Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1d4b96fc-a744-3cbc-82de-6885987d36e1.roa
File:                     1d4b96fc-a744-3cbc-82de-6885987d36e1.roa (raw, json)
Hash identifier:          Y0VsEHcJ/3OBQJQ6eSvVISGm019sG0xr1vKJ1N3RlWg=
Subject key identifier:   4A:19:F4:A4:A1:39:1F:71:EE:62:DE:22:C9:B7:63:51:E3:94:98:CB
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584F13024268D70C1ABDC69D7C80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1d4b96fc-a744-3cbc-82de-6885987d36e1.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        130.35.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:42:68:d7:0c:1a:bd:c6:9d:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=7b82662d-ab8b-416e-8030-bf9abd482d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:bb:fc:d1:c8:6b:8f:02:74:c0:cf:1f:0a:
                    35:8c:2b:dc:27:f0:e5:63:c8:95:ad:54:59:87:0b:
                    50:2e:b8:c4:39:31:d4:1c:c5:ef:f3:81:74:c2:e9:
                    a4:7f:07:aa:45:1d:cf:f6:95:bb:ec:5f:e0:15:b0:
                    56:5c:4f:de:99:9e:74:ec:e6:2c:38:6f:a2:b0:19:
                    08:29:9a:f3:ca:73:a3:0e:86:f2:42:3e:b3:84:88:
                    df:92:62:f5:a6:5c:6e:83:92:44:59:9f:61:29:66:
                    54:5e:f3:08:c9:da:69:5e:38:4f:e3:34:70:8f:0f:
                    2e:10:11:91:1b:aa:89:6a:63:8f:16:7b:a3:1a:a5:
                    13:19:48:ad:a0:bd:cf:78:eb:71:d8:d5:6e:5b:9f:
                    25:13:aa:3b:b4:6e:22:49:5f:92:22:a2:f8:9e:05:
                    56:42:ac:14:69:6c:e3:12:12:b6:e7:95:d7:77:14:
                    ad:9c:ee:85:08:e2:3a:ec:89:79:6e:cf:53:73:5e:
                    1f:7b:50:da:e2:b0:32:cd:3d:8f:c8:1f:d4:fb:18:
                    ba:1e:31:9f:8a:4d:d4:13:29:d5:ae:54:90:4c:16:
                    65:cc:0e:b3:6b:fa:bd:53:95:7c:81:e5:5c:97:93:
                    cf:5c:73:56:22:5a:f9:f1:10:30:10:39:28:e9:5c:
                    a1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:19:F4:A4:A1:39:1F:71:EE:62:DE:22:C9:B7:63:51:E3:94:98:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1d4b96fc-a744-3cbc-82de-6885987d36e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:49:f5:74:2b:98:2d:5a:16:50:78:2a:b7:68:e3:18:d0:d9:
         8a:c9:f6:48:35:e7:48:ba:01:11:db:35:2c:dd:67:ba:da:15:
         f5:82:76:2c:21:50:77:9a:bf:0d:d5:e6:b0:7b:40:16:bf:b4:
         5a:66:bd:e4:03:60:fd:14:72:7c:cf:c3:c4:e0:9e:14:ff:98:
         1d:e0:8b:f8:1f:e8:7b:f4:a9:19:8d:63:f2:f8:35:17:12:8a:
         85:8f:8c:a8:13:dc:7f:79:c3:ee:b0:ef:aa:86:4e:4f:1e:ee:
         35:83:c8:3d:d4:d8:ed:37:e2:3c:77:0a:e8:85:5c:7b:32:13:
         59:f0:a2:f0:0f:d6:75:13:87:f5:c2:c8:cc:9e:e3:ea:3d:af:
         37:0f:f6:63:2c:64:75:07:ef:73:34:ee:a2:26:c8:4e:0a:ed:
         17:cf:93:56:0f:58:45:9f:d9:d7:ae:81:9f:84:b8:19:86:1a:
         85:50:95:4e:9b:a1:81:37:d7:ec:5e:43:de:c7:99:11:9f:64:
         0f:b3:82:3d:97:17:09:6a:82:52:98:fc:a4:94:6e:7a:f6:5f:
         cf:7c:21:b5:91:8c:68:90:0d:21:af:01:b7:9e:79:3f:61:13:
         7a:17:e5:66:95:9b:86:f7:1b:57:b8:ae:2a:bd:ae:30:e0:57:
         6b:32:86:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:42:30 2026 by rpki-client