Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/79cba9c2-c2ca-3154-bf62-7b969a37ea48.roa
File:                     79cba9c2-c2ca-3154-bf62-7b969a37ea48.roa (raw, json)
Hash identifier:          irS+xajubVvOY9q4FZC1p2tFvj/yDtnjF48ylykCMpM=
Subject key identifier:   9E:E7:69:93:4F:08:2B:A8:B0:6A:3B:31:D6:D8:0A:32:A1:3D:65:C0
Certificate issuer:       /CN=570595b1-8680-4be0-ba0e-5d08aa118fab
Certificate serial:       010D0C9F4328584DCCF05FFFF42C3D569B389EC0
Authority key identifier: FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/79cba9c2-c2ca-3154-bf62-7b969a37ea48.roa
Signing time:             Mon 11 May 2026 17:50:48 +0000
ROA not before:           Mon 11 May 2026 17:50:48 +0000
ROA not after:            Sun 09 Aug 2026 17:50:48 +0000
asID:                     3428
IP address blocks:        130.20.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:f0:5f:ff:f4:2c:3d:56:9b:38:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570595b1-8680-4be0-ba0e-5d08aa118fab
        Validity
            Not Before: May 11 17:50:48 2026 GMT
            Not After : Aug  9 17:50:48 2026 GMT
        Subject: CN=7f146025-c687-4425-a468-da8c7f6726e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:68:a5:82:ea:7c:b0:d7:f4:96:60:8d:d9:de:
                    bf:02:76:74:44:b6:ae:13:e9:01:7c:99:6f:99:f2:
                    02:a4:1f:62:d1:a7:ea:8c:d9:57:d9:40:b1:82:be:
                    1e:4d:3e:d5:33:51:f6:4d:fb:96:98:ab:de:91:fd:
                    5b:e0:ae:36:5a:f0:77:38:a8:ee:1d:d1:3e:10:5b:
                    ff:28:32:5e:d0:52:92:3d:5a:7b:7d:cd:a0:56:1b:
                    51:a3:e4:2a:fd:8e:ed:39:ca:c0:cc:85:61:f5:5d:
                    40:89:14:fc:06:9f:83:d7:af:1a:a7:19:aa:a2:20:
                    62:ba:05:2a:4b:be:39:02:7f:1c:2e:a3:a0:a9:6d:
                    dc:a0:22:b3:cf:ca:31:3e:c2:73:29:93:80:84:00:
                    42:af:b9:f3:b5:95:22:a7:e0:89:9d:41:14:70:c0:
                    d4:2a:b6:f8:80:ed:8e:5d:14:69:66:9c:a4:6c:53:
                    ad:9f:e9:a1:e8:f6:10:21:87:80:5b:e7:6c:93:cf:
                    cb:4d:76:6b:56:79:28:27:8a:47:f0:ad:d6:74:65:
                    db:45:b9:01:3e:92:0b:11:f1:67:cb:88:22:0a:2a:
                    85:e8:62:8c:18:fe:5f:bd:c6:f9:37:54:ef:33:7c:
                    4f:50:c7:f3:0a:1e:2f:ab:68:87:c3:85:ee:95:8f:
                    dc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E7:69:93:4F:08:2B:A8:B0:6A:3B:31:D6:D8:0A:32:A1:3D:65:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/79cba9c2-c2ca-3154-bf62-7b969a37ea48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.crl

            X509v3 Authority Key Identifier:
                keyid:FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:3d:c4:9d:d4:ac:8d:16:e6:f4:73:e2:22:d6:bf:de:a3:91:
         68:c1:0e:ab:00:67:4b:4a:d0:89:5c:77:d0:2c:25:6e:65:9d:
         e4:b3:2d:ec:8f:82:05:a7:f8:6a:39:38:60:a0:f7:c6:06:3a:
         14:7c:7c:d9:3b:d0:eb:9a:d2:c6:80:a2:aa:ed:74:b2:a1:20:
         e0:63:95:be:99:7f:48:f8:09:4e:f8:94:d8:ba:f3:db:ae:1f:
         88:c6:57:34:1c:b8:2e:61:e8:e3:55:b5:e3:ba:f6:8c:4a:60:
         cf:24:68:b9:b3:e6:be:cb:a8:a7:e8:85:a7:5c:e1:56:22:d5:
         5a:55:69:a4:a5:df:1c:79:01:a7:52:cf:f5:b9:10:89:3e:84:
         bd:6e:8c:b1:fb:4a:fc:9a:2f:48:1f:db:98:2d:44:7d:da:0e:
         70:d4:64:f2:c9:81:b2:a6:7c:49:dc:e1:3a:bd:fd:72:90:be:
         ed:1b:bf:f5:ac:cd:b0:b6:af:a7:ee:94:19:ea:47:ca:80:7d:
         ea:eb:0f:94:8e:c7:7a:a3:ca:96:ce:ef:6c:4d:a3:e8:09:be:
         94:68:dc:09:3f:db:ca:b4:ed:0e:a3:5c:dc:31:2f:1a:29:88:
         80:1c:75:c2:00:50:bc:93:4b:05:da:03:aa:b3:20:fe:7a:52:
         6b:bd:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:05 2026 by rpki-client