Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/36b4d7d6-7113-3e1b-87d1-a4d30d5813e0.roa
File:                     36b4d7d6-7113-3e1b-87d1-a4d30d5813e0.roa (raw, json)
Hash identifier:          OVo1iOln9K6yRZYb0WG0IOX9TKKatgVoaj3HhY/z+XQ=
Subject key identifier:   27:22:C6:49:24:0B:23:47:A5:DB:1C:0C:07:37:52:9B:04:67:C0:F6
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E54B498DDBC0C94FEA7EBF2C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/36b4d7d6-7113-3e1b-87d1-a4d30d5813e0.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     204251
IP address blocks:        130.117.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:98:dd:bc:0c:94:fe:a7:eb:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=c3ee783e-456f-4c2f-9214-23f9799f2114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:53:dd:38:c5:06:88:fd:56:71:b2:61:45:a4:
                    90:f6:51:ce:01:8a:bd:a7:09:41:32:a4:15:6f:83:
                    4f:a9:a7:74:bb:d7:5c:2e:af:d1:7f:a9:00:04:35:
                    49:33:93:da:aa:d7:a9:13:ae:32:87:72:74:dd:ff:
                    19:b4:bf:25:25:93:ec:3c:91:a6:c3:ec:3e:3a:84:
                    96:51:0f:69:3f:c7:cb:ca:79:06:86:a7:af:f2:84:
                    5e:f6:63:85:2d:64:7a:b1:94:43:9c:fc:44:78:0e:
                    c7:45:d5:cb:7d:32:1b:77:ce:91:b3:66:e4:23:b9:
                    05:6e:80:b2:97:85:f3:f5:c5:f0:24:a1:c8:c1:dc:
                    51:96:25:6e:39:19:ac:fe:2e:5e:62:58:ce:a8:71:
                    2e:41:07:7c:07:84:e3:5a:72:66:5b:84:fc:b8:ba:
                    3e:aa:c0:be:d3:46:2f:78:19:03:28:8a:a7:6d:fb:
                    68:d7:10:81:24:09:9c:ad:5b:81:a9:58:7e:f0:24:
                    9b:88:e6:65:5b:14:94:c4:be:02:72:77:4e:be:9d:
                    06:b1:77:75:15:6a:ef:4d:7a:c8:a1:2a:cb:87:58:
                    d6:d7:1e:09:a2:8e:2f:d4:a1:cc:be:6a:87:3c:b4:
                    89:6d:c9:0c:55:be:5d:d8:27:ed:89:25:dc:5c:b8:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:22:C6:49:24:0B:23:47:A5:DB:1C:0C:07:37:52:9B:04:67:C0:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/36b4d7d6-7113-3e1b-87d1-a4d30d5813e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.117.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f8:b2:7e:68:07:54:41:36:2a:df:08:c0:17:57:d4:e3:62:
         73:42:e8:bd:05:14:3a:9f:66:4a:9f:8c:7f:5a:16:f4:fa:0e:
         69:47:dd:9d:a2:1e:92:f2:a3:d1:6c:3a:d1:41:b7:a6:88:ff:
         53:87:90:10:95:21:cf:ab:fc:fe:a7:68:e4:9a:c7:ad:36:c3:
         4c:80:18:d4:d5:56:ff:84:5a:e1:07:d8:36:46:f1:27:ce:01:
         e7:fe:2c:17:e0:27:26:32:db:75:6e:90:0f:41:98:72:8d:9b:
         37:fb:11:48:0e:d7:b1:07:94:65:15:93:ba:4e:44:86:1e:a4:
         26:e6:99:59:33:8b:ee:99:b3:00:47:88:8a:8d:13:33:dd:d5:
         7c:9f:b9:e7:a2:28:99:bf:68:ab:21:59:b2:57:7c:3a:27:ee:
         f5:91:92:4f:c8:c5:88:6e:a9:bf:ef:83:84:31:31:da:55:16:
         43:4e:b4:4c:49:ad:99:1e:19:99:78:bb:09:bd:d4:49:52:a3:
         ec:f8:b7:53:41:2f:c0:0e:2b:61:85:fa:38:4b:69:a1:eb:dd:
         86:74:a0:99:b7:f7:55:99:2c:24:15:8a:fa:8d:47:cb:b5:08:
         d9:8a:7f:97:7e:23:e5:f5:36:9e:85:50:6a:af:9e:0a:91:b7:
         91:dc:0e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:08:57 2026 by rpki-client