Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/31c7a89e-5deb-3b63-883b-afc7e179ae16.roa
File:                     31c7a89e-5deb-3b63-883b-afc7e179ae16.roa (raw, json)
Hash identifier:          Trj8ajM1HEZUI//eeoKxKrKjo01joh/EIRM9xFoJPjI=
Subject key identifier:   DF:D5:66:37:2E:11:07:D8:C0:89:5C:59:7A:7C:7B:6C:D9:5A:D3:03
Certificate issuer:       /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
Certificate serial:       010D0C9F4328584B56C335CF14527439349B47D0
Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/31c7a89e-5deb-3b63-883b-afc7e179ae16.roa
Signing time:             Sun 28 Sep 2025 00:20:33 +0000
ROA not before:           Sun 28 Sep 2025 00:20:33 +0000
ROA not after:            Sat 27 Dec 2025 01:20:33 +0000
asID:                     63201
IP address blocks:        141.193.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:c3:35:cf:14:52:74:39:34:9b:47:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861
        Validity
            Not Before: Sep 28 00:20:33 2025 GMT
            Not After : Dec 27 01:20:33 2025 GMT
        Subject: CN=544b3020-d75d-41f9-ac86-886ed1ca5051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:5f:69:17:47:d0:93:b0:27:57:c3:a8:11:
                    16:8f:ff:13:1e:44:d4:c4:02:f2:94:d5:00:eb:26:
                    c5:3a:a0:2e:8f:f6:cf:8a:a2:29:18:d8:28:45:74:
                    8c:a9:7e:ea:8c:12:b3:df:bb:4e:fb:d0:3e:b1:a7:
                    5e:95:81:92:ec:7a:d8:4f:79:89:c4:24:89:9d:0b:
                    59:01:61:3f:89:c3:79:b7:1b:4c:a2:66:9d:b1:c1:
                    b1:03:e3:f8:63:27:fa:35:7a:dc:57:5f:f4:09:04:
                    30:5e:ea:8e:d2:7e:20:e6:11:2b:a0:c9:7b:ec:c5:
                    1d:53:3b:62:58:aa:81:94:75:45:66:07:ee:98:e8:
                    1a:8c:35:eb:9e:53:6f:04:72:6c:28:92:a6:95:7a:
                    a6:89:c5:27:ad:77:f1:6e:94:c4:f7:da:b6:1e:54:
                    94:8f:8d:d9:45:45:56:32:57:71:c5:35:3e:c5:90:
                    c1:40:a4:f3:b2:5b:ce:fc:c1:cc:34:4b:19:25:49:
                    c5:90:cf:4f:36:e8:a1:0a:67:58:80:ed:11:00:82:
                    82:5c:d6:41:cd:3d:03:8a:e2:f8:12:23:f0:36:a8:
                    7e:32:7e:48:6c:0d:86:b2:01:bf:e1:29:cc:9b:90:
                    47:5c:79:53:9b:a3:0a:45:3a:36:a7:c9:38:a0:83:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D5:66:37:2E:11:07:D8:C0:89:5C:59:7A:7C:7B:6C:D9:5A:D3:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/31c7a89e-5deb-3b63-883b-afc7e179ae16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl

            X509v3 Authority Key Identifier:
                keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:7e:e8:c6:4c:e5:49:97:b5:c9:4a:87:18:b8:61:7d:1d:8b:
         8c:88:f1:2a:c9:86:9e:ad:87:a7:4e:0d:bb:6a:3b:5e:60:62:
         f5:16:5a:41:df:a3:fe:b0:9b:42:21:a5:71:a1:17:8b:46:37:
         0c:db:63:d3:0a:b0:3f:fd:9d:80:87:6f:74:d9:c8:88:c1:3d:
         fc:9e:70:d5:36:5b:08:0e:21:d4:5e:e8:cb:ff:50:38:59:ea:
         23:4e:27:6d:dc:57:c5:16:a6:d2:ab:b7:d6:11:9c:6b:2b:fa:
         bc:40:9b:1f:cd:bb:83:aa:a7:9b:25:12:9b:5b:68:76:f5:62:
         25:a6:db:31:19:26:a9:6a:eb:4e:82:70:e9:8a:59:a9:97:d0:
         e5:7c:c7:4a:9a:ba:b5:de:77:71:c0:2d:18:b6:ef:c9:6c:ef:
         6a:f4:17:63:a5:a9:42:d1:d1:2a:ad:2e:63:b2:d1:bb:f0:9d:
         7d:e6:a6:05:9c:32:11:12:12:55:48:3a:3c:a4:9c:a5:61:0b:
         73:58:8c:45:ca:81:eb:a4:a0:e2:d1:42:20:b5:ff:39:14:a7:
         2e:c5:6f:a4:19:45:c0:1e:7f:96:04:81:18:53:b5:89:ed:07:
         17:a8:66:3e:c1:9f:71:51:75:05:c6:b6:41:f8:18:3d:41:95:
         b1:1c:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:18 2025 by rpki-client