Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/c7d4d586-fd61-3ee2-a6a9-58043b35904b.roa
File:                     c7d4d586-fd61-3ee2-a6a9-58043b35904b.roa (raw, json)
Hash identifier:          nB5UXYLp/4T932iJ9wv/iF4k5U+EzkOBjAP/uXBaJTg=
Subject key identifier:   BD:88:7D:B1:39:40:5D:54:E5:DE:FE:1F:3B:D0:BB:B6:E1:93:DB:F4
Certificate issuer:       /CN=cc58e406-4d46-4ad6-892a-bf457cdcdbb0
Certificate serial:       010D0C9F4328584E8DEFB39DE7D10E99B8F8A600
Authority key identifier: 8E:BB:F2:E3:60:81:10:44:78:D8:26:ED:81:E7:DD:3A:B5:BC:3C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/c7d4d586-fd61-3ee2-a6a9-58043b35904b.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        130.12.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:b3:9d:e7:d1:0e:99:b8:f8:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc58e406-4d46-4ad6-892a-bf457cdcdbb0
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=3d8b74be-a251-466b-9a50-975fb4f83b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:63:6c:50:94:d6:cb:96:1c:50:25:d7:98:51:
                    e9:a8:29:b4:c4:17:c9:37:78:e2:85:e0:5a:dd:c7:
                    38:1b:c6:e3:98:ad:d7:3e:a2:a1:e1:8e:a2:ad:9d:
                    5f:ef:85:e4:d6:4c:24:e1:66:03:1a:74:de:e3:d1:
                    ef:4a:02:c9:40:0a:33:c1:c0:5f:19:32:d1:4f:7b:
                    81:ef:fb:52:ba:6e:12:cd:0d:fe:4f:96:6a:01:5a:
                    0c:b7:1a:56:d4:22:b0:1d:80:b6:51:12:e4:e8:82:
                    27:76:c9:44:30:80:fb:9c:27:9d:02:b5:90:b8:92:
                    97:10:3e:8b:67:dc:0e:02:0f:11:c3:11:70:37:ed:
                    23:06:ab:28:83:49:20:85:f1:93:79:e5:d5:9a:8b:
                    1e:32:75:75:c1:ad:e6:15:7f:8d:ae:40:49:ab:83:
                    18:b7:73:f3:02:23:d9:2a:e2:58:29:f8:05:ba:bc:
                    23:80:06:05:47:23:e6:f0:ff:62:58:12:34:ee:bb:
                    2e:97:5e:0a:93:72:39:e7:7e:9d:be:19:36:e8:c5:
                    d4:0e:43:95:24:94:3b:6e:5f:40:5e:cb:74:9c:61:
                    21:a4:bc:36:4c:db:91:02:c3:48:07:14:11:a3:65:
                    cd:23:10:38:8a:98:92:94:46:9a:d2:65:af:cd:16:
                    55:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:88:7D:B1:39:40:5D:54:E5:DE:FE:1F:3B:D0:BB:B6:E1:93:DB:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/c7d4d586-fd61-3ee2-a6a9-58043b35904b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.crl

            X509v3 Authority Key Identifier:
                keyid:8E:BB:F2:E3:60:81:10:44:78:D8:26:ED:81:E7:DD:3A:B5:BC:3C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cc58e406-4d46-4ad6-892a-bf457cdcdbb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:61:8e:45:c9:79:43:3d:ba:69:bb:42:46:2b:a7:90:a0:c9:
         1e:27:4a:3c:e1:df:da:c7:9b:bc:e3:9b:54:83:35:f3:1b:c7:
         04:03:ae:4d:80:3d:24:22:c0:b8:69:3c:b9:69:cd:d7:2a:b4:
         98:1b:88:d9:f2:5e:da:38:54:09:4c:f8:77:d2:05:22:42:13:
         bb:32:9c:71:3d:87:75:6a:80:bc:e3:4a:67:af:29:50:ef:0e:
         95:fd:9f:bc:4c:05:69:e8:5c:32:5f:f5:7f:e2:4b:ea:71:1b:
         95:25:b8:c1:08:f4:9d:37:eb:21:7c:5f:da:bb:87:65:b9:0c:
         ea:90:f9:bd:ca:9a:17:df:fb:48:f6:dc:9c:2f:f0:4f:f8:b7:
         9c:eb:21:46:ae:50:a9:35:49:c8:28:62:9e:32:95:4b:e6:59:
         6a:82:b6:43:64:6a:91:87:50:6d:d7:1a:e9:e9:cd:18:b2:e7:
         b7:43:b2:c9:29:bc:79:bf:c9:f7:a8:82:19:ae:10:b1:0d:25:
         94:85:57:fa:77:93:76:a8:55:aa:fd:48:e6:07:c2:5f:9a:40:
         c7:c4:b2:84:03:d0:6d:35:fb:cf:0d:89:70:17:c6:c3:1d:76:
         a9:e7:cf:56:bb:7d:f0:4e:1e:f7:6d:7e:b2:43:1a:f9:92:39:
         74:83:7d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:37:48 2026 by rpki-client