Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/7025b4b3-92f9-353f-b25f-c425c980efa2.roa
File:                     7025b4b3-92f9-353f-b25f-c425c980efa2.roa (raw, json)
Hash identifier:          LNkN3DnFd0mE1VKFmvmhO5LT1v3GwS3ZHkrqYjYYpio=
Subject key identifier:   17:12:7E:0E:B1:0E:91:48:41:92:4E:19:AE:F1:05:9A:71:0A:EE:CA
Certificate issuer:       /CN=16d71376-e8fa-4e6c-bbf4-978708d88645
Certificate serial:       010D0C9F4328584D492A51BB3D116C1A52FCDA00
Authority key identifier: 4F:1F:74:1C:B5:05:7E:10:C8:53:1F:E1:B4:D5:44:29:C1:44:B0:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/7025b4b3-92f9-353f-b25f-c425c980efa2.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     401311
IP address blocks:        130.12.105.0/24 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/16d71376-e8fa-4e6c-bbf4-978708d88645.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/16d71376-e8fa-4e6c-bbf4-978708d88645.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:51:bb:3d:11:6c:1a:52:fc:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d71376-e8fa-4e6c-bbf4-978708d88645
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=5ce3a59c-d296-47fb-8bdb-bfe980b79784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:1a:7b:f5:16:ca:b3:1e:52:ae:ae:5d:35:
                    71:08:30:27:c1:88:ea:15:62:a7:eb:fd:94:36:4a:
                    f1:54:37:ef:35:77:1c:73:f3:43:6d:27:25:e1:e0:
                    57:9a:19:cd:af:61:e6:f8:a7:93:f4:20:8a:47:54:
                    cf:90:5e:2f:17:8b:0d:48:5c:63:3c:49:d7:95:b9:
                    56:70:a3:12:bb:14:db:8b:16:4b:ee:dc:59:49:36:
                    f3:e5:54:59:6d:e3:66:7e:83:26:e7:b2:33:36:48:
                    b4:7a:8d:28:cf:44:36:9d:c5:43:71:c3:22:8c:1b:
                    67:b0:c2:c8:64:5b:0b:3e:e0:21:1f:8c:dd:45:18:
                    21:6d:4b:42:fa:27:f1:17:4a:11:0f:50:01:4d:d7:
                    4c:2d:ec:85:03:69:20:25:7e:ab:98:2f:ac:ad:80:
                    3e:f8:ae:21:55:df:e6:54:4b:e2:f9:20:60:b5:1a:
                    03:9e:ca:c7:c5:df:e1:34:6d:af:77:3e:2a:17:1e:
                    b1:32:e9:6e:cc:f9:89:3e:03:01:0e:4a:a8:dc:22:
                    41:0d:75:a6:02:fe:5d:43:32:63:a2:ee:85:77:b5:
                    10:f8:28:9c:8a:24:46:96:a4:9a:6c:d2:e2:46:65:
                    f0:1c:12:d3:60:af:31:8c:97:91:ca:e7:45:3f:97:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:12:7E:0E:B1:0E:91:48:41:92:4E:19:AE:F1:05:9A:71:0A:EE:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/7025b4b3-92f9-353f-b25f-c425c980efa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/16d71376-e8fa-4e6c-bbf4-978708d88645.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1F:74:1C:B5:05:7E:10:C8:53:1F:E1:B4:D5:44:29:C1:44:B0:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:bd:51:ff:cc:1a:ba:bb:c4:75:c9:bb:61:04:8d:be:c4:d0:
