Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/6af3f881-5d74-3463-af0c-b3c49d4a0575.roa
File:                     6af3f881-5d74-3463-af0c-b3c49d4a0575.roa (raw, json)
Hash identifier:          9uaGiolu8kKwfEBXYiM+1MJGsiBHgRc5xRmuS8jtcNQ=
Subject key identifier:   04:A0:35:F2:35:F7:97:69:20:C5:FF:09:E9:25:18:1B:01:76:14:A1
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584E9A7FE211224D0132D4E1CF00
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/6af3f881-5d74-3463-af0c-b3c49d4a0575.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        131.229.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:e2:11:22:4d:01:32:d4:e1:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=1fc3dfdc-2a83-4cce-b526-716af79af065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:d3:cc:ca:14:6b:fa:3f:0d:84:fb:f2:69:
                    fe:91:3d:1d:9f:a9:74:9f:19:a2:83:2d:e2:c2:7b:
                    91:68:a7:ba:de:47:22:18:c3:fa:23:5e:49:f4:7e:
                    68:ad:c0:73:20:47:f5:70:de:5e:18:00:4c:33:33:
                    13:d5:a2:43:bd:ca:9e:bb:59:ed:50:f2:46:f5:24:
                    95:a8:f3:6a:ad:c4:37:10:0b:fe:2c:27:93:15:7d:
                    a3:9c:13:b0:fb:19:a7:fa:5d:78:a2:c3:f6:b2:9a:
                    50:d3:7a:1c:43:81:f1:a0:dd:6d:b8:af:33:ec:35:
                    ac:41:93:12:45:36:46:2b:b0:c8:a1:75:f3:d0:4f:
                    7e:6c:aa:c7:19:29:df:07:09:03:11:b5:ea:4f:5b:
                    9e:f8:a3:dc:26:90:04:16:b7:92:a1:cd:4c:07:0e:
                    9b:ba:95:96:31:2a:ee:c3:75:f6:66:8c:27:cb:38:
                    02:7a:e3:17:fe:1d:b2:70:0b:6d:7d:ff:e6:8f:20:
                    54:0a:a0:f8:d6:48:9e:3f:8a:0e:4c:a4:03:62:a4:
                    2e:1f:c4:04:9f:9b:f8:65:ec:08:b1:4d:3c:a1:c9:
                    19:c2:53:53:ba:67:e4:07:c7:c1:d8:51:36:27:17:
                    f6:7e:2c:87:bc:16:5c:cb:15:3d:3c:74:73:fa:70:
                    ba:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A0:35:F2:35:F7:97:69:20:C5:FF:09:E9:25:18:1B:01:76:14:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/6af3f881-5d74-3463-af0c-b3c49d4a0575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:d7:5d:90:16:46:8d:13:ea:2c:5d:8b:38:f2:95:aa:66:
         87:45:ac:52:42:f9:d2:da:be:6f:dd:ca:43:a3:69:fb:81:96:
         a8:1c:a0:09:10:f1:0f:f7:ba:17:75:6f:43:3a:23:51:21:d5:
         d8:a3:53:2c:87:f9:7d:85:2f:f7:3b:c5:de:34:de:f6:bd:14:
         96:3c:35:4d:5d:0c:44:ce:74:2a:ec:05:46:59:27:2f:6e:b5:
         3a:0a:15:43:1f:63:8b:6a:c8:e5:1f:b0:aa:d9:c5:98:90:b9:
         71:73:17:74:d7:02:8c:26:93:58:c2:98:a8:3a:c5:a4:69:33:
         bd:2d:18:7e:e1:8f:fe:5e:8a:e5:6e:98:e5:dc:2d:e9:f3:69:
         d4:95:45:47:a1:1f:11:14:63:f5:cf:67:d1:49:6a:94:98:25:
         22:7f:a8:b7:fa:b5:22:8f:47:33:d7:99:1c:60:a2:c2:f2:4a:
         82:bc:6d:04:ca:d9:88:7e:12:7f:b9:d7:dd:d1:13:40:bf:fb:
         2e:f6:14:86:7a:ef:5d:b3:d6:33:3d:d3:17:97:81:e9:06:08:
         cd:8b:93:a6:1e:c6:5f:b7:87:9c:6e:9c:d7:c8:4e:e3:6e:28:
         69:df:54:d7:8e:f6:c4:56:fc:50:8c:34:f6:eb:ce:58:ec:52:
         05:81:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:05:25 2026 by rpki-client