Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/4e8b30a6-00ee-3850-804f-65afebd627ac.roa
File:                     4e8b30a6-00ee-3850-804f-65afebd627ac.roa (raw, json)
Hash identifier:          8fJC4ZhdLtUENmr4HW9CXpKaoMIflPayc3yfFsEirpc=
Subject key identifier:   49:0C:50:9E:49:71:16:09:67:80:2B:B7:AF:1D:40:CC:2A:7F:6C:2C
Certificate issuer:       /CN=8a6412c9-a3f0-428f-87a2-63602f7bcc08
Certificate serial:       010D0C9F4328584DAAE04D8D8F7B6340440E1AC0
Authority key identifier: DD:7E:3E:BE:EC:F1:5B:3A:5F:8A:6E:C8:92:18:21:C0:4F:DD:50:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/4e8b30a6-00ee-3850-804f-65afebd627ac.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     19211
IP address blocks:        130.12.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/8a6412c9-a3f0-428f-87a2-63602f7bcc08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/8a6412c9-a3f0-428f-87a2-63602f7bcc08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:4d:8d:8f:7b:63:40:44:0e:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6412c9-a3f0-428f-87a2-63602f7bcc08
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=65064d48-af6b-400c-9195-6d69146bd1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:3a:60:d3:99:3e:06:38:ec:e2:38:5a:90:
                    4f:1d:b8:49:d2:a7:49:22:61:c5:ac:de:78:e0:7a:
                    06:64:c8:8b:c2:c2:a4:f6:18:bd:16:86:e7:49:f4:
                    4f:f4:69:06:49:d0:bd:20:98:70:d9:f7:4d:00:16:
                    d1:ad:ec:f1:01:86:98:9b:47:7e:a9:87:d5:c4:4c:
                    c4:54:bd:e1:d4:37:5f:b2:aa:6c:54:b6:34:e6:03:
                    af:d2:c2:24:c4:4c:cb:8d:65:1e:f2:0d:f1:97:43:
                    aa:e0:27:c2:c0:bc:48:1e:cb:6d:6c:19:76:21:43:
                    25:e1:dd:cd:c9:40:9f:74:02:90:a3:8b:29:ae:b3:
                    77:48:7b:d2:7b:5b:00:c0:43:d6:74:64:33:f6:87:
                    26:c9:25:ea:d3:d1:19:31:75:3e:2c:82:83:44:a1:
                    db:b6:97:be:98:db:8b:b8:72:9e:a2:d9:c6:54:66:
                    16:d4:3d:ad:8f:d3:c5:9b:cd:02:88:71:b1:28:73:
                    8d:15:33:7d:09:e0:55:68:57:36:11:13:af:52:84:
                    f4:14:13:dc:24:9a:b5:65:e1:89:53:fc:a0:1c:98:
                    92:67:a8:dc:6c:0b:fa:e0:6c:2d:dd:20:b0:80:59:
                    31:bb:96:15:0f:d7:9e:50:4a:4b:f2:61:86:96:7c:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0C:50:9E:49:71:16:09:67:80:2B:B7:AF:1D:40:CC:2A:7F:6C:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/4e8b30a6-00ee-3850-804f-65afebd627ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/8a6412c9-a3f0-428f-87a2-63602f7bcc08.crl

            X509v3 Authority Key Identifier:
