Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/77ea4de3-d628-3435-85f2-26548bb88a59.roa
File:                     77ea4de3-d628-3435-85f2-26548bb88a59.roa (raw, json)
Hash identifier:          VCLd9SGX4GkRzCZcHRKv+Iub5A0wZ0sK122x3t4/DQ8=
Subject key identifier:   23:CF:CD:08:AD:A2:4C:7B:89:C5:3C:EB:83:CE:5B:96:7C:89:77:E9
Certificate issuer:       /CN=74448f2d-e70e-4042-9da0-e023ba682319
Certificate serial:       010D0C9F4328584D343A3912A627B0D719DBB900
Authority key identifier: 63:21:A1:E6:9F:C4:E9:2F:C9:47:24:A5:3D:0B:45:50:E3:6F:BF:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/77ea4de3-d628-3435-85f2-26548bb88a59.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     35280
IP address blocks:        130.250.222.0/24 maxlen: 24
                          130.250.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:39:12:a6:27:b0:d7:19:db:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74448f2d-e70e-4042-9da0-e023ba682319
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=3a05fcaf-0523-4514-a535-96fd65cd1c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:28:bb:3d:20:24:0d:22:22:f9:8b:8e:b3:
                    f6:ab:75:81:1d:6f:14:a7:4b:a9:17:63:dd:a8:2c:
                    02:99:ff:f2:c4:80:75:ad:d1:72:3a:34:d6:5d:bf:
                    2a:94:81:4a:f3:90:8b:2f:ea:76:56:78:81:24:2d:
                    db:e5:2e:90:f6:62:3f:05:ce:24:5d:fe:d3:b0:d9:
                    db:61:c3:08:e0:4e:f6:41:eb:45:4e:d9:e3:34:4e:
                    23:74:3d:01:40:d1:7f:3b:a9:cc:cb:bc:58:f4:e4:
                    5a:1f:8c:71:ed:fc:1f:ed:27:f0:e1:df:68:01:92:
                    e5:fd:c7:35:0c:9d:8a:51:22:ef:5a:ca:ab:95:22:
                    99:9c:07:d2:68:17:ba:c4:e5:ce:60:35:fd:b0:6b:
                    d9:44:1d:38:85:29:d9:15:7f:9e:9b:9f:a1:27:87:
                    11:8a:8f:90:76:7b:68:0c:c3:8e:28:f8:39:af:11:
                    f9:f3:c5:7d:57:9f:86:0f:ea:84:ce:e5:3c:51:e3:
                    e7:1d:2c:50:23:00:67:44:a3:a0:30:7f:6d:87:fe:
                    b4:6d:95:a4:8d:b9:1e:07:5d:47:d5:3e:53:a2:0d:
                    c1:c3:5d:0d:28:31:9f:35:6f:bd:81:5e:ce:18:cc:
                    24:19:80:1a:fc:8d:43:30:fa:2b:ca:27:0f:53:83:
                    e1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CF:CD:08:AD:A2:4C:7B:89:C5:3C:EB:83:CE:5B:96:7C:89:77:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/77ea4de3-d628-3435-85f2-26548bb88a59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.crl

            X509v3 Authority Key Identifier:
                keyid:63:21:A1:E6:9F:C4:E9:2F:C9:47:24:A5:3D:0B:45:50:E3:6F:BF:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:94:f6:b0:ad:5d:21:e7:dd:b1:35:a4:36:ed:65:9d:87:
         17:ab:a5:b1:23:69:67:71:66:e3:9a:dd:5a:13:14:28:2c:67:
         2a:7c:de:13:6f:bc:e7:59:18:9b:d8:12:64:09:31:24:f0:47:
         6d:fa:17:25:c5:a2:88:e0:2e:2b:c8:85:7a:2b:ed:3a:b3:8c:
         2c:d2:de:cd:c1:32:95:b3:8a:5f:24:f2:99:aa:73:0e:9c:4c:
         c4:22:ff:a8:df:b7:63:a2:60:dc:a2:ab:8e:18:71:14:1f:40:
         d4:95:4f:d2:d4:cc:a2:a1:77:c1:65:1a:68:e5:0c:62:0d:ea:
         f4:c0:5d:37:fc:bb:df:22:f8:61:70:c5:df:81:1d:6c:0e:1d:
         38:1f:13:13:cf:b8:b8:5c:35:a6:c4:4b:db:6e:3d:26:42:07:
         0d:a2:05:98:9f:3d:29:0b:b2:be:16:80:72:6c:4f:db:c8:40:
         46:aa:7b:0c:e4:4e:c5:a5:f4:e8:d4:fe:85:0b:5a:59:0a:ea:
         30:53:37:5a:13:e7:a9:92:15:32:43:f4:38:a2:10:d9:50:ff:
         ec:35:9f:96:9e:3c:59:a1:9d:74:82:3f:52:8b:63:13:e3:f1:
         3f:c5:29:a9:ba:82:c0:68:38:d6:f4:e6:69:5e:84:3c:70:e3:
         b9:b7:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:27 2026 by rpki-client