Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/9b0b7248-01da-3655-80c1-81c6fac87d9e.roa
File:                     9b0b7248-01da-3655-80c1-81c6fac87d9e.roa (raw, json)
Hash identifier:          u7vCxv6w0gbE55kBQHnQubN9hcJBrVW30UJ23zuwUpg=
Subject key identifier:   66:AE:CB:6F:BB:08:28:AD:BF:9B:38:51:24:00:04:34:E5:A4:BC:87
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584B41E70AE54019F63A0E212580
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/9b0b7248-01da-3655-80c1-81c6fac87d9e.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     398391
IP address blocks:        131.226.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:0a:e5:40:19:f6:3a:0e:21:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=f366499c-6ccf-4076-88cb-aff02d6be84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c7:7c:f7:5c:57:8b:43:49:f7:bd:8b:b8:88:
                    ba:23:f2:c3:0e:4b:51:a3:4e:a5:4b:83:6e:85:96:
                    40:9f:3b:b5:a7:1e:0c:37:d0:ce:36:d3:e2:b8:35:
                    43:3f:aa:83:83:26:22:89:76:45:4b:ff:a5:ac:a2:
                    03:5d:af:a9:8a:df:92:2c:96:7b:8b:2e:45:c1:35:
                    72:71:3a:f4:2b:76:8c:29:3f:e4:26:05:e2:52:54:
                    2c:0e:9f:69:c1:c2:db:c7:d6:6e:aa:0a:a8:36:62:
                    92:ed:dd:5c:12:05:44:a5:67:22:09:91:e4:61:40:
                    fb:06:5a:e4:9e:c4:54:f3:32:d2:a8:77:2a:ed:f7:
                    3c:24:56:92:f7:34:77:96:f4:43:e1:e6:4f:cf:d3:
                    bb:fc:2c:45:fa:f7:4a:9b:21:b3:f1:3a:a8:64:3b:
                    9c:f9:e9:e5:cd:98:47:33:db:5f:04:74:d6:c8:41:
                    79:2e:b8:cf:96:4d:5f:d8:f4:c6:83:5c:98:90:16:
                    8d:d2:ba:22:e9:c2:0f:57:9c:1f:1a:ee:b6:5e:cf:
                    c0:ce:1e:9b:0d:3f:23:53:34:6a:2a:8a:84:1d:c6:
                    95:50:cf:23:e4:fe:58:d8:26:a9:7e:3a:11:48:f8:
                    b0:3d:40:4e:3d:52:aa:57:59:46:5f:ef:62:9e:8e:
                    cf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AE:CB:6F:BB:08:28:AD:BF:9B:38:51:24:00:04:34:E5:A4:BC:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/9b0b7248-01da-3655-80c1-81c6fac87d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:12:20:d9:2d:b0:bb:78:00:8d:ec:3c:36:fd:d5:bb:0f:ca:
         0b:27:60:d5:ff:8c:68:1d:a2:75:cb:e3:b5:01:ef:89:6d:f1:
         d7:2f:ba:6c:34:f2:40:82:bd:a4:04:4f:7d:97:f5:c4:f0:44:
         0f:fe:5f:41:f3:b8:72:e0:7e:33:fa:77:2b:00:c7:0f:ea:e8:
         28:c0:4f:3f:ac:d5:57:6d:30:f2:1f:30:84:8a:76:3e:89:32:
         cd:9f:17:28:78:e8:b3:44:37:e2:9d:a9:d0:86:29:15:74:fc:
         9f:2f:4d:70:6c:7b:49:1b:b4:ef:43:6b:5e:ff:ea:1f:d0:7b:
         37:48:5c:ef:91:5b:86:35:13:ad:d6:ee:68:0e:72:66:80:67:
         40:6f:26:77:7b:08:49:77:2d:86:64:f5:ea:b8:a9:aa:52:79:
         8a:5e:db:74:a8:0e:7d:b9:07:03:e1:d4:c6:32:44:6d:e0:54:
         d3:3a:e7:31:4a:95:ad:a8:89:d4:71:a4:da:ca:93:ff:61:e4:
         ab:ce:df:29:de:6d:18:34:f5:30:eb:82:16:16:0b:e2:35:58:
         de:22:cf:51:bf:c4:b9:15:60:66:ab:59:fb:fd:0a:6d:50:72:
         e4:10:ed:14:4e:6b:6c:47:24:ca:e1:61:64:15:dd:9f:aa:ec:
         60:4e:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:23 2025 by rpki-client