Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/e3ba62b5-048d-3c3a-acc8-ef7d946038ec.roa
File:                     e3ba62b5-048d-3c3a-acc8-ef7d946038ec.roa (raw, json)
Hash identifier:          uiaFZsjC20jDjxIsr1EY/i0kK0O9/WXYArPhFktIa6Q=
Subject key identifier:   EC:CA:41:95:57:31:B4:C9:A3:A8:A0:DF:4F:F6:3B:13:08:6E:4A:63
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584E38C9C3DC2BED3FD2C00CE280
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/e3ba62b5-048d-3c3a-acc8-ef7d946038ec.roa
Signing time:             Fri 19 Jun 2026 09:00:12 +0000
ROA not before:           Fri 19 Jun 2026 09:00:12 +0000
ROA not after:            Thu 17 Sep 2026 09:00:12 +0000
asID:                     35039
IP address blocks:        130.214.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:c9:c3:dc:2b:ed:3f:d2:c0:0c:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jun 19 09:00:12 2026 GMT
            Not After : Sep 17 09:00:12 2026 GMT
        Subject: CN=9778fb03-651f-42bf-8710-da788b30ac5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b6:7a:0c:4a:79:c3:27:0e:79:30:24:f2:56:
                    aa:bd:97:9d:77:f2:75:ec:29:52:8f:d2:0d:7c:7d:
                    2a:8d:87:62:2c:3b:4d:e4:d1:a9:b2:7f:85:c5:1b:
                    2f:1f:4f:a3:a7:b7:f0:c9:f8:28:ac:83:84:a7:94:
                    3a:21:d0:ae:35:ab:b6:5d:35:bb:b3:5c:7c:67:22:
                    5f:bb:42:dc:03:a2:16:3d:33:62:22:25:44:8d:db:
                    fd:38:4c:65:e0:c5:e4:55:d2:48:7d:b7:2c:18:17:
                    c6:71:7d:24:9a:62:68:a6:59:c2:14:01:cf:95:8b:
                    4a:90:a9:0d:7c:3d:dc:8e:47:b7:d3:dd:1a:4a:64:
                    f7:57:97:d6:4f:81:fb:f2:aa:51:8a:71:0b:65:eb:
                    dd:5e:fd:fb:c5:86:72:86:d0:d1:17:d9:3a:af:9e:
                    9c:32:16:35:4e:d8:a9:73:01:e2:6c:92:f4:21:22:
                    9c:bf:b9:62:b3:91:3f:97:31:61:c5:64:45:cd:ab:
                    ad:7c:1e:ea:06:61:c9:a6:b7:12:86:0d:73:03:f1:
                    a6:01:76:c9:70:95:58:44:00:17:7f:2d:3e:ca:ba:
                    9a:96:c8:42:01:dc:74:19:b9:c3:63:dc:6e:01:da:
                    9d:da:d9:4d:a5:67:74:22:26:ce:b8:ba:be:eb:b9:
                    d5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CA:41:95:57:31:B4:C9:A3:A8:A0:DF:4F:F6:3B:13:08:6E:4A:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/e3ba62b5-048d-3c3a-acc8-ef7d946038ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b2:45:dc:23:0a:81:58:8d:44:b2:0f:4b:cb:68:bc:03:3a:
         1a:39:86:cf:38:9d:5c:27:56:18:58:dc:a3:2b:b8:db:b1:36:
         ce:35:63:d2:03:8e:35:b0:6b:09:bf:cf:a7:44:f8:fd:8a:60:
         ec:90:86:65:9c:4c:22:71:cd:30:ea:17:8b:27:c4:9f:6a:b2:
         2c:4e:3e:f0:28:eb:aa:78:db:7b:40:16:d0:0c:91:f3:47:b8:
         9b:c0:b8:95:a2:46:e8:99:8c:30:aa:b9:a1:8d:12:ea:e4:b9:
         be:22:7a:7b:d2:89:d6:f4:17:37:43:65:72:3d:49:d4:9d:03:
         37:9d:73:69:3f:83:50:c0:8c:17:18:51:7d:8f:d8:0d:a8:73:
         c0:f0:82:22:9a:a1:ea:cc:4b:28:c4:2a:51:a5:43:e0:b9:84:
         fd:24:51:2e:9c:ac:da:60:f8:37:c0:ba:e7:48:90:c9:10:0d:
         65:2c:d7:43:91:3f:52:0c:61:03:a3:e8:fa:7e:53:ba:d9:6e:
         de:0a:37:aa:f9:2a:3f:a1:3e:6d:fb:b5:9d:6b:05:00:e8:3b:
         b5:d2:85:47:fa:47:f2:5a:74:7f:60:9f:a6:c6:e1:cb:a3:df:
         8e:88:72:ab:48:54:66:80:5f:3c:d0:3a:87:cb:87:7a:fb:24:
         16:1e:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:27:37 2026 by rpki-client