Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/a227ef4a-d27a-318b-ac66-3c488a075aec.roa
File:                     a227ef4a-d27a-318b-ac66-3c488a075aec.roa (raw, json)
Hash identifier:          vts52cUaz4JaS6XPVuxedkB6wa+dXChyGKW7emuzqZI=
Subject key identifier:   35:E7:E2:67:90:95:98:22:3A:A2:5B:E9:BA:6E:3C:D9:D0:C8:16:13
Certificate issuer:       /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
Certificate serial:       010D0C9F4328584E5FDF58037677017A667E2A80
Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/a227ef4a-d27a-318b-ac66-3c488a075aec.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     400303
IP address blocks:        130.250.140.0/22 maxlen: 24
                          130.250.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:58:03:76:77:01:7a:66:7e:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=86fb88d7-c608-4667-9f03-785c19b465ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:43:94:4a:ba:9b:93:f3:76:bf:7a:fd:eb:
                    c9:f7:cd:8c:e0:b0:a0:08:00:23:5d:19:13:16:e8:
                    54:c0:ab:43:93:df:9b:5b:11:85:ff:4a:17:07:a4:
                    ec:61:20:52:b1:0c:c2:d9:83:33:d7:f9:28:cb:9a:
                    61:6e:ea:8b:6b:15:ab:11:13:16:48:6c:7b:fc:7d:
                    2d:f6:37:2d:70:06:71:f2:5d:e9:7a:96:f8:f8:18:
                    3d:ae:58:fc:1a:a8:c9:65:d7:ad:32:b0:91:52:f1:
                    6f:b4:57:d6:2d:54:82:61:ca:93:d5:1c:67:c2:88:
                    75:1a:40:88:9b:77:dd:6a:74:dd:78:96:a9:b2:45:
                    91:87:85:16:46:fe:89:d7:91:5f:73:84:07:00:66:
                    84:5b:da:00:18:98:e7:69:4d:b9:45:69:f9:78:43:
                    66:7c:4f:be:41:41:21:44:32:eb:08:37:75:a2:b6:
                    44:60:58:8c:5c:79:e9:81:8c:db:10:d7:c0:0f:46:
                    ce:14:f4:d5:c6:13:6c:dd:73:d2:bd:69:76:e8:de:
                    5e:29:f9:79:01:c5:03:8b:f5:f9:df:a3:35:dd:81:
                    c6:c2:b9:01:88:a9:34:50:79:99:38:42:79:eb:19:
                    b8:05:56:5b:1f:3e:c2:eb:12:82:bc:70:52:e3:b5:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E7:E2:67:90:95:98:22:3A:A2:5B:E9:BA:6E:3C:D9:D0:C8:16:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/a227ef4a-d27a-318b-ac66-3c488a075aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.140.0/22
                  130.250.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2c:0d:5b:cf:83:bf:73:f6:8e:2e:a6:02:04:27:b0:eb:c4:
         6c:48:57:22:ab:97:d9:6d:2a:2b:4e:fb:72:27:ca:80:9b:5b:
         d8:6b:82:fc:0d:1e:b3:0e:b0:a7:c9:fe:33:0e:7f:87:c7:b5:
         be:71:8c:30:ba:aa:25:9f:4a:2e:61:cf:aa:06:7b:a4:d2:b0:
         de:9c:80:04:54:6a:82:07:60:60:9d:08:d5:8a:3a:10:36:7d:
         e8:f9:6c:25:d0:68:04:77:1f:1f:70:42:b9:c4:27:f1:ee:1d:
         41:e2:4f:f5:d9:f9:da:b7:28:46:c2:85:6d:de:ef:43:e1:46:
         2b:ae:b5:cc:30:72:04:48:6f:38:8c:94:4e:64:7c:c0:69:4e:
         a1:ea:35:0b:5c:a5:8b:8a:46:d7:b9:38:76:9c:94:d0:06:fd:
         5b:78:c4:0e:8f:97:74:27:b8:87:20:49:44:58:ef:8d:e1:09:
         67:cc:50:8f:23:3b:af:69:5e:97:db:1d:5b:98:3b:ef:bb:fe:
         19:26:c4:cc:23:0d:f5:e1:13:6c:87:4d:85:57:d0:63:ca:0c:
         b3:50:47:bd:7b:bd:49:61:5d:d0:4e:0b:93:2e:62:2c:a2:f2:
         e4:89:ea:37:d5:67:b8:2f:4b:e4:29:f2:1f:75:eb:71:22:89:
         2e:bf:48:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:33:34 2026 by rpki-client