Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/21780331-9e36-3c87-9f1e-94161d91ab7d.roa
File:                     21780331-9e36-3c87-9f1e-94161d91ab7d.roa (raw, json)
Hash identifier:          N+lw4UMhHXvzCGmg1ODl8KoMwYtMxKuMgdsTULyZcFE=
Subject key identifier:   BA:79:9A:11:12:79:4D:52:C6:D4:94:1C:8E:83:13:30:2D:FD:0A:93
Certificate issuer:       /CN=bd5e022e-e6ed-4042-8a2b-86853dc6ebc9
Certificate serial:       010D0C9F4328584DB2BA4AA1998B08A389F25500
Authority key identifier: 53:B6:69:BA:CC:6C:AB:D8:FE:23:CB:27:DD:34:9D:72:EA:64:4E:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/21780331-9e36-3c87-9f1e-94161d91ab7d.roa
Signing time:             Sat 02 May 2026 08:30:49 +0000
ROA not before:           Sat 02 May 2026 08:30:49 +0000
ROA not after:            Fri 31 Jul 2026 08:28:59 +0000
asID:                     7029
IP address blocks:        130.12.144.0/24 maxlen: 24
                          130.12.145.0/24 maxlen: 24
                          130.12.146.0/24 maxlen: 24
                          130.12.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b2:ba:4a:a1:99:8b:08:a3:89:f2:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd5e022e-e6ed-4042-8a2b-86853dc6ebc9
        Validity
            Not Before: May  2 08:30:49 2026 GMT
            Not After : Jul 31 08:28:59 2026 GMT
        Subject: CN=589849c6-1530-429f-8478-1baa0433dfac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e0:56:b7:ad:58:f6:6a:95:3e:9a:55:6e:ea:
                    63:3c:99:d0:67:1d:0f:ba:15:bd:d6:80:40:d5:77:
                    69:f1:92:29:27:b5:d9:38:1c:df:03:0c:64:3c:5c:
                    8b:ed:56:21:fb:86:0f:5b:1c:fa:08:7a:53:8b:67:
                    f4:0e:d5:5b:88:f7:34:14:ae:81:aa:83:b1:86:ea:
                    22:5d:7d:a0:b5:45:f3:25:7e:f6:c7:b6:3f:fe:0e:
                    60:9a:0e:0c:df:6b:32:0b:c7:70:c4:5c:2a:9e:c2:
                    b6:3a:88:6d:2f:34:21:89:ad:a5:ae:c8:54:15:6e:
                    0c:bc:a8:52:1e:f6:7f:7f:a2:fa:5c:3f:a1:bf:8f:
                    e0:22:df:10:6a:54:76:cc:e3:0f:dd:fe:1a:ec:09:
                    67:fe:9f:dd:f0:7c:48:96:14:f0:e0:64:f4:03:30:
                    18:99:9e:bb:54:5f:e4:b3:5e:69:0b:b0:67:07:c2:
                    10:db:df:f1:e8:4a:8a:61:e7:aa:d3:f5:8a:08:21:
                    63:3a:de:3a:d4:56:50:1e:fa:f5:0b:35:b7:b4:be:
                    1d:95:f6:95:18:58:ca:3e:c8:29:96:ec:3c:ab:a8:
                    6f:7f:44:5c:7d:df:19:3c:8a:46:50:e7:32:50:de:
                    77:5b:99:9e:05:19:38:36:ee:61:34:72:00:61:be:
                    75:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:79:9A:11:12:79:4D:52:C6:D4:94:1C:8E:83:13:30:2D:FD:0A:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/21780331-9e36-3c87-9f1e-94161d91ab7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.crl

            X509v3 Authority Key Identifier:
                keyid:53:B6:69:BA:CC:6C:AB:D8:FE:23:CB:27:DD:34:9D:72:EA:64:4E:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a9:3c:a8:98:f0:40:0e:cd:6f:04:57:b6:e2:2f:13:53:71:
         3e:44:66:94:93:db:a4:1a:1c:78:c4:9a:cb:ab:d6:ff:96:b7:
         95:54:c8:1e:c2:35:9d:89:5e:bd:ad:40:81:dc:71:df:d6:7b:
         e9:2a:4a:1b:08:9c:f4:58:bb:de:d6:ea:e5:c3:94:c1:dd:73:
         52:8b:66:5d:65:60:89:d4:6e:ea:74:22:25:8b:d5:d4:e7:cb:
         72:ab:47:f4:37:91:84:fc:84:0b:82:fa:ea:82:d4:3c:72:29:
         85:9a:a9:e9:78:a2:75:86:6d:96:1b:7b:69:0b:78:0d:06:20:
         c6:95:36:0e:a5:4d:8a:10:dc:a2:c3:df:fe:5d:0c:d1:69:4b:
         67:32:3c:e8:1b:8b:58:17:fc:2c:20:9d:8e:a3:59:94:c7:b4:
         7e:a9:ce:8e:c3:9a:1e:89:c9:00:17:65:9d:5a:7d:f2:f4:9f:
         be:d9:6f:8d:78:09:70:c8:3c:b5:55:9a:72:23:5e:a1:3a:fc:
         1d:40:aa:67:56:0f:ac:83:71:e3:65:67:52:74:05:d6:a1:06:
         88:c1:57:35:4d:fd:10:0b:7b:8e:47:5b:57:47:7a:c9:a5:5f:
         43:d0:86:de:a3:d5:ab:b5:dd:30:bd:5d:79:50:c7:d5:c4:36:
         3d:2b:69:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:25 2026 by rpki-client