Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/7c03c62f-1dcb-3eea-be58-22aad5a10dc5.roa
File:                     7c03c62f-1dcb-3eea-be58-22aad5a10dc5.roa (raw, json)
Hash identifier:          G+QsMq6c5FK8Pr+UwMd0Cm3m2yNllHpaeWhOu+tRsO4=
Subject key identifier:   15:BC:24:4F:95:97:C3:2F:1B:85:D8:9C:F7:39:F0:92:29:4C:E5:77
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F4328584F1F924ADA638272DB0A08C740
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/7c03c62f-1dcb-3eea-be58-22aad5a10dc5.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     32340
IP address blocks:        130.12.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:4a:da:63:82:72:db:0a:08:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=1cfa806f-dfa2-45ff-b33c-4bee76559d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:e6:58:00:8c:ca:ae:ea:0d:99:20:1e:67:
                    5f:2a:a2:b8:32:20:e3:7e:7d:27:88:8f:d2:59:fb:
                    b1:eb:68:53:16:39:3b:8e:4b:4c:a4:0a:71:c8:7d:
                    d8:70:93:b3:ef:ca:ff:bc:d5:8d:37:e4:ce:26:8b:
                    b5:6f:bf:dd:1b:89:ce:3d:f0:7d:bf:59:ea:e6:51:
                    3b:3e:3f:c7:10:54:48:8a:a0:32:2a:02:b8:6e:2a:
                    f3:81:46:04:24:f8:c8:1f:a6:07:ed:18:6c:7f:53:
                    f1:05:a3:e7:36:43:36:38:66:f4:e5:8c:16:ee:da:
                    36:1d:76:fe:98:42:f9:ab:15:5d:d3:18:b6:72:02:
                    95:58:cf:c3:4c:f1:2e:7f:cb:76:13:76:ee:4c:fb:
                    4d:44:68:2f:d4:aa:b0:41:a6:11:c0:f9:61:04:9b:
                    d5:dd:03:13:83:87:ac:0b:7f:3e:91:5b:56:63:ad:
                    c0:3d:b6:9c:76:3c:4d:a8:41:fa:6b:b3:ed:42:cd:
                    a5:05:54:04:2a:a0:09:2f:55:c5:44:6f:a4:22:94:
                    ad:53:eb:46:28:1c:1d:7b:53:a4:dd:74:56:9f:ec:
                    d7:d2:80:43:55:9b:8f:63:17:82:c3:73:a8:f1:ed:
                    d9:cb:c6:c6:6f:a8:5c:36:ba:11:52:5a:8f:88:25:
                    7d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BC:24:4F:95:97:C3:2F:1B:85:D8:9C:F7:39:F0:92:29:4C:E5:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/7c03c62f-1dcb-3eea-be58-22aad5a10dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c2:1d:06:cb:49:0e:17:47:9e:cd:c6:89:1a:81:ce:fc:b7:
         d8:ed:00:fd:e1:3c:02:aa:97:37:8d:cf:9b:26:65:ac:04:92:
         f7:b2:36:17:41:e3:b2:0c:56:1e:dd:ba:4f:4b:a9:b0:11:10:
         10:f1:67:90:73:31:b5:fa:03:f0:55:78:36:62:11:29:7b:00:
         10:eb:6b:33:f2:c1:5a:56:d5:26:b0:93:ee:fd:1b:89:ed:94:
         7c:da:69:51:18:56:dd:03:8f:18:77:4c:a1:be:37:a8:da:ba:
         4f:a4:53:c7:cb:b0:8b:92:2d:6d:71:bf:04:91:60:c2:2f:a8:
         1a:18:30:ae:32:13:9c:2a:e2:cb:de:df:bf:86:b9:bf:63:d3:
         82:8d:4b:1a:ba:c5:eb:0b:63:87:06:3a:35:0e:57:68:df:43:
         8e:1e:65:20:32:f0:93:0d:63:3e:58:9a:98:cd:b3:90:98:01:
         79:2d:ec:6b:00:1a:db:93:42:79:dd:84:c7:88:9b:03:7c:73:
         83:f0:e2:01:b0:23:49:9d:f7:a3:21:84:ba:69:67:b9:fc:fa:
         01:07:46:30:24:f1:61:34:c3:f2:d8:7f:ee:32:03:57:44:a3:
         04:e0:67:90:b8:eb:71:ef:86:a5:1c:d0:c5:00:af:f4:11:55:
         f8:11:de:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:23:30 2026 by rpki-client