Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/a734edb0-8ab0-3dbb-bbe3-18d469c846a0.roa
File:                     a734edb0-8ab0-3dbb-bbe3-18d469c846a0.roa (raw, json)
Hash identifier:          eJNTvqyioLABXkxg+v/DOb8IhN6OoDIKM/YggTa0iSY=
Subject key identifier:   2B:E7:53:66:56:0A:0A:BA:91:63:46:50:F6:3B:7B:EF:E1:88:B6:9B
Certificate issuer:       /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial:       010D0C9F4328584E508487E39BB7D3543F74AE86
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/a734edb0-8ab0-3dbb-bbe3-18d469c846a0.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     211356
IP address blocks:        130.12.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:87:e3:9b:b7:d3:54:3f:74:ae:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=bdc11f2f-71bc-4ccb-a469-f366b79a3058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:6b:1a:dd:71:85:c4:5b:83:36:6b:74:4a:
                    8f:c8:86:1b:03:73:ca:0a:85:ec:7a:0f:aa:a6:c2:
                    ea:da:7e:83:f7:58:f1:36:62:b8:93:36:8f:78:c5:
                    63:01:7e:20:60:86:5c:2a:32:a1:07:9e:07:34:d9:
                    57:ef:20:55:d2:d0:64:73:45:2e:90:5a:a0:a3:7a:
                    ea:91:af:e9:9d:80:7d:45:e3:80:60:a4:39:cc:70:
                    bb:95:60:73:36:94:c4:f5:3e:a7:d0:da:55:1b:eb:
                    1a:13:10:b4:09:df:a3:02:53:05:c3:eb:82:77:41:
                    2b:d3:0b:44:3b:4c:63:bd:b9:fe:d1:2e:fd:5d:92:
                    84:e0:94:3c:6b:7d:33:dd:cc:00:ea:f7:4f:97:1e:
                    e6:7b:14:61:de:57:e6:ec:bc:3b:8b:c3:16:56:78:
                    13:34:c8:ae:24:fc:b7:81:47:d5:48:4f:f7:fa:41:
                    fd:7b:28:8e:01:ab:64:f4:b8:e6:4b:5d:d5:39:bf:
                    66:bc:4d:83:41:da:ac:5e:f9:1a:77:89:c9:0c:05:
                    6f:7d:d0:b6:5b:89:ba:93:f7:81:52:7a:1c:fa:08:
                    77:36:ea:16:86:af:3d:ab:36:25:07:2b:b1:31:7e:
                    f2:14:ca:57:96:96:5b:e8:73:35:73:17:c9:ea:12:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E7:53:66:56:0A:0A:BA:91:63:46:50:F6:3B:7B:EF:E1:88:B6:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/a734edb0-8ab0-3dbb-bbe3-18d469c846a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl

            X509v3 Authority Key Identifier:
                keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c0:75:29:0a:f1:8e:a5:01:ca:e8:32:49:29:20:0f:33:46:
         60:bd:46:be:35:01:0f:a8:cb:4b:9f:86:9f:8f:98:d2:12:ea:
         16:c1:e9:3d:1c:b2:0f:61:ff:eb:a7:e5:4d:68:25:98:27:38:
         b2:86:70:7a:a8:0d:88:12:38:66:b4:56:8e:45:8c:5d:59:33:
         23:72:1c:0c:11:25:3c:f8:40:b8:5b:2c:49:cc:db:36:72:37:
         4c:3b:e8:c8:39:1a:f6:37:49:3b:aa:ce:06:d7:38:bc:09:82:
         05:18:61:24:d5:44:96:55:59:65:47:35:5f:0b:8e:65:ec:af:
         65:a1:74:f3:29:10:be:d3:28:b1:ea:cc:f1:44:d5:48:56:eb:
         b6:92:b3:df:d2:34:87:2f:a8:93:3e:af:01:89:3f:70:8a:c6:
         e5:4e:80:0e:03:87:ce:ab:b4:78:ea:d2:f1:eb:84:7b:1f:28:
         1e:5c:72:72:4f:8a:70:f6:42:7a:4d:4e:fc:10:d4:df:82:13:
         ad:89:3b:3a:b1:4e:46:f7:3d:bb:dc:d3:6c:dc:70:1a:23:7e:
         50:81:02:5f:d9:5a:4c:3b:6d:c1:41:dd:55:d0:57:ea:d9:5a:
         ac:a1:cd:5c:82:95:58:73:60:2e:cb:33:6c:8c:d1:43:d3:17:
         0a:0d:ad:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhIfjm7fTVD90roYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM2NWU0NjAtMTYzMy00YjQ0LTlkYzUtYmUzMDNjOGIz
ZjA5MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
YmRjMTFmMmYtNzFiYy00Y2NiLWE0NjktZjM2NmI3OWEzMDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8BrGt1xhcRbgzZrdEqPyIYbA3PKCoXseg+q
psLq2n6D91jxNmK4kzaPeMVjAX4gYIZcKjKhB54HNNlX7yBV0tBkc0UukFqgo3rq
ka/pnYB9ReOAYKQ5zHC7lWBzNpTE9T6n0NpVG+saExC0Cd+jAlMFw+uCd0Er0wtE
O0xjvbn+0S79XZKE4JQ8a30z3cwA6vdPlx7mexRh3lfm7Lw7i8MWVngTNMiuJPy3
gUfVSE/3+kH9eyiOAatk9LjmS13VOb9mvE2DQdqsXvkad4nJDAVvfdC2W4m6k/eB
Unoc+gh3NuoWhq89qzYlByuxMX7yFMpXlpZb6HM1cxfJ6hIISQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvnU2ZWCgq6kWNGUPY7e+/hiLabMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1
ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMwM2M4YjNmMDkvYTczNGVkYjAtOGFiMC0z
ZGJiLWJiZTMtMThkNDY5Yzg0NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWM2NWU0NjAtMTYzMy00YjQ0LTlk
YzUtYmUzMDNjOGIzZjA5L2FjNjVlNDYwLTE2MzMtNGI0NC05ZGM1LWJlMzAzYzhi
M2YwOS5jcmwwHwYDVR0jBBgwFoAUIKBv4EAvNx9ZAwDdlWdzMp9+zC0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMw
M2M4YjNmMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggzRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7AdSkK8Y6lAcroMkkpIA8zRmC9Rr41AQ+oy0ufhp+PmNIS6hbB6T0c
sg9h/+un5U1oJZgnOLKGcHqoDYgSOGa0Vo5FjF1ZMyNyHAwRJTz4QLhbLEnM2zZy
N0w76Mg5GvY3STuqzgbXOLwJggUYYSTVRJZVWWVHNV8LjmXsr2WhdPMpEL7TKLHq
zPFE1UhW67aSs9/SNIcvqJM+rwGJP3CKxuVOgA4Dh86rtHjq0vHrhHsfKB5ccnJP
inD2QnpNTvwQ1N+CE62JOzqxTkb3Pbvc02zccBojflCBAl/ZWkw7bcFB3VXQV+rZ
WqyhzVyClVhzYC7LM2yM0UPTFwoNrTc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:34 2026 by rpki-client