Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/69d29771-5ff1-3012-8488-96097b618a31.roa
File:                     69d29771-5ff1-3012-8488-96097b618a31.roa (raw, json)
Hash identifier:          bSK0XWn2oYKREO577yIMryr2CAZiWrcnb6qG0IwQbws=
Subject key identifier:   96:25:C9:DC:D5:3D:31:21:3C:C6:17:1C:54:2C:7A:51:3B:83:83:AD
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584F1B6244B8F52B035DE2B93300
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/69d29771-5ff1-3012-8488-96097b618a31.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        130.35.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:44:b8:f5:2b:03:5d:e2:b9:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=91b8fa7b-c648-4df1-8b89-c0cc4e02ebc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:d3:13:35:84:3c:0f:a2:d6:2d:23:8d:eb:
                    fc:89:75:e2:d6:39:3b:fa:08:4f:cb:aa:81:b9:12:
                    b7:e6:1b:2e:02:93:71:34:7f:ba:d6:e2:7e:b0:e3:
                    76:f4:3a:3f:3e:66:04:85:4e:da:32:68:dd:26:8b:
                    07:84:ea:42:25:55:82:c9:a0:c1:6e:51:f5:31:51:
                    de:73:bc:e6:80:5e:aa:36:46:e0:ea:76:1d:0f:74:
                    79:44:f4:05:82:32:e9:13:3a:13:c8:e4:06:45:d7:
                    92:8a:d4:b7:05:9e:57:05:3c:a5:4b:62:81:93:d6:
                    1f:94:90:82:ea:68:e7:0d:27:f0:cf:8c:0d:a1:5d:
                    bb:b2:77:42:9b:96:87:20:e3:0a:d8:b7:d7:40:c3:
                    0b:ce:c9:c9:8b:eb:2d:eb:e1:0e:ef:8f:1a:f0:bd:
                    92:0b:a3:78:cb:29:36:61:5a:bb:7d:d2:28:49:8d:
                    42:07:1f:1f:8e:7f:9c:88:6f:dc:6f:02:79:6d:42:
                    34:fd:55:e5:b1:b5:61:41:e3:8d:fe:59:d1:15:29:
                    9b:7b:68:e5:1f:86:07:10:3e:10:64:bd:6d:21:10:
                    28:06:3f:46:67:b0:b3:54:08:dc:29:a0:19:99:c4:
                    af:c8:ea:4d:16:8b:f4:40:a4:b1:af:af:70:8d:f8:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:25:C9:DC:D5:3D:31:21:3C:C6:17:1C:54:2C:7A:51:3B:83:83:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/69d29771-5ff1-3012-8488-96097b618a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:18:a9:e0:e1:eb:83:00:7b:81:78:b4:9e:58:25:2d:3d:81:
         87:47:8a:9e:25:39:ab:a8:44:c8:b2:f5:c5:68:1b:51:a6:47:
         ff:06:dd:0f:04:24:9c:0a:0c:39:f0:77:0b:c2:d1:ae:d0:67:
         d5:89:5e:26:90:e3:75:aa:c9:d6:63:b4:fd:f8:94:24:cd:c6:
         79:95:72:cb:76:6b:54:87:4c:08:a1:ff:d4:59:66:0a:c3:3e:
         51:3d:1b:a4:a7:10:ca:86:69:fe:f7:32:a8:33:bb:7e:b9:90:
         d7:98:7b:df:d5:5c:f4:52:db:69:5d:86:3c:ae:c3:41:51:cf:
         04:8f:e0:55:c2:dd:26:80:b9:1f:f9:43:70:b1:2a:f2:7d:93:
         01:de:a0:5d:4b:79:7f:bf:7f:7b:74:c7:b6:77:ae:f1:a9:4c:
         34:9b:e3:6f:63:4e:28:d6:99:a4:59:c9:5c:d2:75:57:4e:ef:
         d9:f6:24:f6:07:06:6d:5f:24:6c:ac:b3:2f:1f:8f:2d:6c:85:
         f9:bb:0c:9b:0a:04:e7:62:ca:5d:88:f5:36:24:ae:99:e0:f7:
         ed:98:0f:00:5a:ed:fa:e4:fe:02:41:fe:8b:8d:f7:92:48:98:
         24:67:3b:f6:99:71:15:61:67:92:9e:9f:3b:96:6b:8b:d2:a4:
         cc:34:eb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:36:00 2026 by rpki-client