Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa
File:                     a7a900ce-23ee-33b0-85ce-32106cfd925c.roa (raw, json)
Hash identifier:          HzYoMitCA7ENE+YQciOItNHeTTs6lRuxl1+LFdcbyzc=
Subject key identifier:   70:17:75:1A:E7:F3:24:FB:F8:91:14:7D:24:BA:97:77:FC:50:F1:8B
Certificate issuer:       /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial:       010D0C9F4328584F63F82169F1773655AF50BBC0
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     22191
IP address blocks:        130.45.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:21:69:f1:77:36:55:af:50:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=eb7b471b-752c-453e-84c8-a80460af8583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:65:28:6d:88:4d:eb:10:9a:9b:f7:59:3d:
                    9e:ef:79:9f:c9:08:65:c8:92:b6:5e:13:f1:fe:06:
                    3c:6c:2a:40:09:8b:90:03:5b:de:fa:79:5a:09:e0:
                    29:b9:f4:04:60:a7:34:f8:c8:3f:bb:bf:31:9d:8f:
                    51:4a:53:01:af:06:6a:aa:41:3d:7e:9f:7e:0b:9a:
                    a5:c6:3c:bc:94:7c:b5:76:01:74:4b:07:18:eb:c6:
                    c1:86:f2:c9:6b:63:56:ea:ee:ef:d1:91:e3:65:9d:
                    3e:e7:0a:af:0b:29:c2:f1:d4:78:10:77:34:bc:c1:
                    d2:07:7c:36:14:ad:09:fa:83:ee:a2:6b:00:6d:fd:
                    2a:c4:35:00:15:69:3b:a9:02:52:a1:5f:43:1a:f6:
                    75:ab:05:a2:f7:7e:4d:ca:fa:79:4c:bc:fc:80:73:
                    5e:3a:07:d4:1f:4a:8e:ac:63:2a:02:83:f6:af:78:
                    41:7d:64:0e:bb:2b:8b:6b:cc:a9:58:e6:1d:eb:91:
                    27:23:b4:d9:8e:00:23:d4:2e:ac:2e:ff:ea:3c:c7:
                    fb:0f:67:51:e5:75:26:b6:2f:ca:44:f6:01:08:29:
                    96:ec:76:1c:36:ed:ee:1e:96:02:df:dc:0d:74:15:
                    a7:7a:5d:6d:5f:c2:ef:55:64:d6:55:61:3a:75:57:
                    86:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:17:75:1A:E7:F3:24:FB:F8:91:14:7D:24:BA:97:77:FC:50:F1:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl

            X509v3 Authority Key Identifier:
                keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.45.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:7c:55:38:0c:51:fc:26:4c:e9:dc:08:ba:57:03:9f:66:d7:
         28:af:c0:33:a4:cf:a8:1e:99:85:a6:2d:80:66:04:d7:cd:31:
         0e:e5:01:90:5c:0c:38:bc:df:0e:9e:41:5b:61:05:dc:84:04:
         ca:54:a2:4f:70:a5:84:de:9d:57:2a:67:e3:ab:eb:3e:3d:b4:
         48:09:3c:cd:e2:de:db:02:7f:75:80:8c:e0:b1:10:3a:6e:1f:
         49:3b:a4:5c:3d:c9:ee:f9:bb:ca:3b:53:09:ec:b9:36:52:cb:
         12:f6:ac:56:0c:db:b8:5b:5a:d2:ee:64:fb:5c:8e:03:c6:73:
         43:a7:9f:ba:10:01:43:0d:30:b7:12:c0:a0:04:07:67:83:48:
         62:57:fb:2a:93:85:bd:2b:37:8d:f8:1e:6f:9a:ae:58:8c:0b:
         33:06:d2:a5:5b:08:14:e6:d0:67:26:28:50:e8:6d:a2:a3:77:
         c8:8d:b4:80:16:43:db:68:48:56:d3:0a:60:da:bb:5b:1e:d3:
         74:39:18:2a:42:01:b8:b1:42:af:b4:c0:3f:89:a4:75:7c:b6:
         d4:44:69:9f:5a:b8:28:d9:5b:43:f1:3c:01:88:ef:bf:2d:b2:
         af:cd:a0:8b:e9:08:e1:a4:b0:1a:e9:d6:e2:7c:ee:39:d8:8f:
         22:08:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:51:43 2026 by rpki-client