Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/6a805d4e-2624-3d55-b806-dedabb5702c8.roa
File:                     6a805d4e-2624-3d55-b806-dedabb5702c8.roa (raw, json)
Hash identifier:          +eOCKVA7u95uaiMSfP5qMCn64LT0Ajk76M5Dft++twI=
Subject key identifier:   85:99:1B:8D:22:20:67:35:0B:2E:FD:79:BF:CD:E5:11:3A:B5:EE:A4
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584F1B6256FA6CC2D2A8B97E4C00
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/6a805d4e-2624-3d55-b806-dedabb5702c8.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        130.35.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:56:fa:6c:c2:d2:a8:b9:7e:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=29e516a2-e540-403e-b5de-25c794c224e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:77:51:81:f9:de:0c:da:ce:f4:9d:18:27:
                    62:2d:fe:8a:36:6f:82:31:03:7c:3a:18:86:5e:bd:
                    b6:16:48:85:d9:9d:2f:f4:ec:67:fa:b4:5f:2c:12:
                    e4:bf:e8:6e:a4:ca:37:e3:a2:80:3d:25:bd:34:8c:
                    b1:00:e8:23:0d:46:31:71:ae:3a:83:1a:24:88:85:
                    16:5b:7a:34:8f:c5:b1:e9:90:ca:f8:94:b0:00:70:
                    31:55:61:24:a2:f0:18:5c:ae:86:80:79:e5:95:c0:
                    01:34:ea:49:a1:ae:c5:8a:4d:47:67:99:ad:bc:fd:
                    00:9c:f8:8b:eb:47:94:bf:f2:a8:53:3a:e2:ff:d9:
                    5d:72:ae:29:d9:e2:e9:01:6c:a0:0d:d0:30:4b:fe:
                    2e:2d:c5:2a:50:32:b1:87:26:da:d2:bb:c2:c6:b9:
                    56:c3:72:f6:c8:63:6a:93:23:f9:08:24:63:75:a3:
                    7c:48:22:8e:8a:f8:00:db:a3:8d:94:7a:ec:99:7a:
                    48:04:78:bc:13:1b:f3:2b:12:9a:97:46:da:97:0c:
                    7f:48:01:52:c2:2e:4b:b0:e8:d1:48:27:74:9d:42:
                    0d:9f:da:8a:32:25:22:73:87:b7:fa:eb:e9:08:a9:
                    0b:6e:1e:4c:cd:52:e9:b7:c7:a9:82:d5:b4:9f:9d:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:99:1B:8D:22:20:67:35:0B:2E:FD:79:BF:CD:E5:11:3A:B5:EE:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/6a805d4e-2624-3d55-b806-dedabb5702c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:af:b2:73:2e:ec:84:6f:c5:49:1e:c4:d7:35:d6:0f:6a:e0:
         e8:5e:2d:41:f1:3c:f5:85:be:25:c1:55:a1:79:77:d0:31:aa:
         21:46:3f:4d:99:ac:ca:a0:00:49:8e:0e:36:0b:4a:77:be:a0:
         ab:ca:98:0f:ad:e7:d0:1f:6b:6e:e9:06:b0:f1:1c:a0:e0:1e:
         35:ee:41:06:d8:86:92:da:3f:94:f5:1b:8f:bf:bc:e8:d6:10:
         82:67:d9:a3:3a:7b:a4:82:5c:1d:f9:ec:d3:16:5f:90:f3:4c:
         0a:b6:ee:b1:c3:d0:7d:54:d5:ce:bf:e6:33:66:57:f7:3e:5e:
         80:92:d6:ab:6f:1a:b2:ef:25:76:8e:a6:ac:e5:6a:ab:76:fa:
         6d:94:94:de:35:11:19:23:69:c8:4f:fb:82:45:f6:1a:ec:ed:
         a5:a8:3f:69:10:cf:04:58:90:60:25:7d:94:00:36:0b:57:aa:
         58:37:e8:2e:62:8c:ba:36:a4:95:0c:a0:f2:81:74:02:3e:87:
         e5:8b:ef:78:a1:bd:e9:31:a4:77:75:4b:0f:ad:9e:ea:bc:68:
         a1:27:b2:46:31:af:7b:7b:ef:cc:fa:0e:eb:3f:ec:1e:3d:70:
         ff:5f:1b:39:c3:ba:d9:9b:f6:9b:88:09:ba:22:3b:89:64:dd:
         ee:91:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:29:20 2026 by rpki-client