Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ad8bd357-a770-3770-8315-f377b877476b.roa
File:                     ad8bd357-a770-3770-8315-f377b877476b.roa (raw, json)
Hash identifier:          rGGlWNIAHQi4eKzP1hF5e4ahi4C6/o/0EtIvYNEs1G0=
Subject key identifier:   58:C2:4A:C6:94:45:B3:DD:2A:65:F6:21:58:28:F1:81:41:B3:BA:30
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D25E4E5A9CAEBA31F7300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ad8bd357-a770-3770-8315-f377b877476b.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     7843
IP address blocks:        131.223.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:25:e4:e5:a9:ca:eb:a3:1f:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=5348dd5b-9a16-4454-a35d-ffd06ef648fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:0b:47:5a:9f:a9:18:61:81:c2:a2:20:66:
                    3d:ab:cf:e9:70:f8:a3:52:7e:9a:65:1a:13:6b:b0:
                    ab:e9:16:ac:e0:c2:60:d5:e2:9d:2a:cd:44:54:a8:
                    15:ab:6a:e0:9c:57:75:f3:35:a7:0e:21:0a:3e:53:
                    b8:c7:86:f2:7a:dc:2d:e2:ac:39:59:24:b3:5d:58:
                    da:a0:6c:e7:1b:f4:a8:8e:40:f2:4b:26:dc:cb:ff:
                    b8:9d:84:07:81:b8:2a:be:b5:5f:e7:ab:95:ff:5d:
                    59:0d:63:19:6e:12:87:83:ab:5c:db:9c:4d:c0:96:
                    f4:e3:22:1c:b5:50:58:de:11:a7:db:99:5a:43:6d:
                    dd:d7:42:26:39:7c:4e:c2:53:e4:f6:c4:ab:23:1f:
                    d7:23:28:98:68:7b:7a:16:b8:ba:2a:75:6a:7f:da:
                    65:54:d4:72:98:f1:b4:41:4a:f7:f3:8a:04:f6:bf:
                    ec:73:0d:8b:60:9e:eb:5e:ce:dc:22:2d:14:43:eb:
                    42:19:13:c9:3c:39:8e:bc:f5:6d:15:c5:31:ff:a8:
                    e6:ad:e2:7c:61:16:0a:c6:9c:51:9c:04:5d:f6:a8:
                    dc:dc:3d:a8:6d:be:11:0a:42:e2:bd:81:e5:3e:24:
                    1e:72:26:67:0a:e4:aa:ca:aa:a3:c2:1b:bc:80:86:
                    f1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C2:4A:C6:94:45:B3:DD:2A:65:F6:21:58:28:F1:81:41:B3:BA:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ad8bd357-a770-3770-8315-f377b877476b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.223.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a2:11:49:ee:85:34:03:0f:6a:66:bb:dc:bc:c5:3c:61:31:
         4e:25:fc:4d:3c:2c:8c:68:a4:e9:ff:7a:13:17:56:12:50:c1:
         10:3c:c7:f0:8d:ac:97:58:00:4c:b4:7c:59:63:96:ff:2d:26:
         92:28:db:16:37:05:90:cf:70:f3:61:94:fc:c6:45:72:b5:ab:
         93:67:0b:f5:97:4e:58:84:45:b6:bf:33:d9:4c:54:02:8d:45:
         e7:80:fe:dc:f6:66:35:44:26:f5:bd:df:19:39:8a:9a:1e:70:
         e9:1a:0b:7a:f8:d5:ce:50:3a:8f:9d:eb:a8:d6:f2:59:0c:28:
         9b:1a:55:84:3a:29:c7:d0:ae:b5:af:79:e1:db:2e:72:82:8f:
         99:6c:05:87:1f:b3:e4:2b:7c:9f:ba:aa:4b:b1:ac:c8:c8:9a:
         80:f3:6f:c7:48:a9:02:7b:ef:3b:ec:97:24:af:fb:45:6b:59:
         75:61:81:72:fd:02:ba:ec:15:b1:ea:9d:c6:c5:f9:b1:f3:c8:
         8e:07:0a:f0:64:3c:e4:12:61:54:19:b0:e1:a8:db:55:db:63:
         2c:e7:46:0b:f5:85:6d:dc:03:f6:df:2d:28:b4:8e:2b:04:f8:
         74:2e:44:d2:6e:20:ec:a8:29:a4:f9:81:23:d0:91:5d:ec:f7:
         13:d1:45:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:12 2025 by rpki-client