                keyid:DD:7E:3E:BE:EC:F1:5B:3A:5F:8A:6E:C8:92:18:21:C0:4F:DD:50:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:23:59:2b:16:13:fc:49:5f:ac:2f:d8:71:05:22:07:db:98:
         55:6b:ee:1f:49:9c:79:19:66:9e:a1:db:92:5b:17:68:13:1a:
         38:3d:1d:54:34:24:60:56:a6:5d:6e:54:e4:52:49:55:0f:81:
         1c:f0:46:4f:69:f8:9c:b5:f6:5a:ed:ed:35:df:69:ea:5f:1d:
         15:36:df:5f:47:37:e6:e8:98:21:fa:ec:61:31:1f:02:8c:80:
         63:62:be:06:61:77:4b:a7:23:51:63:74:bd:b6:ba:21:24:56:
         ac:2c:c3:35:bb:59:a8:bd:84:7d:8c:d3:5f:10:7f:df:e3:4c:
         7f:03:c9:d7:99:47:58:68:2a:46:46:7a:ae:7a:bd:e1:73:6e:
         b3:10:ca:c4:f6:f4:5e:d3:a3:94:5e:73:e2:8b:a9:42:aa:a9:
         79:b2:60:c6:65:2d:89:35:07:ee:93:3c:23:69:59:78:40:15:
         36:64:3f:fe:42:b2:0c:ad:56:a5:25:ba:d1:44:d1:a1:db:7a:
         8d:64:b9:3f:bc:3e:0c:d9:f2:68:50:f2:98:88:de:1c:a4:26:
         c6:64:69:43:9a:75:8c:d9:94:73:51:c7:b3:af:57:bb:95:b2:
         e5:a6:ed:37:1d:f0:f1:09:b7:12:98:f3:a2:a2:4a:9f:db:a4:
         5e:be:bc:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4E2Nj3tjQEQOGsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE2NDEyYzktYTNmMC00MjhmLTg3YTItNjM2MDJmN2Jj
YzA4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
NjUwNjRkNDgtYWY2Yi00MDBjLTkxOTUtNmQ2OTE0NmJkMWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38g6YNOZPgY47OI4WpBPHbhJ0qdJImHFrN54
4HoGZMiLwsKk9hi9FobnSfRP9GkGSdC9IJhw2fdNABbRrezxAYaYm0d+qYfVxEzE
VL3h1DdfsqpsVLY05gOv0sIkxEzLjWUe8g3xl0Oq4CfCwLxIHsttbBl2IUMl4d3N
yUCfdAKQo4sprrN3SHvSe1sAwEPWdGQz9ocmySXq09EZMXU+LIKDRKHbtpe+mNuL
uHKeotnGVGYW1D2tj9PFm80CiHGxKHONFTN9CeBVaFc2EROvUoT0FBPcJJq1ZeGJ
U/ygHJiSZ6jcbAv64Gwt3SCwgFkxu5YVD9eeUEpL8mGGlnzh1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkMUJ5JcRYJZ4Art68dQMwqf2wsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTY0
MTJjOS1hM2YwLTQyOGYtODdhMi02MzYwMmY3YmNjMDgvNGU4YjMwYTYtMDBlZS0z
ODUwLTgwNGYtNjVhZmViZDYyN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE2NDEyYzktYTNmMC00MjhmLTg3
YTItNjM2MDJmN2JjYzA4LzhhNjQxMmM5LWEzZjAtNDI4Zi04N2EyLTYzNjAyZjdi
Y2MwOC5jcmwwHwYDVR0jBBgwFoAU3X4+vuzxWzpfim7IkhghwE/dUGcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTY0MTJjOS1hM2YwLTQyOGYtODdhMi02MzYw
MmY3YmNjMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggxMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACcjWSsWE/xJX6wv2HEFIgfbmFVr7h9JnHkZZp6h25JbF2gTGjg9HVQ0
JGBWpl1uVORSSVUPgRzwRk9p+Jy19lrt7TXfaepfHRU2319HN+bomCH67GExHwKM
gGNivgZhd0unI1FjdL22uiEkVqwswzW7Wai9hH2M018Qf9/jTH8DydeZR1hoKkZG
eq56veFzbrMQysT29F7To5Rec+KLqUKqqXmyYMZlLYk1B+6TPCNpWXhAFTZkP/5C
sgytVqUlutFE0aHbeo1kuT+8PgzZ8mhQ8piI3hykJsZkaUOadYzZlHNRx7OvV7uV
suWm7Tcd8PEJtxKY86KiSp/bpF6+vCU=
-----END CERTIFICATE-----
Generated at Wed May 13 01:29:19 2026 by rpki-client