Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/b62f657f-b3ac-359f-b6be-6d52f3b6acbf.roa
File:                     b62f657f-b3ac-359f-b6be-6d52f3b6acbf.roa (raw, json)
Hash identifier:          LXNq5xvSMXUe07lxIQPJkRW5hovroNXiopwf4abrpfQ=
Subject key identifier:   0B:55:2C:F9:C1:54:18:C1:E5:BF:F2:32:0F:D6:69:6E:77:2A:87:97
Certificate issuer:       /CN=bd5e022e-e6ed-4042-8a2b-86853dc6ebc9
Certificate serial:       010D0C9F4328584E921FAF94C4995CA38C195A80
Authority key identifier: 53:B6:69:BA:CC:6C:AB:D8:FE:23:CB:27:DD:34:9D:72:EA:64:4E:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/b62f657f-b3ac-359f-b6be-6d52f3b6acbf.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     54590
IP address blocks:        130.12.144.0/24 maxlen: 24
                          130.12.145.0/24 maxlen: 24
                          130.12.146.0/24 maxlen: 24
                          130.12.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:af:94:c4:99:5c:a3:8c:19:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd5e022e-e6ed-4042-8a2b-86853dc6ebc9
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=74dbbe38-4f1f-4039-9936-b8458af15f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:48:8c:eb:8b:74:83:36:23:3c:4f:17:e7:
                    70:2c:ec:a7:88:3c:5c:76:fd:fd:5a:db:49:1f:01:
                    da:10:38:30:33:02:60:ed:11:db:3e:61:bb:e0:ea:
                    ed:b6:e8:0b:af:01:ad:df:f2:e0:fb:e5:ba:78:89:
                    ab:eb:5d:52:c4:d8:4a:f0:35:3f:15:73:7c:32:6b:
                    90:29:ea:04:15:8a:20:4e:4b:e0:ae:f7:6f:fd:bd:
                    8d:76:f7:9c:52:4f:12:c2:31:35:27:4e:fe:59:9b:
                    ad:00:95:6e:b3:5e:88:c9:c1:62:10:01:18:ed:8a:
                    d5:e5:34:2c:bc:eb:05:7d:b6:8f:cb:d2:ed:46:f5:
                    4c:8d:bb:a8:c7:16:a5:38:3e:b9:bd:ad:38:a0:b6:
                    91:c3:9f:7f:35:a3:c8:07:55:93:43:e3:6d:87:4b:
                    95:f8:85:62:3d:72:7f:65:82:16:f3:d9:f0:5d:03:
                    83:9f:cf:ac:be:95:b8:21:49:44:8e:cc:16:25:e9:
                    35:19:64:da:06:8e:59:e9:34:96:dc:1b:3e:ec:6c:
                    8f:66:f6:e1:30:ab:c5:46:f5:fd:6a:28:31:dd:2d:
                    2e:33:31:4b:25:3c:da:be:ec:cc:14:88:4c:36:50:
                    7d:7b:e2:72:8f:52:6d:9e:d1:51:45:e6:50:1e:63:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:55:2C:F9:C1:54:18:C1:E5:BF:F2:32:0F:D6:69:6E:77:2A:87:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/b62f657f-b3ac-359f-b6be-6d52f3b6acbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.crl

            X509v3 Authority Key Identifier:
                keyid:53:B6:69:BA:CC:6C:AB:D8:FE:23:CB:27:DD:34:9D:72:EA:64:4E:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:13:e2:85:9c:aa:95:2d:bb:41:9e:6c:86:07:74:fe:06:16:
         6f:54:da:bd:eb:a9:a7:3a:d8:c1:c9:5d:37:54:fa:b0:8b:80:
         87:42:74:ad:b3:18:be:b8:15:77:27:f7:ab:bf:55:d6:ba:03:
         5d:14:24:ab:93:cc:dc:0f:c3:03:b8:43:cc:bb:91:72:ce:75:
         09:99:84:bd:6b:ea:9f:37:52:35:3a:e5:7f:9f:e2:23:fd:13:
         ae:6e:85:38:50:a6:d4:7f:ff:b4:3c:09:07:00:58:ec:6e:fe:
         a8:bf:1b:1f:c0:1e:54:e8:d6:79:66:3a:15:75:76:ce:fd:b9:
         a6:a3:21:b4:92:51:7f:14:4f:56:90:80:2e:29:21:81:3b:b6:
         56:52:2c:ac:c3:09:5c:11:ed:1a:60:35:36:b3:83:eb:8b:45:
         9b:c1:ea:4d:53:ba:d2:2b:4f:43:1f:81:ed:d0:d5:ee:70:dc:
         94:43:24:0d:f6:ce:f8:ad:e2:a1:5a:39:71:b6:ff:e0:0b:43:
         da:9c:cc:9c:1e:f2:61:0e:22:d7:ce:41:f4:bb:d2:71:b0:19:
         6b:44:6e:8b:b4:05:0e:eb:25:d8:62:72:61:05:42:c9:1e:80:
         ff:bd:2e:68:f0:bc:2d:38:79:17:08:6a:2d:72:14:03:c9:50:
         e6:1e:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:24 2026 by rpki-client