Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/fd9a9ee4-01ea-3f50-832c-bfbf45364881.roa
File:                     fd9a9ee4-01ea-3f50-832c-bfbf45364881.roa (raw, json)
Hash identifier:          pJwMv990M/u8wrqfCVnnAGfxb60lFfOi38Zj5KKVYyw=
Subject key identifier:   98:4A:14:F3:04:73:CA:81:E6:FD:3F:C5:57:8A:10:20:6C:B0:35:0A
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584A331ADF270734C0B80B0A9780
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/fd9a9ee4-01ea-3f50-832c-bfbf45364881.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     398391
IP address blocks:        131.226.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:df:27:07:34:c0:b8:0b:0a:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=bed63a98-1c26-4933-8a24-f66084da25e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:bd:10:d2:ed:32:ce:e2:9d:f4:9e:77:c0:
                    27:d0:d0:ba:42:b8:ec:63:f4:ef:fc:83:c9:98:35:
                    8b:c7:e1:b6:98:5d:43:42:1b:d3:6c:72:dd:e5:f7:
                    7e:89:a1:09:24:a7:cc:45:ce:8b:da:04:e1:69:1d:
                    b1:a8:47:03:5e:31:b3:06:a1:8e:d3:4d:5b:7e:2c:
                    85:6b:4b:35:ae:7c:bc:d4:c6:b8:61:0c:1c:be:15:
                    e0:f5:8c:4d:cd:05:32:ed:be:3a:ef:66:93:c7:1b:
                    f2:7c:ab:99:9b:14:61:ce:09:a4:bc:24:d0:15:30:
                    ee:49:db:79:10:26:32:f0:61:a6:9c:cf:53:49:9b:
                    87:69:27:c4:17:5b:f7:a6:75:94:b9:84:44:d8:41:
                    d4:60:05:f9:38:4b:40:0e:42:38:65:08:b9:cb:00:
                    9f:db:cc:9c:a5:0a:4f:34:81:6d:73:6c:12:95:6c:
                    5d:0a:3e:0c:6f:44:a1:d3:9c:96:33:53:e4:47:ee:
                    f1:72:f6:4f:ca:0d:85:9f:a9:dc:89:b8:20:73:29:
                    7a:4d:dc:ed:bc:2e:d4:02:36:0a:28:d0:2c:e0:d7:
                    84:4f:fd:3f:d6:68:35:24:0f:f8:1f:a4:cb:0d:2b:
                    40:c4:00:e8:94:b0:6d:23:6b:77:ee:ab:21:53:cb:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4A:14:F3:04:73:CA:81:E6:FD:3F:C5:57:8A:10:20:6C:B0:35:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/fd9a9ee4-01ea-3f50-832c-bfbf45364881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b1:c6:9a:fa:04:29:da:7e:8a:04:f5:55:a6:2a:40:cd:e1:
         84:eb:38:60:2b:c5:3b:0a:e3:29:80:48:a1:d4:34:28:ca:8c:
         d9:cd:28:ff:7f:5d:91:d6:2e:83:96:6a:ac:f2:73:e0:6e:74:
         94:87:57:2e:6a:3b:bf:d8:0b:73:4a:81:cb:20:1a:f2:1c:38:
         19:e9:c1:81:32:3f:09:47:72:09:9f:48:25:82:80:35:fd:4b:
         7d:82:0f:c9:22:76:ab:9e:f5:ca:52:95:a6:c3:ab:da:bf:18:
         17:56:5e:7e:a0:db:d6:e5:93:5c:bd:5c:2e:e2:f9:c2:94:81:
         80:12:0f:7f:b1:98:3f:2e:d8:2e:6b:40:28:ad:ab:31:ff:90:
         18:67:55:00:39:7a:06:4c:10:d6:ad:cc:00:70:4b:f0:c5:a6:
         44:57:26:29:12:7d:9b:87:22:fe:04:af:8b:7b:e7:08:7e:14:
         d4:d6:d6:f9:d8:74:30:d4:47:e4:6c:74:b0:f8:f1:f9:04:91:
         55:fc:d0:96:5b:96:96:4c:a5:b0:b5:03:0a:9f:08:d4:5a:6a:
         14:87:3d:f7:56:18:99:af:3a:17:84:cc:80:dc:d4:3e:69:c5:
         cc:c6:bb:a7:b3:cf:a2:bf:fe:01:c9:5a:1c:28:39:db:7e:0f:
         09:bf:34:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:06:54 2025 by rpki-client