Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/9ae1aebc-6069-3990-8770-ae6a8fcd84c1.roa
File:                     9ae1aebc-6069-3990-8770-ae6a8fcd84c1.roa (raw, json)
Hash identifier:          ZrdecWjRX+DGTvMp8eHowP3CSGtst5de5j/uyGcKcMI=
Subject key identifier:   C6:6E:C8:2D:7A:81:13:85:DC:A7:86:F1:AB:67:8E:D0:52:67:3B:5B
Certificate issuer:       /CN=a509a7f2-7b5a-4e82-86cc-217eab093131
Certificate serial:       010D0C9F4328584D47C4D5E6A328F2D6FB715BC0
Authority key identifier: F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/9ae1aebc-6069-3990-8770-ae6a8fcd84c1.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     11287
IP address blocks:        131.226.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:d5:e6:a3:28:f2:d6:fb:71:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a509a7f2-7b5a-4e82-86cc-217eab093131
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=7fd7f3cd-f748-4e02-ac26-9fb2c18e5bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:a9:f7:9b:1c:e3:38:96:2c:07:2d:d0:c4:
                    ae:dd:2a:fa:f3:65:dd:e9:e4:74:32:46:fe:48:87:
                    0f:03:88:b2:8a:16:ef:47:66:b7:13:d3:33:e9:c5:
                    ef:3f:ad:ab:45:c1:0f:0f:1c:3d:51:be:92:6c:e6:
                    0f:35:c7:c9:85:ba:ca:8c:6e:39:26:99:47:32:ff:
                    ac:6f:f8:f6:9e:dd:80:ef:15:ef:52:e5:c1:7a:b8:
                    1c:bf:d9:9e:13:ac:54:da:d8:5a:14:49:2b:c5:f3:
                    b0:4c:5e:5e:bb:a3:78:d8:e5:13:8a:b1:a7:dd:87:
                    96:41:0e:55:81:e0:8b:e9:2d:d1:24:52:c6:83:87:
                    c0:a2:ae:59:db:20:f9:5c:8c:30:95:f6:54:f8:37:
                    c1:c8:f8:39:47:0f:f3:fc:ae:0d:92:cc:fa:04:48:
                    c5:d1:68:13:02:a5:22:cd:aa:8c:e7:25:e1:6d:ea:
                    c4:38:b0:1b:1e:58:8a:bc:28:7a:bf:7d:68:79:0a:
                    23:2c:e4:0b:1d:9c:51:b5:e2:60:d1:8d:83:6b:d9:
                    20:1c:75:97:a1:64:34:a5:ac:c7:7f:ad:ac:d0:d6:
                    d5:ea:4e:d2:dc:db:9e:8d:b3:1a:04:34:a6:5b:68:
                    93:80:72:8b:82:f2:a0:b1:c0:a0:50:cf:29:3a:19:
                    96:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6E:C8:2D:7A:81:13:85:DC:A7:86:F1:AB:67:8E:D0:52:67:3B:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/9ae1aebc-6069-3990-8770-ae6a8fcd84c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl

            X509v3 Authority Key Identifier:
                keyid:F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d7:28:56:23:3a:40:f5:fd:a3:70:83:ec:29:4f:02:e4:6b:
         88:da:e9:9b:b2:99:3b:7a:bc:58:99:61:9a:77:b3:c6:ab:17:
         ba:f5:eb:9d:60:11:9a:22:a4:83:26:c2:7c:ac:4d:84:e8:37:
         28:13:5e:75:d0:a1:c6:78:df:fc:56:d0:2f:eb:b8:07:0a:cd:
         00:fa:7a:a5:de:21:12:ec:44:04:56:c5:64:61:2a:ee:a8:71:
         1e:b5:22:37:d8:68:92:b8:08:cb:87:70:47:81:e5:b5:40:b1:
         d1:f5:cd:f7:d7:e5:85:8a:a6:4b:66:16:5c:7f:16:f7:83:b3:
         ea:51:39:f8:14:df:f0:bf:4f:7b:c0:c9:5a:51:c5:c5:ca:ee:
         b3:40:ca:fa:4a:ac:a1:5f:e3:12:ba:a8:0e:73:12:f2:e9:2b:
         69:0a:45:c8:34:c9:bf:4f:ae:2c:d3:1f:a8:57:e2:84:e1:b4:
         75:a5:47:17:9b:ad:c4:14:cc:4a:c1:7b:ef:bd:dc:e8:f6:b1:
         c6:30:52:73:fc:3f:c7:9f:b8:c5:60:c6:84:e6:68:15:0a:a0:
         cc:76:f0:fa:36:8e:87:24:1c:3a:de:96:34:f7:3d:de:60:93:
         90:39:88:c2:23:b1:77:ef:48:67:d1:02:45:34:6e:d2:07:5f:
         2d:11:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:59 2026 by rpki-client