Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/217f6e8f-37f6-3779-a3b5-ff2398f0fc89.roa
File:                     217f6e8f-37f6-3779-a3b5-ff2398f0fc89.roa (raw, json)
Hash identifier:          f8KgN5jztH974OhKNSssHDKwjHJlrmx0kZ9PU03JjS0=
Subject key identifier:   E1:D1:4D:11:D6:BE:70:DE:D2:EE:82:BF:C5:25:10:DF:1A:A3:87:52
Certificate issuer:       /CN=1931273b-f68a-4770-b714-cad22762621f
Certificate serial:       010D0C9F4328584B7E92A3D6D1EC7133A7F5EE00
Authority key identifier: F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/217f6e8f-37f6-3779-a3b5-ff2398f0fc89.roa
Signing time:             Sun 12 Oct 2025 06:35:01 +0000
ROA not before:           Sun 12 Oct 2025 06:35:01 +0000
ROA not after:            Sat 10 Jan 2026 07:35:01 +0000
asID:                     13411
IP address blocks:        130.12.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7e:92:a3:d6:d1:ec:71:33:a7:f5:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1931273b-f68a-4770-b714-cad22762621f
        Validity
            Not Before: Oct 12 06:35:01 2025 GMT
            Not After : Jan 10 07:35:01 2026 GMT
        Subject: CN=76c59846-8ba2-4554-b81c-e785b55eb8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:d9:cb:15:75:9a:a2:19:a0:5e:73:c4:4c:
                    49:3f:65:39:00:fd:28:c7:fa:6b:9a:b9:32:96:ce:
                    c4:f9:9f:09:30:32:d2:64:2c:ec:27:15:c9:84:53:
                    c0:90:e2:a9:c1:00:36:49:f5:40:32:e4:41:36:f8:
                    e2:0d:b1:14:83:7a:30:60:20:13:73:41:fe:c2:c8:
                    08:8b:49:2c:3c:43:f6:72:f3:4e:98:16:22:32:fb:
                    f1:5f:54:23:fa:77:b5:c4:ff:1e:01:3c:1a:ca:d8:
                    0e:17:7a:14:53:8d:61:bb:ac:31:9a:11:f7:ad:18:
                    97:46:be:37:aa:40:6d:a5:19:13:87:37:f8:11:ea:
                    1d:5a:f8:c9:7d:00:4a:3a:a8:45:5e:0a:ad:fc:1b:
                    42:58:8b:f0:3f:27:a6:3c:0d:52:cf:be:aa:fe:05:
                    20:25:66:f9:57:15:7a:e9:a9:3f:49:05:c6:69:0f:
                    d1:c6:e4:3f:76:d0:0e:12:f2:b7:89:ba:f1:31:6b:
                    e1:ae:64:64:5a:97:e4:e9:05:a9:dc:cb:2a:1b:56:
                    16:e0:2b:ad:60:3f:4c:40:60:a7:d7:09:7d:c7:ba:
                    14:c7:fe:10:44:f8:ea:b7:24:8e:a2:0c:90:88:b2:
                    a3:af:9d:2c:39:5d:83:84:c8:35:c8:b8:ec:7a:f6:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D1:4D:11:D6:BE:70:DE:D2:EE:82:BF:C5:25:10:DF:1A:A3:87:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/217f6e8f-37f6-3779-a3b5-ff2398f0fc89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1c:1f:f7:70:72:fe:ad:93:f1:6c:40:51:76:90:c2:aa:9e:
         05:8d:e6:c3:11:7f:92:a2:fc:9c:84:55:a6:81:9c:ed:c2:3a:
         4e:6e:10:ff:f8:bf:2e:15:4d:b9:68:eb:15:37:6e:53:9b:0a:
         9c:85:10:54:89:65:7b:c7:60:53:9b:d6:9c:5c:e1:32:18:42:
         a7:ff:07:25:62:58:ea:af:6a:d4:1e:32:03:82:f2:fe:94:cc:
         fe:11:7b:e9:d5:a0:a7:48:9c:fd:1e:d3:27:9c:c7:6e:da:ab:
         54:d4:60:4d:9f:e2:48:36:98:a5:18:d9:d2:40:76:f4:b0:c3:
         e2:eb:a9:02:16:b7:40:1c:ba:1c:9f:18:f8:09:7b:d2:60:d7:
         66:54:3b:be:43:54:e1:4f:16:be:38:43:2c:f2:b2:18:7f:2c:
         f1:78:dd:ef:91:c7:31:24:f3:56:20:29:42:b7:c0:69:6b:29:
         5a:21:c1:07:77:98:a0:0e:6b:fc:63:3b:f7:c8:60:bd:31:7f:
         96:64:37:df:36:86:15:a8:7e:a2:79:2f:c3:48:ba:ff:8c:5e:
         7c:a3:b4:05:c8:af:01:0e:60:c0:85:a3:ad:9b:bb:cc:85:37:
         0e:2c:ba:cc:48:36:81:42:55:7a:36:2a:43:34:76:0a:77:b4:
         ec:f3:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:26:32 2025 by rpki-client