Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7daab95e-1581-383c-a12b-6b720b97c8d6.roa
File:                     7daab95e-1581-383c-a12b-6b720b97c8d6.roa (raw, json)
Hash identifier:          OMSrpr5kAEOS5JxWr3j3Yd3dGQhNIcNoPJmIrzvTtzQ=
Subject key identifier:   67:E3:EB:B6:2D:0F:D4:37:A3:29:8D:AD:1A:BF:FA:89:06:88:27:0D
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584AF014320D729323474B69FC00
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7daab95e-1581-383c-a12b-6b720b97c8d6.roa
Signing time:             Fri 22 Aug 2025 05:35:27 +0000
ROA not before:           Fri 22 Aug 2025 05:35:27 +0000
ROA not after:            Thu 20 Nov 2025 06:35:27 +0000
asID:                     31898
IP address blocks:        130.35.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:14:32:0d:72:93:23:47:4b:69:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug 22 05:35:27 2025 GMT
            Not After : Nov 20 06:35:27 2025 GMT
        Subject: CN=08d0282e-061f-4ed6-a8b9-6eddadd242b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2a:48:46:fa:df:02:77:57:02:94:91:84:6f:
                    28:65:f2:de:33:2e:41:2e:c3:fa:1d:48:ea:b8:ba:
                    48:9b:b1:7b:ea:a1:b0:46:41:c4:dc:71:6e:83:79:
                    bc:4c:16:18:af:0a:2f:b1:3d:95:93:dd:1e:fb:88:
                    b5:ea:e6:68:0f:7c:b8:3d:cc:81:d7:63:d9:5c:3f:
                    54:68:3a:cf:bb:6d:1e:ce:8e:86:47:0d:36:97:15:
                    f1:a3:83:25:ac:54:8a:84:39:63:56:62:60:8d:a5:
                    39:89:47:57:21:84:43:cd:8c:50:65:72:56:97:4a:
                    b1:14:0f:f0:0a:5e:dc:ed:c3:c1:df:b7:3e:08:fb:
                    2b:9d:c7:8c:ff:8d:71:92:03:8f:7a:0d:db:96:14:
                    c5:b0:86:58:e9:86:42:29:c0:a8:1c:d2:5a:07:8c:
                    f4:5f:e7:6d:0f:81:5c:24:88:34:85:bb:7e:80:67:
                    de:6f:3a:23:fb:cf:96:32:46:21:05:94:e4:d6:0d:
                    0d:d0:11:c5:08:42:d8:da:13:55:8d:60:43:6a:9b:
                    1a:73:e4:49:4b:bf:1c:37:7c:bf:34:de:41:0f:c0:
                    d9:3c:08:c5:07:c2:23:c8:bd:9c:c0:3f:02:c6:09:
                    74:ee:90:94:32:01:bd:7b:a3:6f:d9:8b:9c:bc:f5:
                    a8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E3:EB:B6:2D:0F:D4:37:A3:29:8D:AD:1A:BF:FA:89:06:88:27:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7daab95e-1581-383c-a12b-6b720b97c8d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f8:20:9c:86:40:05:d3:24:03:de:a0:95:eb:a9:33:0d:79:
         4a:14:21:d0:9e:ef:f2:f3:6f:64:6e:75:7d:f3:dd:6d:21:05:
         da:b0:5f:06:f2:75:40:a7:01:3b:81:24:6f:ed:41:38:7d:c6:
         52:e2:90:d2:cb:50:bd:31:88:29:78:2f:d2:8a:73:8a:b9:6f:
         10:35:4f:b6:ba:31:b4:9c:17:6b:b0:29:2c:72:6e:6d:4d:1a:
         53:a9:35:f8:81:91:8e:41:6e:17:cf:71:a8:ec:07:73:92:f6:
         4c:87:57:31:a4:c8:93:ab:84:2b:1b:24:78:98:79:61:55:aa:
         2b:3e:9c:3e:f1:65:35:be:49:8f:72:97:f5:50:58:8c:30:1e:
         16:cd:31:f1:04:a2:c3:92:10:8d:78:a9:d3:4e:27:cc:31:67:
         2f:7d:7b:e8:23:9c:a6:46:3c:50:b1:95:ba:13:75:f1:ae:87:
         60:66:cd:2c:f8:5d:a4:9f:69:33:96:e1:22:86:95:24:5a:a3:
         cd:b8:15:0a:6d:ac:0b:1e:74:f9:65:25:8d:f4:d5:28:03:87:
         8e:0b:bc:92:4d:30:be:1f:e9:c9:17:4b:be:eb:bc:96:73:d2:
         7b:e0:27:25:c6:2e:d0:a3:0c:25:72:ff:ab:3c:27:02:ed:12:
         90:14:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:33 2025 by rpki-client