24:22:04:ff:b6:ed:d4:fa:80:2d:e6:9c:bb:
                    32:cb:af:61:c7:6e:42:fc:29:fd:2b:e2:df:b1:ed:
                    bc:b6:23:ef:7c:78:72:a4:0b:4b:20:2d:6e:c6:5a:
                    11:05:f0:8d:8e:ac:43:61:f9:94:af:92:2e:e0:7e:
                    89:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A7:F5:80:6D:62:4A:5F:71:DF:09:F3:D6:9D:52:01:E9:1F:71:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/8e16760f-f7b2-3cfc-a9a5-4edddb1294ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e0:a0:f9:31:1f:4b:97:29:bc:e1:d4:b0:82:8f:df:b2:fa:
         86:6c:ee:b6:87:e3:28:c6:b6:1f:03:d8:3d:f9:5a:4b:9c:9a:
         fe:3d:a7:a9:0a:02:a9:d5:94:36:8d:54:60:2c:a2:3e:39:41:
         50:e3:92:a3:97:b9:4b:21:04:c9:38:2c:59:e5:9c:7b:7e:5a:
         30:a6:f7:c5:01:91:02:49:61:94:cb:51:ae:30:db:47:be:9a:
         b2:52:64:d2:02:74:e4:5e:ca:27:20:bc:48:99:db:1a:4a:9c:
         07:73:7c:25:87:6b:85:f4:18:f3:d5:8d:d0:80:da:2b:05:da:
         a0:73:38:fa:e3:36:b1:6a:64:79:93:3f:86:0d:4b:d1:0c:eb:
         68:e9:96:eb:8b:c6:32:a8:3a:31:d3:03:38:77:a7:fb:66:3d:
         85:60:8d:09:f5:ff:9b:04:73:34:85:ed:d4:93:aa:7b:d7:d2:
         fb:3c:17:cb:21:3e:e5:33:55:5b:e9:3f:2a:e4:c5:0e:ec:f7:
         41:1a:28:4a:01:13:d3:98:24:b8:6a:cc:ff:97:b1:ec:b7:cd:
         1c:77:d5:1a:1d:a7:e7:89:78:7b:d5:15:7b:c7:b0:30:ae:0a:
         ad:a0:7b:a9:28:6d:b9:57:5f:dd:c7:10:2e:03:84:75:05:5b:
         be:3d:80:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:36:59 2026 by rpki-client