Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/ea52c2c2-3f4a-39d3-8891-20d3e08757b9.roa
File:                     ea52c2c2-3f4a-39d3-8891-20d3e08757b9.roa (raw, json)
Hash identifier:          dwu2lgqo9IpX3G9vwjmmoHxB0tAb+ENn/1Oz2zY0GjA=
Subject key identifier:   42:A0:15:C9:83:3A:D7:22:E8:18:D4:EF:C3:C8:AF:D6:8E:68:B4:32
Certificate issuer:       /CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709
Certificate serial:       010D0C9F4328584D343A17B29458E1B3B5915280
Authority key identifier: 10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/ea52c2c2-3f4a-39d3-8891-20d3e08757b9.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     212177
IP address blocks:        130.12.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:17:b2:94:58:e1:b3:b5:91:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=abe1827a-17b7-4091-a371-45eb79ec5127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:27:b9:0c:7b:6d:c0:e6:a6:80:db:79:ec:be:
                    bc:97:ce:a5:87:e1:29:80:45:57:a9:aa:f4:68:2c:
                    d8:41:da:31:76:07:68:fb:c1:78:0d:bf:35:2a:b7:
                    0d:77:9e:8c:f6:ac:ca:bc:30:25:e7:45:d4:f2:62:
                    da:57:83:aa:68:6a:4c:f0:7d:55:c6:68:7b:cc:b7:
                    45:c3:f8:c3:10:7b:7a:0d:46:d6:16:a6:f8:76:0e:
                    4a:82:6d:e7:56:ff:14:d1:e7:80:99:ce:a7:76:3e:
                    b6:00:c5:4b:6c:1c:50:a8:54:c2:f7:8e:52:05:73:
                    ea:71:2b:b7:f4:4b:98:d7:e2:d8:6e:7a:60:26:57:
                    67:b8:bd:3d:77:47:68:33:ec:c7:b3:42:6a:64:d6:
                    af:c6:6f:0f:a3:87:82:e7:ee:bd:48:77:2d:9b:8d:
                    64:49:18:7b:ac:fd:c9:b9:60:2a:4c:a6:55:a7:b8:
                    cf:79:09:2b:53:94:5e:28:7b:46:59:1d:d0:56:39:
                    16:d2:24:90:ee:b0:1a:58:a0:b0:bb:d7:a5:3d:85:
                    c3:f7:6a:bd:55:4c:b9:84:5f:5f:98:f8:c6:09:c8:
                    53:a0:fb:a2:08:1c:26:c6:5d:c1:4e:0a:16:ea:b3:
                    78:b1:03:df:e4:71:36:4b:4c:ae:b2:1b:d7:e8:58:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A0:15:C9:83:3A:D7:22:E8:18:D4:EF:C3:C8:AF:D6:8E:68:B4:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/ea52c2c2-3f4a-39d3-8891-20d3e08757b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl

            X509v3 Authority Key Identifier:
                keyid:10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f5:26:86:17:ac:17:00:88:ee:da:29:fc:a5:62:38:83:b8:
         80:64:ab:fc:6f:b4:a4:82:44:a0:f0:b1:68:dd:9e:ca:6d:ed:
         f7:2e:4f:fd:e8:28:ba:8c:1e:07:8e:d3:03:7c:c7:b7:bd:76:
         32:14:9b:25:2c:85:68:ff:de:bc:1a:0a:f5:d0:33:b4:df:2e:
         e2:4f:82:72:14:f9:ee:09:65:e8:ce:cf:a0:57:37:42:65:3d:
         1e:ee:e8:a3:ee:48:e7:9c:fd:31:82:f6:0a:ae:8e:fe:67:c6:
         55:37:74:24:c0:6b:85:ba:ee:bc:b8:27:99:35:51:38:b0:51:
         21:0b:37:18:c8:6a:be:a1:7c:bf:43:37:a5:62:aa:f8:3e:27:
         88:d7:5b:b6:44:3a:5a:2e:67:6f:c8:92:9b:67:eb:13:13:12:
         65:fa:f5:4e:a3:12:fa:d3:d6:ed:47:40:ae:91:e8:54:98:91:
         0f:05:e9:bf:e0:31:49:cb:2b:fa:0a:2c:e1:a9:9c:1b:b6:50:
         ee:b3:46:a4:f2:f2:4e:54:1b:9e:c9:a0:28:a3:08:80:30:7f:
         71:b6:d5:87:6a:3d:9c:95:ed:47:7a:1c:64:cd:70:58:f6:83:
         02:1f:88:50:61:48:2b:66:46:cd:a5:a9:0a:48:ff:87:2e:19:
         c9:5e:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:04 2026 by rpki-client