Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/c5005106-9415-31d1-8d7a-361d6382eb35.roa
File:                     c5005106-9415-31d1-8d7a-361d6382eb35.roa (raw, json)
Hash identifier:          1SenLQz7K/5IUyhQr0WO4FYsuEKth2eE9EUo2icC0GQ=
Subject key identifier:   59:E1:4C:BA:F3:1E:07:32:6E:62:80:55:3A:26:30:E9:FE:BC:47:80
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F4328584D4A8FA05B8EBC4A299CAEA000
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/c5005106-9415-31d1-8d7a-361d6382eb35.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        131.232.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:a0:5b:8e:bc:4a:29:9c:ae:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=a0e92d79-c1d0-4e9c-9941-caf7fc6030c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a0:67:f4:45:0b:b0:25:59:4a:49:91:83:29:
                    e2:24:33:40:35:de:a1:9c:b7:99:d5:00:74:a3:cd:
                    ce:4f:15:34:7d:36:21:e5:f2:e5:c4:31:37:e6:26:
                    74:d5:3d:2c:32:16:69:9d:43:6e:16:5c:b5:81:54:
                    67:52:7a:79:03:7e:24:a2:12:d5:2b:0e:32:c9:11:
                    18:51:bf:09:46:11:fa:97:9d:95:05:93:56:d1:e7:
                    6c:0d:7d:0c:65:40:7c:c1:4a:65:67:6b:01:6f:60:
                    14:a1:99:0a:15:39:58:3e:53:58:9a:dd:40:46:94:
                    74:74:97:6b:c4:a8:4b:4a:c9:81:9c:c2:24:60:99:
                    64:45:1c:7c:03:26:ec:9f:49:63:15:13:7f:56:6a:
                    50:df:39:72:ae:37:2a:ac:40:1f:78:73:f1:c5:5c:
                    69:77:bb:ce:06:b9:50:78:6c:92:80:e2:70:7a:26:
                    69:38:75:b0:37:ab:1f:8f:11:8a:2a:de:a0:b4:de:
                    29:3b:a0:ca:a0:c8:60:9e:84:0c:02:56:08:a1:7f:
                    81:0f:4c:75:af:85:7c:7a:a4:53:3c:45:6b:0b:52:
                    f1:60:91:54:32:4c:e0:4f:80:0a:06:d0:1e:70:be:
                    c1:9f:33:cd:68:13:ff:cd:ec:13:80:1d:7a:54:5d:
                    16:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E1:4C:BA:F3:1E:07:32:6E:62:80:55:3A:26:30:E9:FE:BC:47:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/c5005106-9415-31d1-8d7a-361d6382eb35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:54:2a:90:fe:25:b3:0e:d1:11:c9:b3:06:5c:b0:7e:43:
         63:61:53:6f:ce:ae:45:21:e4:26:ed:4c:a5:39:bb:33:24:9f:
         c7:34:12:07:3d:8d:21:55:f5:f6:82:14:c6:5e:33:77:3b:bd:
         aa:0a:70:75:15:d9:f6:de:cf:f3:68:3a:7c:09:22:09:e3:ea:
         4d:9e:cd:46:43:ff:75:95:cb:81:08:8e:a6:79:5d:45:2a:19:
         7f:e6:54:c4:ee:7c:39:7d:b8:19:46:b9:a7:b5:5e:89:ad:40:
         98:b0:f8:ec:a5:18:36:d2:ca:2f:34:b2:f0:f0:5b:87:a8:4f:
         53:4e:02:d4:46:d2:98:fc:e6:9f:a3:38:06:a1:ff:74:6a:dc:
         7f:c5:12:56:10:63:f8:de:96:a3:86:54:b5:fc:a5:d9:5e:f5:
         62:7f:37:10:08:bd:a4:bc:37:18:75:94:ff:50:da:dd:dc:4d:
         e0:85:13:56:d5:b1:cd:31:b1:bc:1b:8e:b0:de:3b:e7:aa:50:
         ed:9d:2b:ef:c9:d6:6e:28:7c:a5:38:90:2f:8c:b7:97:b7:50:
         ba:7a:6e:d7:97:0c:f4:5b:60:c9:32:8d:89:2d:d6:37:f7:ca:
         f4:22:05:97:09:b2:1c:de:23:9e:ba:61:ec:f2:7e:2e:07:be:
         8c:e8:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:38 2026 by rpki-client