Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7cdcb78-7816-3f00-aec1-4c0866d82a26.roa
File:                     b7cdcb78-7816-3f00-aec1-4c0866d82a26.roa (raw, json)
Hash identifier:          fD0Oqe8ebOKL1X9NHln1MxN0Mp+vS5V6SY4+ZYis+us=
Subject key identifier:   03:90:F5:F0:7F:2E:16:B8:1A:B4:6D:9E:E4:9B:DE:8F:91:5F:77:A0
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584D0D427DD24EC3F8EC199D6A00
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7cdcb78-7816-3f00-aec1-4c0866d82a26.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        131.229.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:7d:d2:4e:c3:f8:ec:19:9d:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=9ea446a2-268e-4571-956b-3a8a840d4e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:13:37:a0:53:41:08:ac:68:a8:40:3f:76:
                    1d:13:06:b6:a4:1f:bd:74:5f:99:d0:b4:29:51:65:
                    2b:10:a2:d2:ca:74:64:48:74:f6:b0:f0:7d:5c:fa:
                    88:c1:cb:0b:01:be:54:1f:18:10:1c:f3:ba:e3:40:
                    b4:73:ce:72:04:49:96:4a:28:5b:5f:fa:d1:86:bc:
                    8f:30:5e:0d:1c:90:c0:a5:95:6a:c0:43:37:8c:be:
                    15:0c:db:f3:ef:93:bc:c2:35:48:81:1e:c2:16:c3:
                    65:dc:26:ea:ec:6d:5b:e7:da:91:26:45:f2:91:63:
                    12:6f:f2:e7:58:75:e7:17:f1:bd:26:f1:33:b6:7e:
                    08:19:2d:17:15:4b:c2:82:2a:31:b3:08:86:b1:b4:
                    a9:f4:01:f9:03:8d:e6:41:a1:1d:4c:f4:4d:92:fa:
                    64:ad:d3:6e:11:60:b8:3c:18:f5:8c:19:ae:21:87:
                    9d:ac:14:82:0c:5f:4a:ff:eb:7d:14:0a:a6:b9:df:
                    7f:39:82:1c:98:04:e6:27:0a:d7:4f:7d:5d:c9:37:
                    4b:6b:9e:77:07:43:5e:39:8e:08:e6:3e:38:93:94:
                    4f:26:2b:a4:f8:37:5d:9b:b8:9e:34:49:82:93:4a:
                    a7:25:f5:86:6d:bc:5a:cd:44:56:47:fe:42:a8:df:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:90:F5:F0:7F:2E:16:B8:1A:B4:6D:9E:E4:9B:DE:8F:91:5F:77:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7cdcb78-7816-3f00-aec1-4c0866d82a26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:56:41:9e:88:7c:2d:0b:77:ad:64:44:aa:e9:f0:f7:d7:52:
         ab:42:1d:07:53:d7:9c:a2:30:38:4e:22:78:0e:c3:6c:a8:23:
         34:9d:50:43:41:04:83:c8:06:f0:5f:9d:87:e4:03:a5:ca:b8:
         17:75:db:ed:91:c5:8a:fb:e5:a7:72:49:74:c0:04:4f:6c:3d:
         cc:e7:d1:29:8f:d9:19:7b:d9:a4:97:20:6a:44:a1:4c:26:aa:
         37:ea:ae:90:84:60:08:c5:77:cb:c0:2d:b8:f5:84:9c:26:87:
         0b:08:a4:67:c6:4c:08:aa:49:ca:1b:eb:84:f8:85:ea:f9:4f:
         10:1c:4d:77:9a:d2:7d:a8:57:66:c5:ec:09:0c:8c:08:3b:c0:
         33:70:3c:b4:9a:15:88:8f:02:b6:d1:79:ea:34:74:14:2f:dd:
         8f:0e:a9:05:b8:6a:28:ff:a9:81:cd:61:b8:95:a4:7d:5e:a9:
         50:f6:b3:94:95:b1:58:6a:5a:22:a3:a0:37:76:19:b0:de:19:
         e5:46:6c:a8:82:27:fa:59:d1:c6:ed:64:f1:45:59:7b:52:54:
         ed:26:13:04:f1:c3:8e:99:6f:25:76:3a:b4:4b:33:53:59:60:
         87:ce:7b:58:a1:77:0d:cb:56:27:1b:a5:2e:dc:47:32:ac:4b:
         50:20:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:41 2026 by rpki-client