Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/69d29771-5ff1-3012-8488-96097b618a31.roa
File:                     69d29771-5ff1-3012-8488-96097b618a31.roa (raw, json)
Hash identifier:          7wNMgBIacS1Ss7syqRVzyBsloQjhIp7QPYyKcCgqJlw=
Subject key identifier:   65:0C:D3:20:0F:ED:9C:D5:FF:36:AD:DE:4F:35:EF:83:0E:B5:36:00
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584D98BAA0C2C29A1D9D47AC4B00
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/69d29771-5ff1-3012-8488-96097b618a31.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        130.35.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:a0:c2:c2:9a:1d:9d:47:ac:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=46f5dc63-b730-4d5f-bf0c-520ce0cf5784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:d2:d7:bd:bb:ce:43:e2:05:bd:7d:cf:bf:
                    dd:4e:77:44:e5:80:ba:83:a1:1d:43:58:45:66:01:
                    94:eb:b9:1e:76:68:a4:c6:03:2a:ce:71:65:fb:56:
                    7a:56:bb:e9:6c:5d:34:67:22:6f:cc:a4:ee:4d:a9:
                    96:85:47:7b:f8:cf:56:fe:06:bc:d8:9c:56:03:70:
                    6e:91:0a:4a:f7:90:4e:db:e8:e8:89:a9:c7:6d:4b:
                    6e:5e:d9:9a:3e:20:9e:bb:35:ee:8c:e1:b2:d1:7b:
                    59:86:41:2c:e1:45:ab:54:7f:90:53:87:af:05:e3:
                    0c:31:20:b6:4f:9d:50:9d:52:e6:8e:f4:9e:5c:b0:
                    56:f4:2e:a0:33:c6:f9:2a:51:47:27:e9:08:2d:5d:
                    1c:be:b3:b9:c8:70:a3:57:50:87:6e:94:77:d0:a9:
                    8c:90:92:ea:8a:cd:9f:da:02:ba:d3:52:09:f6:3e:
                    68:8f:a6:96:57:b2:08:b3:a6:76:11:14:4e:30:d5:
                    fd:41:71:b9:2e:c6:94:16:39:85:21:33:63:99:75:
                    19:c3:0e:b1:de:c3:e1:5f:f2:99:5e:d8:7e:25:27:
                    81:4c:28:8d:dd:51:06:14:b2:bc:f7:5f:59:8d:1f:
                    ef:6f:50:1c:bc:c4:fc:75:05:d8:40:af:b0:7a:e1:
                    0d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0C:D3:20:0F:ED:9C:D5:FF:36:AD:DE:4F:35:EF:83:0E:B5:36:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/69d29771-5ff1-3012-8488-96097b618a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:88:f1:e2:79:1f:67:cd:c3:ee:09:13:cb:b2:85:0a:89:a9:
         ac:25:ef:62:44:0c:17:b6:57:6a:92:14:fa:fa:72:15:32:1b:
         61:16:23:ef:b9:17:99:c3:c0:ab:7b:68:4c:1c:7c:cb:29:85:
         62:ad:ff:88:c8:23:47:8e:c0:bd:67:47:d9:bc:55:f8:ae:ab:
         04:23:19:d2:30:a3:3c:8a:91:0c:77:79:45:f0:28:4d:bb:3e:
         35:97:84:95:02:55:5b:55:c1:c0:8f:18:2b:22:7a:43:66:51:
         af:c6:78:16:97:e2:95:f1:3c:a0:e7:4f:4e:3b:3a:64:51:b9:
         b7:6b:e4:c3:f5:eb:dc:3f:2d:62:e7:c5:25:7b:f8:d6:3a:66:
         18:a4:85:e3:98:61:57:b4:6a:85:f9:33:44:a9:99:93:1f:b0:
         e7:56:01:c1:3d:14:8a:42:a5:8f:0f:f5:09:6d:e9:8a:17:cd:
         77:11:57:ea:39:70:94:f2:93:ac:a1:df:4c:81:37:d6:b9:3c:
         04:df:f0:23:fb:e5:60:2f:61:17:ca:63:12:8c:a4:1a:c7:8f:
         18:ba:13:81:9b:b3:65:00:42:03:90:fa:a9:9c:c4:c3:95:17:
         27:81:6c:7f:86:a6:07:13:4f:86:38:29:9a:21:ab:36:f9:72:
         6b:d6:c0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:55:37 2026 by rpki-client