Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/bc7ae3e2-f5df-3d7b-b37b-35bbeca01918.roa
File:                     bc7ae3e2-f5df-3d7b-b37b-35bbeca01918.roa (raw, json)
Hash identifier:          8KpxHOYXjsgi9Wg4cK7rM/hCGssSPsjagQ7BQuZnc6A=
Subject key identifier:   5D:FF:0B:7C:D5:E8:79:14:3A:90:DB:26:F0:1F:30:A4:FE:74:DE:C5
Certificate issuer:       /CN=0c23b672-82ba-4697-9783-b36dad570d90
Certificate serial:       010D0C9F4328584B3DB70329717DA876F1A10D80
Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/bc7ae3e2-f5df-3d7b-b37b-35bbeca01918.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     36136
IP address blocks:        131.201.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:03:29:71:7d:a8:76:f1:a1:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=7764506c-8aa4-4d11-a6bc-5ad8c643b8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:66:1f:38:db:b6:1e:92:17:a6:b7:f8:59:
                    0c:8e:04:37:40:4e:08:63:4a:de:91:01:49:91:fb:
                    fa:31:39:b6:47:a0:95:2d:83:f1:ca:de:d8:94:13:
                    8e:e7:62:eb:48:be:3e:c5:f0:6a:7a:cd:86:38:b4:
                    42:33:37:20:b7:6a:23:04:4d:e8:89:5a:8a:3c:97:
                    5a:fc:f6:57:bf:5a:51:8f:79:e7:47:09:8a:82:20:
                    d0:98:b1:c4:47:b4:d5:43:e9:0b:6f:d1:2e:10:6e:
                    f0:88:b1:c2:f2:08:07:52:d4:58:63:6d:a3:b8:c9:
                    c5:24:2a:11:ae:bb:8c:21:91:1b:75:dd:bb:84:d7:
                    7f:f3:72:2d:aa:e7:ed:fa:80:5f:7e:83:7e:d1:c1:
                    b2:c6:c5:c3:74:ce:42:ac:91:79:78:9d:03:95:dd:
                    7f:5c:c3:40:bb:0f:b0:52:5a:85:aa:af:b5:7d:c1:
                    81:f8:ce:1c:b9:32:c7:9b:94:30:ad:d3:f2:49:09:
                    15:a9:36:12:c7:ad:65:ae:69:1b:ff:6a:5e:7d:cb:
                    ef:92:8e:bf:93:6d:7f:4d:1f:62:bc:a0:79:b4:d7:
                    fe:00:aa:db:82:4c:0a:fb:39:ca:7e:9c:b4:28:7e:
                    0f:2a:cb:64:22:b5:33:50:bb:0a:07:e0:5f:2b:d1:
                    25:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FF:0B:7C:D5:E8:79:14:3A:90:DB:26:F0:1F:30:A4:FE:74:DE:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/bc7ae3e2-f5df-3d7b-b37b-35bbeca01918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl

            X509v3 Authority Key Identifier:
                keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.201.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:64:0b:87:5f:c8:a5:26:37:be:fc:18:de:4e:68:33:0e:5a:
         63:7f:4c:9a:7f:31:97:64:88:7c:47:24:e9:96:9f:52:c4:ac:
         06:86:c6:49:f9:77:55:be:72:91:10:58:a7:06:64:9b:f7:41:
         83:66:42:08:18:61:11:0a:99:37:d4:fd:e6:e2:61:6e:53:76:
         93:2d:8d:80:49:e0:59:01:49:9b:ec:f5:88:e0:0f:40:58:8c:
         a6:aa:eb:86:53:4c:ba:a4:14:3a:52:bf:69:73:95:9e:ae:62:
         58:d9:51:d1:3b:fd:f3:f0:e2:69:54:b2:73:fb:71:c8:b7:50:
         c5:ab:df:65:dd:e9:ce:63:63:2a:53:f0:d4:74:f8:65:ae:03:
         49:0f:0c:ce:f7:58:94:55:2b:fc:11:f9:6d:a5:77:4d:fa:d7:
         0f:b2:d5:34:48:e4:fb:1b:57:09:dc:c4:f2:5b:01:98:a3:fd:
         5d:ba:ba:9b:87:9e:de:8f:a6:ef:aa:71:55:9e:ea:f4:02:7c:
         be:0c:91:49:a3:1a:19:3d:33:fb:3a:b6:85:1a:61:2b:11:3c:
         5b:90:14:f2:8e:71:33:9b:ec:f0:62:bc:1a:55:39:af:81:75:
         f2:cc:a8:f0:de:c6:ff:02:65:0b:22:c2:0f:a9:a9:1f:db:0b:
         dd:47:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:40 2025 by rpki-client