Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/292ea478-ba9f-3169-8a66-0feec8ce2208.roa
File:                     292ea478-ba9f-3169-8a66-0feec8ce2208.roa (raw, json)
Hash identifier:          zW102+NhL8zI/ohgaoDrUlfr5P5146+vOwuVn0ZsVhM=
Subject key identifier:   25:0D:B6:7C:5B:11:24:50:7B:53:EE:33:13:42:E7:BB:DE:46:50:FA
Certificate issuer:       /CN=52f26f5a-86c1-4542-9ca9-e43777bd570c
Certificate serial:       010D0C9F4328584D3B423B026240181B618FD000
Authority key identifier: E5:3F:B5:E0:8A:9D:D2:89:7F:CC:5C:4E:77:8C:1E:08:BC:51:AF:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/292ea478-ba9f-3169-8a66-0feec8ce2208.roa
Signing time:             Fri 20 Mar 2026 13:27:43 +0000
ROA not before:           Fri 20 Mar 2026 13:27:43 +0000
ROA not after:            Thu 18 Jun 2026 13:27:43 +0000
asID:                     7361
IP address blocks:        130.12.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:42:3b:02:62:40:18:1b:61:8f:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f26f5a-86c1-4542-9ca9-e43777bd570c
        Validity
            Not Before: Mar 20 13:27:43 2026 GMT
            Not After : Jun 18 13:27:43 2026 GMT
        Subject: CN=f2b211a2-61be-4e94-856d-4ec7ea4a5569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bc:20:e6:2e:b4:c1:8d:e5:d4:c0:62:bc:70:
                    eb:fa:00:51:c4:ab:37:f1:1a:8b:c8:25:04:6b:ab:
                    d2:75:52:fc:a6:76:53:3e:40:31:3a:86:29:39:60:
                    52:02:9d:9c:ff:d1:71:68:4c:40:16:11:9b:18:69:
                    f0:fc:fc:3f:5b:40:93:f0:89:4b:4e:24:a1:53:18:
                    0c:3d:5d:72:58:26:a3:b3:76:da:4d:27:42:68:ef:
                    dd:c8:b1:fd:b8:42:7a:c3:27:fb:de:e7:db:57:a9:
                    93:cd:a9:dc:e8:4e:c6:c9:2f:a5:1f:4b:02:cd:1d:
                    fe:20:b3:65:ac:2f:a5:a2:2b:91:ef:a4:4f:d6:da:
                    a3:0b:5a:3a:17:5c:14:a5:1f:4e:24:45:5c:b3:a1:
                    34:67:93:a5:67:cb:c0:53:c9:81:18:19:86:e2:8e:
                    17:88:96:08:b2:90:2a:9f:f7:da:2a:e7:c6:55:41:
                    45:99:d9:df:ed:55:06:46:88:f9:71:49:47:d3:c2:
                    7a:a1:c8:c1:da:88:fd:fe:e0:40:2e:aa:9f:0f:76:
                    57:5b:aa:66:45:ad:7f:ee:8c:6a:a2:fa:a6:ec:10:
                    d9:1f:a3:de:f2:b3:f9:94:03:30:d2:43:37:4d:45:
                    2f:69:7b:6f:3c:b7:99:d3:a3:2a:32:a7:9f:f1:7e:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0D:B6:7C:5B:11:24:50:7B:53:EE:33:13:42:E7:BB:DE:46:50:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/292ea478-ba9f-3169-8a66-0feec8ce2208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:3F:B5:E0:8A:9D:D2:89:7F:CC:5C:4E:77:8C:1E:08:BC:51:AF:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:28:af:c3:58:24:7e:e6:27:20:96:42:f6:83:c9:34:4f:58:
         49:f8:ea:c9:73:a8:4d:ba:0b:7c:85:21:ad:a1:be:6b:3b:25:
         54:84:60:19:65:6b:d0:91:67:0c:3e:d4:0a:0f:8b:74:73:6c:
         c5:35:c2:38:97:93:2b:82:99:77:e7:e5:ba:2b:4d:4f:fa:55:
         68:81:37:06:9a:6c:e3:a5:9a:5f:26:e4:4c:38:a2:36:4d:c0:
         14:0f:6e:f3:71:9e:dd:c5:96:b1:47:21:0d:4a:08:fd:95:42:
         49:bd:12:2d:a0:5e:2e:9a:84:3a:12:44:0d:3b:50:23:ef:ec:
         7e:5c:44:ef:78:8f:96:a4:a0:39:b8:d5:8a:82:cb:17:3a:07:
         3f:1e:19:e8:4a:6d:06:50:bb:7f:fb:9a:6f:41:b2:ae:87:e1:
         39:50:af:a5:93:e9:cb:d5:b4:21:ba:9e:84:63:d1:42:cc:17:
         8a:50:f9:95:26:81:46:4b:9d:4a:c6:81:e6:89:52:8c:95:48:
         84:ba:99:5c:bc:b5:dd:46:eb:c0:d7:70:71:37:20:b2:7e:a4:
         2c:90:28:e8:ce:36:79:01:21:66:74:b5:9f:e7:e9:fb:1e:4b:
         86:30:17:ea:fc:bc:41:34:31:5c:dd:dd:07:1e:13:44:93:45:
         dc:f1:aa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:47 2026 by rpki-client