Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/df3639fb-d567-3ed8-bdb5-f77a98d07476.roa
File:                     df3639fb-d567-3ed8-bdb5-f77a98d07476.roa (raw, json)
Hash identifier:          TaJ5t4NAjtTEdEaKM/JwfXGM60D/Mn9v15iexMxKD+U=
Subject key identifier:   8D:F7:7A:C4:4C:AD:E9:88:26:23:45:8A:1E:FF:4D:98:00:19:14:6D
Certificate issuer:       /CN=0e425ca6-d583-4845-b329-c74ded17c483
Certificate serial:       010D0C9F4328584D8C2A99C146B5191C46281FC0
Authority key identifier: AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/df3639fb-d567-3ed8-bdb5-f77a98d07476.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     20200
IP address blocks:        130.12.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:99:c1:46:b5:19:1c:46:28:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e425ca6-d583-4845-b329-c74ded17c483
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=53735a6b-53f2-4221-8eb3-f4ec7025ce3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fa:50:68:e8:cc:3f:99:aa:2b:ec:c1:e4:c1:
                    19:d7:99:9d:0c:85:f7:ed:92:ea:eb:f1:57:b5:e8:
                    94:4d:91:37:a0:d5:10:ad:d1:92:47:e8:07:22:05:
                    e8:81:63:7a:1a:05:08:57:80:28:84:4a:f1:f6:a0:
                    31:3a:0d:83:a0:0a:d5:85:bc:80:6e:53:37:45:f3:
                    d7:5f:72:62:06:88:b5:2b:bf:08:d8:d7:04:2e:6b:
                    cc:43:a5:12:e9:6f:4c:63:dd:cd:ee:d1:e7:b0:27:
                    90:4e:dc:2e:04:74:c8:0d:e4:a7:7e:bb:14:30:97:
                    f7:a9:8b:a2:bf:f2:5f:4a:0e:ee:9e:3e:8b:2a:e2:
                    da:9f:a4:f0:54:37:0f:89:05:83:6a:1a:59:e3:6b:
                    89:ee:6b:0f:75:43:da:00:e9:a0:c4:bc:d3:02:66:
                    58:f3:7c:63:f1:3c:e8:36:cf:ce:9a:bf:bc:fc:42:
                    e1:d1:9f:5b:4e:e6:e5:c4:f2:40:b9:8f:ab:0d:4c:
                    7b:6d:03:67:f2:90:b3:ce:79:20:c1:fd:b7:06:10:
                    93:45:3c:9e:2f:01:4f:e9:0b:17:0d:f7:25:7c:8f:
                    27:a6:14:eb:38:e7:e2:7b:5b:44:b4:5a:6d:55:04:
                    96:ef:ca:3f:e9:12:32:e3:a9:a2:90:59:07:91:9d:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F7:7A:C4:4C:AD:E9:88:26:23:45:8A:1E:FF:4D:98:00:19:14:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/df3639fb-d567-3ed8-bdb5-f77a98d07476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl

            X509v3 Authority Key Identifier:
                keyid:AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b2:b3:f5:5a:ad:67:9b:d6:4a:00:f7:55:05:1b:ae:cf:3c:
         e5:77:bc:58:3b:e0:3c:68:40:07:7d:4a:fe:d0:2c:08:03:44:
         e0:b4:54:ff:ee:33:0c:3b:a3:eb:80:d3:96:b0:bb:47:e5:c2:
         46:75:f1:b1:7e:8d:de:14:68:db:fe:bb:ee:ea:40:b6:d1:51:
         2a:e6:4e:be:74:6d:22:38:3e:5e:6c:8e:f7:e5:10:b0:93:c8:
         18:d5:e7:33:78:e8:4e:80:06:16:be:72:44:2a:81:2c:5a:9b:
         5b:a9:b3:c9:7c:91:dd:1f:59:46:3f:2a:ff:86:a8:68:5e:70:
         34:a7:62:17:91:e8:b9:6e:67:09:c0:25:b0:c4:be:e3:84:fe:
         71:e0:6f:61:16:e7:c4:bc:18:64:19:eb:59:33:d7:71:02:6f:
         f5:ae:63:3d:e3:6f:ed:78:46:a9:96:54:e7:ff:a0:45:bd:3a:
         7a:34:9f:fe:0f:df:85:35:dc:0c:23:f6:f6:75:13:77:29:bf:
         33:cc:e6:c8:c6:da:e5:81:1f:1b:cf:ec:24:af:a7:ed:aa:20:
         45:d2:20:ce:72:3f:88:8e:61:ef:1a:87:b1:db:b6:95:c0:1d:
         a9:60:85:dc:23:05:c2:e4:53:12:ab:7b:5f:81:42:f1:8b:9c:
         3a:fd:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:23:10 2026 by rpki-client