Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa
File:                     6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa (raw, json)
Hash identifier:          KnIiQ1X//0tMqjAmXHU6MhKC7uBBcq83MbxsyNb8rOc=
Subject key identifier:   5F:9A:0D:4F:FA:59:AC:C6:52:CD:BC:42:02:5E:14:8E:8F:63:D6:5B
Certificate issuer:       /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Certificate serial:       010D0C9F4328584F49740C2CE153125B11964200
Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6859
IP address blocks:        130.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:0c:2c:e1:53:12:5b:11:96:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7ea6cdc5-497a-4d37-bb9d-155ab75cb48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:26:2f:c8:73:9b:66:28:0b:0c:9d:49:eb:48:
                    ba:ad:54:07:9f:13:0b:3e:8a:fb:1c:ba:95:f6:4d:
                    94:45:08:36:2c:c0:e2:27:b1:32:6b:72:50:d1:39:
                    bc:d2:96:a2:88:91:39:3a:b3:a5:75:72:9a:41:b3:
                    ad:55:0c:0a:ad:ed:ed:e6:16:b2:f6:4a:90:b5:ac:
                    df:d7:97:d1:71:20:67:d2:58:7f:b9:7e:4a:21:b0:
                    61:0c:d0:f3:aa:86:17:54:58:06:0d:77:67:7d:d3:
                    90:9a:e3:91:bd:fe:36:07:55:ee:ea:d1:c9:f9:3c:
                    08:25:6d:0c:69:d4:54:83:cf:3b:aa:12:a2:77:a4:
                    cd:d1:f1:bc:bc:29:6f:88:c7:3f:95:be:65:3a:2a:
                    89:57:48:60:92:bc:73:bb:5b:d1:2b:62:11:9e:d4:
                    8e:f1:88:f4:77:82:32:73:67:18:21:6a:3c:b3:1b:
                    81:d0:1e:df:5e:98:c3:17:3c:cd:e6:ef:0d:7c:ad:
                    20:34:53:70:a6:6c:0a:93:e2:7b:b8:5d:e1:78:5f:
                    f0:fd:74:c1:83:4c:cb:f2:86:03:39:ef:c6:1b:3a:
                    2e:8f:21:ec:69:92:5e:78:df:8c:66:94:15:4e:f8:
                    54:0c:86:ab:fd:4d:b6:b3:11:b3:24:fb:48:9b:e3:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9A:0D:4F:FA:59:AC:C6:52:CD:BC:42:02:5E:14:8E:8F:63:D6:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl

            X509v3 Authority Key Identifier:
                keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:37:df:cc:3b:bb:dd:8c:21:ae:38:9c:79:cd:46:f7:cd:2a:
         de:6d:8c:1b:0f:72:9a:72:9b:a6:f3:ab:31:06:c5:6b:15:f9:
         2f:6f:c4:74:2c:10:95:f2:9e:53:e1:ff:4d:d3:41:ab:9a:2b:
         47:00:06:07:8a:65:f4:13:5b:5b:f2:01:92:1f:b3:3f:0e:ef:
         e8:b8:3f:95:0e:d7:e7:ce:d4:f7:1f:9e:b1:42:ab:ad:de:11:
         23:91:13:02:14:38:42:cb:c8:8f:8a:ce:19:b4:44:7a:d8:5a:
         c9:de:7d:e4:59:6d:dc:82:16:84:d1:56:d1:64:43:41:ed:89:
         21:42:a4:ee:59:be:b5:56:ea:c2:84:35:bd:eb:1b:94:7e:a3:
         47:37:dc:9c:c5:57:0b:0a:22:e5:74:0e:fe:b9:f8:c8:2a:c3:
         d7:d2:1c:a2:84:fd:9d:dd:72:53:bf:d3:7b:af:9c:c2:f3:2c:
         cc:ab:ce:5e:1b:ce:22:5a:86:29:98:54:66:f9:b9:d1:4d:db:
         27:80:e6:0f:86:3e:d6:c4:83:f0:e8:c8:61:fb:18:0a:19:42:
         6d:32:f9:72:15:0e:da:23:06:62:0b:30:d7:90:61:51:96:da:
         11:89:1b:61:2f:2d:00:1f:09:b4:55:5f:75:f2:d8:08:22:f2:
         28:c7:47:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:15:23 2026 by rpki-client