Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7daab95e-1581-383c-a12b-6b720b97c8d6.roa
File:                     7daab95e-1581-383c-a12b-6b720b97c8d6.roa (raw, json)
Hash identifier:          4Dg6E8IYS5Klk05Ql4AtP2N6fKp0oDsDQmdY+SW+4as=
Subject key identifier:   26:7E:7F:82:5F:FA:A0:70:63:E9:D3:4D:1C:2F:03:67:3C:D1:23:B9
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584E709F7C3D742F8C46554AEC80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7daab95e-1581-383c-a12b-6b720b97c8d6.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     31898
IP address blocks:        130.35.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:7c:3d:74:2f:8c:46:55:4a:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=d5406e6c-50bf-45a1-b22a-10272d387932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a8:65:4f:99:f3:6a:94:b2:e1:93:f1:d2:0f:
                    1a:90:3c:00:0d:67:86:27:1a:4f:85:45:69:77:fc:
                    74:ee:97:70:aa:75:8b:8f:e2:6e:20:a8:f5:a0:54:
                    51:19:d8:72:ce:a8:d4:1b:14:ae:89:31:13:32:eb:
                    58:33:3c:1c:3a:52:a3:4c:e7:a2:30:20:1b:fe:ca:
                    76:0d:a3:55:07:8e:7d:26:fb:2d:80:c7:b5:eb:47:
                    5d:27:73:f6:01:58:87:5f:13:a2:7c:ed:d9:9c:41:
                    5f:fd:28:17:13:1c:0e:94:61:4b:4f:d4:38:0b:f5:
                    cf:28:8e:63:ab:5a:3e:9d:35:4a:2e:68:fc:70:ce:
                    0f:09:40:c5:7d:10:2e:6a:7e:93:2f:6f:70:1f:10:
                    dc:40:bb:d2:54:de:29:57:96:15:35:34:10:f3:f6:
                    bf:39:23:a7:02:ff:06:3d:5c:a6:21:46:27:1c:23:
                    44:ed:71:d8:03:8a:61:9e:47:63:79:e2:b3:b0:9d:
                    c4:a4:c8:6b:70:69:f5:01:c8:0b:ed:b8:f2:d6:5a:
                    a3:4c:b4:a6:df:63:41:b8:63:c3:df:af:28:9f:7c:
                    3b:e2:a6:47:d9:a8:27:05:2d:d8:d0:f7:59:39:4f:
                    00:92:fc:71:64:e3:c7:9b:0a:01:58:bf:7a:76:f2:
                    66:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7E:7F:82:5F:FA:A0:70:63:E9:D3:4D:1C:2F:03:67:3C:D1:23:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7daab95e-1581-383c-a12b-6b720b97c8d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:5d:e1:f0:36:b3:18:69:bb:db:aa:47:54:62:c2:c4:58:70:
         5d:5e:b2:fa:a2:de:49:fc:80:e8:6b:13:02:de:2c:91:de:bb:
         fc:e8:a6:df:d5:7c:d4:1a:98:e8:ad:fb:81:cd:cb:d4:4c:09:
         f5:64:4b:c6:c0:ba:f5:10:36:f2:1b:63:7d:8d:33:d1:c8:75:
         1f:22:57:88:b3:e9:f0:12:47:54:34:bf:3e:6f:b2:c7:04:55:
         26:c1:37:7a:f5:ca:02:5b:13:e9:c2:e3:9d:9f:d8:a8:ed:86:
         e9:e5:17:49:fb:8f:a8:db:12:98:55:af:b9:2f:d7:ea:e6:cf:
         ea:9a:f5:bf:03:09:5e:d6:6a:32:ad:99:63:d2:98:7f:43:0d:
         d1:03:39:7e:d6:18:8a:49:9d:9a:c9:c9:f7:46:9d:32:28:0e:
         7a:d4:49:a5:0c:39:38:bd:2a:9a:43:db:00:3f:e4:56:6a:0b:
         2f:d5:ea:6a:a2:ff:bd:ad:87:e7:30:ef:5e:f4:7c:c1:e9:da:
         e2:b4:e7:48:c8:43:1b:4f:c2:7b:c1:bc:f2:c7:82:16:c5:6d:
         70:1a:fc:3f:ba:61:55:5d:97:fa:52:0f:69:d7:a1:3b:57:69:
         7e:64:68:a9:64:82:a7:54:31:f1:a7:56:9b:4e:e8:c0:71:a3:
         b2:4f:20:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:26:32 2026 by rpki-client