         37:1c:de:d4:96:53:1d:a8:20:eb:f7:fd:e5:15:13:bc:7a:37:
         94:39:45:8a:0e:33:92:7c:15:34:56:80:9f:9b:71:98:ef:aa:
         4f:72:bf:80:d8:78:14:eb:80:0f:dd:48:bf:dd:a0:75:ed:51:
         7b:ea:ce:f0:d5:7e:46:94:a3:07:e7:bb:bd:f5:59:f0:cc:49:
         31:12:a2:31:99:79:1f:12:bc:69:5d:64:37:5d:e2:9c:36:af:
         e7:83:4d:09:88:44:1e:80:23:fb:ce:ab:da:5d:1f:50:05:3e:
         a5:18:45:f7:79:cb:e7:df:32:a4:87:fc:dc:52:95:a9:e9:1d:
         7b:53:8c:57:f2:b4:65:ff:75:c8:a0:12:7a:e4:22:d0:b7:c0:
         69:02:a7:54:51:bb:a7:ce:c2:75:f1:00:fc:af:df:5b:0c:ea:
         67:9c:e2:25:6c:0e:63:c8:29:68:88:77:bd:70:0b:aa:97:84:
         70:ae:22:b7:2b:43:03:dc:27:1e:c1:a8:16:bb:ee:73:7a:df:
         54:a1:7e:b6:4b:8d:99:04:fd:6d:3c:ab:d1:e3:f7:5a:5e:75:
         3e:8d:b2:40:3f:fd:6b:68:b7:45:01:24:b8:c5:24:6f:17:ab:
         c0:9f:c4:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKlG7PRFsGlL82gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTZkNzEzNzYtZThmYS00ZTZjLWJiZjQtOTc4NzA4ZDg4
NjQ1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
NWNlM2E1OWMtZDI5Ni00N2ZiLThiZGItYmZlOTgwYjc5Nzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1oae/UWyrMeUq6uXTVxCDAnwYjqFWKn6/2U
NkrxVDfvNXccc/NDbScl4eBXmhnNr2Hm+KeT9CCKR1TPkF4vF4sNSFxjPEnXlblW
cKMSuxTbixZL7txZSTbz5VRZbeNmfoMm57IzNki0eo0oz0Q2ncVDccMijBtnsMLI
ZFsLPuAhH4zdRRghbUtC+ifxF0oRD1ABTddMLeyFA2kgJX6rmC+srYA++K4hVd/m
VEvi+SBgtRoDnsrHxd/hNG2vdz4qFx6xMuluzPmJPgMBDkqo3CJBDXWmAv5dQzJj
ou6Fd7UQ+CiciiRGlqSabNLiRmXwHBLTYK8xjJeRyudFP5cVVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcSfg6xDpFIQZJOGa7xBZpxCu7KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNmQ3
MTM3Ni1lOGZhLTRlNmMtYmJmNC05Nzg3MDhkODg2NDUvNzAyNWI0YjMtOTJmOS0z
NTNmLWIyNWYtYzQyNWM5ODBlZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTZkNzEzNzYtZThmYS00ZTZjLWJi
ZjQtOTc4NzA4ZDg4NjQ1LzE2ZDcxMzc2LWU4ZmEtNGU2Yy1iYmY0LTk3ODcwOGQ4
ODY0NS5jcmwwHwYDVR0jBBgwFoAUTx90HLUFfhDIUx/htNVEKcFEsKYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNmQ3MTM3Ni1lOGZhLTRlNmMtYmJmNC05Nzg3
MDhkODg2NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHe9Uf/MGrq7xHXJu2EEjb7E0Dcc3tSWUx2oIOv3/eUVE7x6N5Q5RYoO
M5J8FTRWgJ+bcZjvqk9yv4DYeBTrgA/dSL/doHXtUXvqzvDVfkaUowfnu731WfDM
STESojGZeR8SvGldZDdd4pw2r+eDTQmIRB6AI/vOq9pdH1AFPqUYRfd5y+ffMqSH
/NxSlanpHXtTjFfytGX/dcigEnrkItC3wGkCp1RRu6fOwnXxAPyv31sM6mec4iVs
DmPIKWiId71wC6qXhHCuIrcrQwPcJx7BqBa77nN631ShfrZLjZkE/W08q9Hj91pe
dT6NskA//Wtot0UBJLjFJG8Xq8CfxGw=
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:24:54 2026 by rpki-client