Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/e77b6518-268e-3091-a743-d3ae4f07d644.roa
File:                     e77b6518-268e-3091-a743-d3ae4f07d644.roa (raw, json)
Hash identifier:          gbNqO2x2JV69ZkoWcfzVeMgamgqHG4hy023c5/S5a7w=
Subject key identifier:   2C:D4:2A:C4:F2:5E:91:CC:72:1C:57:82:EC:07:01:FF:D9:0F:ED:40
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F4328584B8BE23C8EC1A644D5ED241F00
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/e77b6518-268e-3091-a743-d3ae4f07d644.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     16580
IP address blocks:        131.232.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:3c:8e:c1:a6:44:d5:ed:24:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=e7beaa5d-41c7-4285-b940-6111ae9cc7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:d9:a6:9c:4d:52:86:4b:55:62:e7:13:43:
                    a6:08:ff:ab:ea:62:bd:f0:26:04:40:fd:f0:e2:80:
                    71:46:28:be:f7:23:67:cd:46:1d:ff:0f:ec:a9:20:
                    2c:fb:4c:95:6c:4a:e6:b6:02:6a:45:6d:b3:25:43:
                    ca:e2:f5:31:e1:c4:1c:bd:28:ee:3f:f7:54:34:ac:
                    e5:46:7b:cb:c3:41:08:b0:df:76:be:3d:8c:b3:48:
                    ce:90:8a:1b:09:14:66:05:39:e8:19:13:a6:9d:e6:
                    b6:5b:d8:f6:aa:17:88:1f:4e:42:9d:1f:e3:d5:a5:
                    04:2d:e2:fb:73:55:cf:f3:d6:bc:6e:38:0f:1f:9e:
                    67:a1:6a:91:05:72:a4:7b:fb:8e:f4:68:2d:3a:cf:
                    cf:e2:14:b1:fe:13:33:c0:55:0e:62:52:81:fd:72:
                    c3:04:e5:d2:96:fa:ef:9e:b7:74:a9:ec:d7:86:10:
                    71:2e:16:74:59:f7:ba:65:31:31:23:41:d9:67:88:
                    57:6d:03:08:2c:22:6a:af:0a:e0:66:7b:a2:8c:d4:
                    a4:5d:73:8d:24:8f:0c:b1:67:02:26:ef:86:ef:db:
                    91:76:09:76:7e:df:42:8f:db:b6:5e:5b:e8:6e:30:
                    5d:ea:5d:53:69:fe:12:43:b5:30:f9:fb:00:22:5e:
                    9b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D4:2A:C4:F2:5E:91:CC:72:1C:57:82:EC:07:01:FF:D9:0F:ED:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/e77b6518-268e-3091-a743-d3ae4f07d644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:83:dc:e2:0a:c3:cd:31:fb:9f:f4:73:ea:20:dc:7e:54:da:
         cb:a6:e0:a4:9a:3e:cd:9b:60:7e:01:1b:85:4d:e8:8a:7a:bf:
         6c:1a:19:bb:a9:9d:12:05:d9:21:ca:58:cf:4b:63:df:a1:0a:
         ee:72:d4:77:3a:d3:38:83:a4:d0:5e:41:cb:f7:24:8a:ee:77:
         92:0c:6b:26:42:42:e1:3e:ba:a5:15:58:1b:31:e4:ed:09:b4:
         68:98:58:92:b6:00:86:74:e1:9a:1f:65:4a:59:37:5a:10:c1:
         9d:17:73:4c:92:da:36:a1:8a:38:f1:42:ef:9a:f1:c0:d3:ac:
         6d:ea:d6:c6:e4:55:9c:58:ab:ad:8d:09:d0:b6:33:19:89:81:
         45:e2:ae:a9:99:70:a7:a9:30:51:6f:10:88:f3:95:d8:ed:57:
         84:52:73:26:58:f9:11:33:2e:10:81:b5:b1:11:dd:3d:94:c7:
         b9:81:fb:ba:21:d1:2e:38:e6:11:64:00:d1:04:8c:e9:8c:96:
         98:d2:b0:de:ca:e7:bf:a9:dc:dc:ce:02:ee:f8:21:2a:d4:9c:
         5d:91:17:73:98:f8:d9:2e:10:2a:07:83:04:85:20:a8:71:2b:
         8d:15:e9:0b:91:c1:3e:ac:cf:63:94:04:50:45:a2:72:20:e4:
         00:19:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:57 2025 by rpki-client