Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa
File:                     98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa (raw, json)
Hash identifier:          mKIeW6HTqUKuf5MZaHF/vh2SOCnYfFNSh98v5guY/bE=
Subject key identifier:   6C:46:5A:C4:4A:61:F8:49:7A:FE:6F:FA:25:5D:5E:5D:3F:EB:D4:80
Certificate issuer:       /CN=35fbc5b3-479b-405d-8578-f7c792a1f375
Certificate serial:       010D0C9F4328584D492A6E82E93002C391AF8C00
Authority key identifier: 0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     397071
IP address blocks:        130.51.100.0/24 maxlen: 24
                          130.51.101.0/24 maxlen: 24
                          130.51.102.0/24 maxlen: 24
                          130.51.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:6e:82:e9:30:02:c3:91:af:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35fbc5b3-479b-405d-8578-f7c792a1f375
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=f7689e16-d94e-4ed2-961c-18db96eb9ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:8c:44:ec:5b:42:40:55:d3:d5:f2:97:5a:
                    9a:d9:e5:cd:01:4e:a7:15:e7:61:4a:9f:7c:7c:8d:
                    9a:0b:d7:de:6c:45:a1:6b:aa:60:25:c1:ea:01:cb:
                    ff:d8:84:80:a3:81:1a:4c:4a:b9:d3:35:f7:bf:32:
                    4b:39:20:cc:d2:88:15:16:6d:ee:d5:1c:69:9f:11:
                    94:70:80:a9:d6:14:20:d0:f3:c2:32:46:6a:cb:c7:
                    f8:b0:67:ec:2f:b8:f0:66:15:86:ed:12:d0:61:e1:
                    5f:59:71:72:d4:e0:6c:30:62:a1:73:2c:65:65:5b:
                    a4:dd:d2:20:ad:3b:dc:d8:91:aa:c8:9d:5f:4f:b2:
                    14:c7:f3:d0:e3:a2:db:fd:c3:88:81:52:dc:fd:b7:
                    13:45:ea:b9:84:4b:6e:1a:02:1a:74:ab:8d:a0:69:
                    c4:38:1a:c1:83:72:3e:26:54:1e:22:05:e1:b8:90:
                    f7:f3:a1:dc:fb:88:c4:0b:4f:f2:29:42:22:d1:1f:
                    3f:70:ea:fd:45:14:c7:1c:22:d4:43:45:2b:5f:63:
                    f0:35:12:0d:ec:d8:3f:94:88:76:be:57:49:7f:0e:
                    e5:f4:d7:8c:f5:c2:95:55:c4:85:c7:bd:ca:b1:b1:
                    94:50:9f:b6:22:fe:7b:c6:34:42:fe:12:14:1a:61:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:46:5A:C4:4A:61:F8:49:7A:FE:6F:FA:25:5D:5E:5D:3F:EB:D4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.crl

            X509v3 Authority Key Identifier:
                keyid:0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:03:8e:f5:8d:8d:8e:32:c8:83:a8:13:a5:69:08:97:a7:2f:
         c2:c8:96:ef:d4:e9:55:65:be:91:7d:25:7b:9c:f6:78:89:02:
         78:d3:f0:a1:88:de:a2:15:0b:56:88:59:a2:e4:62:49:23:32:
         24:19:03:34:d3:8e:30:1e:82:02:38:19:f3:e3:c7:95:a8:53:
         87:c5:98:3d:82:6f:1b:e9:82:b1:ea:cd:99:cd:01:8a:05:37:
         b0:05:1a:e3:ef:93:4b:ed:22:c6:98:8c:3a:73:b9:c7:b5:b3:
         2d:6b:41:e5:08:8d:2e:78:7a:d6:76:6a:10:9c:6c:c8:c7:ea:
         89:5f:c6:06:f7:15:f8:0b:7c:9b:d1:36:ed:31:25:5a:45:2d:
         fc:6a:b0:58:76:0e:e1:5c:73:d2:49:b5:dc:98:9e:33:2a:dd:
         8b:97:ed:7e:7f:9b:f0:e3:08:26:40:aa:ca:b6:67:2e:0d:85:
         09:8f:f8:ba:00:ca:7c:6e:b4:16:3f:01:6c:71:18:6f:87:24:
         38:db:53:93:96:ef:78:61:86:da:fc:8b:8e:9b:ed:15:1f:7a:
         3a:be:e4:ce:09:f7:ba:ee:0a:e3:bd:f0:c1:3d:b0:ca:42:3d:
         6a:02:8a:e1:7c:23:5e:a6:06:1d:8c:b9:a9:69:54:9e:d5:a4:
         ab:3e:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:09:42 2026 by rpki-client