Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/8e16760f-f7b2-3cfc-a9a5-4edddb1294ea.roa
File:                     8e16760f-f7b2-3cfc-a9a5-4edddb1294ea.roa (raw, json)
Hash identifier:          9SbeoA0TfDzWw98+3BflSeQ5uKbF2NYnBUGVmoFZyL8=
Subject key identifier:   A9:76:2B:90:B3:F8:4C:22:BA:19:5C:D8:AA:3B:5B:60:CD:54:C0:DB
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584B7B21F4B121D2B81E11DA3CC0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/8e16760f-f7b2-3cfc-a9a5-4edddb1294ea.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     398391
IP address blocks:        131.226.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f4:b1:21:d2:b8:1e:11:da:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=05b02bf3-ca6c-4ebc-b851-be42fdb68d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7c:e5:b4:9b:b2:24:4c:39:28:1d:71:a9:9a:
                    62:58:11:79:26:68:a6:90:80:26:8b:6b:12:64:04:
                    0f:6d:c3:c8:7d:2a:a8:e7:26:6e:8a:79:27:14:31:
                    91:80:10:c3:4e:38:21:2a:8f:62:01:55:29:52:c7:
                    8d:f8:53:b2:b7:32:4a:6b:42:94:94:03:e1:29:0f:
                    3e:44:d9:6e:6c:bd:86:0a:e5:7e:6d:39:aa:f9:af:
                    c4:ca:67:4e:25:d4:ab:60:77:88:ff:19:5e:c3:8d:
                    d5:7d:7c:af:cd:2e:3d:5c:fd:5a:be:a4:5d:aa:05:
                    0d:f6:c0:fd:3c:7a:de:87:b4:66:d3:19:82:41:53:
                    3f:bb:a4:bb:fc:3e:58:13:97:7f:c7:5e:77:8a:0e:
                    ed:0a:8a:73:29:9c:fe:63:d9:9e:30:aa:60:70:3c:
                    9f:3e:8f:a9:f8:85:fc:36:12:21:d5:27:fd:5d:3e:
                    96:46:20:5f:fa:a2:0d:cc:c5:52:9c:c3:4a:4e:fa:
                    4b:c8:43:c7:8e:e5:a9:18:6d:7c:4d:a5:98:1a:53:
                    c1:f6:83:7b:ae:d8:bf:cb:4b:f2:71:75:87:d5:4a:
                    ef:20:83:f0:45:b6:09:71:2d:26:c4:95:74:34:1a:
                    3d:d6:e6:94:da:97:d3:4d:ce:5b:1f:b9:8e:bd:dc:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:76:2B:90:B3:F8:4C:22:BA:19:5C:D8:AA:3B:5B:60:CD:54:C0:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/8e16760f-f7b2-3cfc-a9a5-4edddb1294ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:9d:32:82:27:bd:2e:4a:ea:7e:39:1f:95:ac:7a:73:1e:
         e6:1d:3f:2c:ac:8f:d8:31:9f:8d:67:4e:df:28:c0:a3:4f:3b:
         79:af:06:67:fa:d9:3c:6d:3b:a6:d8:a0:22:31:88:4d:d0:65:
         eb:32:55:f9:75:67:c0:05:d4:ef:aa:ba:08:ca:c2:b0:f4:f7:
         c9:ff:02:56:7e:77:70:2c:79:b9:7a:e9:d2:15:fd:07:9f:f0:
         64:91:b2:41:55:a6:eb:01:42:31:20:12:63:b6:c6:ae:22:59:
         f6:03:1f:ac:f6:27:31:9f:e1:9d:e1:7b:4c:c7:78:80:80:52:
         6e:4b:38:93:40:f1:2f:29:6c:99:39:d7:c0:c0:bc:ac:76:98:
         5a:a7:e0:94:ce:c4:21:1b:b3:5d:fd:4d:58:31:24:62:d5:99:
         5b:a3:72:93:35:d8:91:fc:4f:0f:61:a1:26:1d:de:2a:b6:49:
         6f:51:b2:20:08:9c:7b:8c:aa:c1:26:2f:3d:83:73:1c:21:e3:
         04:2b:1b:d0:a4:25:9e:f7:aa:45:02:c1:ef:e2:e9:8f:69:2a:
         7b:6e:3a:ce:44:8b:d8:24:c7:6a:38:0e:87:7e:48:b6:76:be:
         91:3d:d0:e6:5c:5e:c2:14:76:40:e2:a4:2a:e0:f7:59:b6:bd:
         21:9f:60:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:20:20 2025 by rpki-client