Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/fd2f7ee6-d599-3224-8bb5-608bf7fd7082.roa
File:                     fd2f7ee6-d599-3224-8bb5-608bf7fd7082.roa (raw, json)
Hash identifier:          DpN4o2EQsArR52uyr+atqQDamQ5X9QobyF7ytUd/d98=
Subject key identifier:   4D:68:9C:8B:BC:FC:BD:C1:55:46:24:C3:AF:AF:A1:34:F2:17:06:97
Certificate issuer:       /CN=4e15d598-623b-4ab3-ad43-b720fb599027
Certificate serial:       010D0C9F4328584D20AF3EE643630AEB08CED700
Authority key identifier: B0:0B:40:9A:14:8B:AE:3F:03:86:25:50:26:AB:3F:80:15:AD:E5:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/fd2f7ee6-d599-3224-8bb5-608bf7fd7082.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     17176
IP address blocks:        130.12.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:3e:e6:43:63:0a:eb:08:ce:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e15d598-623b-4ab3-ad43-b720fb599027
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=83f9b704-fd53-4a6a-9dcf-e9d0475ee621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:2b:2d:1d:aa:9c:86:36:1f:bc:c6:b7:85:
                    77:6a:71:67:04:cb:ca:01:b4:f0:6d:c5:74:95:a6:
                    c1:b3:c8:cf:9d:62:b4:1f:d9:2a:5c:a6:7c:0f:80:
                    78:9e:86:c9:0f:4a:48:08:a3:2c:60:00:1e:58:e9:
                    49:a1:ac:25:cd:4b:c4:41:81:0d:45:03:c5:1a:55:
                    c0:72:12:f5:89:fb:04:0a:c5:7a:50:2a:17:58:40:
                    62:cf:bf:de:c7:84:ad:a0:7f:60:f5:17:82:66:e8:
                    d2:ec:fa:59:0b:ad:aa:f4:6c:f2:32:31:91:c5:22:
                    12:0a:0a:49:0f:00:2a:59:dd:51:b2:52:dc:48:2b:
                    b9:02:e0:44:1e:bd:8a:6d:2c:ba:7b:af:94:26:6c:
                    30:39:08:75:75:0e:a2:30:e7:c8:e4:3e:02:59:b7:
                    19:fe:60:b3:11:f7:09:66:bd:61:cf:b6:3e:45:b9:
                    8d:90:3a:58:70:0a:a6:ed:d7:ab:ac:40:07:d7:e3:
                    a2:f4:20:f2:74:da:4f:32:4a:88:30:14:ab:67:07:
                    11:cd:08:23:2a:e5:a1:b9:c9:d7:41:d5:61:a8:54:
                    18:99:0d:31:cc:02:d1:b4:4b:30:0f:4e:71:7b:80:
                    95:1f:22:5d:0b:02:ee:7b:58:31:f3:ab:81:ad:49:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:68:9C:8B:BC:FC:BD:C1:55:46:24:C3:AF:AF:A1:34:F2:17:06:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/fd2f7ee6-d599-3224-8bb5-608bf7fd7082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.crl

            X509v3 Authority Key Identifier:
                keyid:B0:0B:40:9A:14:8B:AE:3F:03:86:25:50:26:AB:3F:80:15:AD:E5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:93:a1:46:0e:c3:77:36:d3:d6:e5:4f:12:6b:44:68:26:18:
         f6:69:53:8a:73:19:d0:97:79:a6:ba:2e:03:54:8d:9d:8b:f8:
         b5:25:a8:e6:03:db:fb:01:79:8a:c7:a8:09:f2:51:a8:bf:c1:
         21:f1:00:2d:13:e0:39:a8:8c:ec:7f:b1:ef:ee:9a:26:84:f2:
         22:90:cc:e8:37:9f:ac:d8:92:dc:b0:71:10:89:51:8a:39:12:
         41:fc:31:09:17:38:4d:57:91:03:cc:8e:f1:7a:b8:9e:61:3c:
         a7:60:66:c7:6a:c6:ab:1e:25:b6:da:40:61:65:5a:a5:d7:cf:
         30:f2:af:7d:e0:da:5a:36:99:49:84:b6:19:ac:c1:4b:37:12:
         c5:51:a7:6a:1d:a3:b8:2d:84:24:87:e9:31:b1:1e:4d:fe:68:
         80:7b:fa:b7:ed:25:d5:d1:39:bb:ea:96:ea:22:5d:af:38:4b:
         7e:67:36:54:97:3e:5e:16:72:06:8a:97:71:38:00:bb:c6:05:
         45:88:e6:02:36:cb:2f:b1:44:9c:3d:36:ac:db:1f:65:32:c5:
         15:d2:fe:6c:ad:49:5b:d5:f0:99:2c:2b:f6:06:48:f4:be:e1:
         48:9d:1b:b1:d0:cd:98:0e:60:ea:48:a6:25:5e:5e:20:69:c8:
         86:ba:04:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:41 2026 by rpki-client