Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa
File:                     898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa (raw, json)
Hash identifier:          KHmIPE9pnc+M6TmWzEy78iDqIuQ67c6bYIwLtDjuq7U=
Subject key identifier:   15:A8:07:B4:A2:AE:6A:97:7C:9E:37:C8:A2:74:4D:69:62:04:C7:9E
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584F1B6245B9ED9ECE2ABB2CFE00
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        130.35.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:45:b9:ed:9e:ce:2a:bb:2c:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=da197f59-68ae-492c-a6a0-272ab4c1b7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:cc:72:29:45:5e:f4:1a:5a:f8:38:b0:22:
                    50:c9:4e:01:9b:c3:eb:ea:3d:16:a0:23:69:75:bb:
                    18:c9:f3:1d:e6:1a:52:65:60:64:bb:af:6f:7a:bc:
                    f5:18:55:55:ec:90:c3:c6:ce:0a:c7:e1:ab:b0:3d:
                    47:73:12:c5:70:5d:13:19:da:19:38:d7:ed:1a:d9:
                    f1:bc:53:73:1c:ff:2e:62:f0:27:f2:55:0f:2f:6c:
                    f2:61:38:0d:ec:2e:82:66:2b:8d:dc:78:a9:00:09:
                    7a:b8:2e:ac:b0:5c:43:ac:7c:62:5b:0e:ba:31:57:
                    3b:0f:8d:59:9d:14:4b:9a:42:31:36:0e:35:20:4f:
                    5a:83:28:f3:9b:ae:43:e2:b3:6f:36:7b:ff:82:61:
                    72:9f:9b:54:47:d6:ae:2f:27:60:d3:c9:b4:41:9e:
                    1b:be:64:ce:d7:dc:74:9b:84:94:7c:f8:04:78:30:
                    2e:09:96:21:a6:85:fa:3f:84:c6:4b:b1:95:55:cb:
                    cf:7c:26:23:e8:fe:f7:57:13:c0:fa:9e:94:95:c9:
                    06:7e:d5:fb:95:8a:93:b8:01:a7:41:72:1b:fa:ae:
                    ed:50:4a:7c:16:09:ea:5e:b2:27:22:f8:3f:14:66:
                    9a:14:2a:ec:d6:20:4f:1b:9f:c5:c8:f8:e1:b9:ec:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A8:07:B4:A2:AE:6A:97:7C:9E:37:C8:A2:74:4D:69:62:04:C7:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e8:08:57:6c:ef:cf:61:68:3c:b7:0a:32:fb:41:87:fb:a3:
         6c:06:b9:9a:99:a2:c3:4b:8b:04:ab:7a:40:f7:f2:5f:c2:01:
         a5:e5:4d:06:8a:04:73:9b:18:d4:a5:75:ce:75:82:1b:79:41:
         e4:b9:83:83:a8:6c:91:01:08:b5:08:c5:9f:55:4b:b5:eb:14:
         7f:e1:dd:7d:6f:39:97:fa:1d:50:57:93:43:31:54:09:02:8f:
         48:d8:81:e6:98:f0:a5:a6:1a:d2:4e:4c:03:95:1b:c9:cb:72:
         7f:af:09:b5:b5:a6:15:67:dc:24:f7:4b:29:32:f6:a8:79:86:
         c0:75:20:13:6f:e1:1d:f6:49:f4:96:71:00:d4:e0:72:16:e0:
         4f:db:ed:7e:42:14:4e:d0:8b:06:78:9d:f8:4d:9a:0c:d8:0b:
         90:82:4d:11:83:d2:88:cd:cc:4c:52:35:d5:3c:af:0e:f5:e6:
         4b:a2:99:80:a4:a0:fc:6f:7c:73:84:0f:b1:01:1d:c3:a5:eb:
         35:0f:46:bc:3c:af:f3:d4:41:16:c4:81:1d:cc:fe:a3:9a:fb:
         77:02:07:0f:89:a9:90:15:fd:b8:0e:5d:be:85:ce:92:05:07:
         ca:1e:97:1e:77:4d:bb:5a:48:c3:5e:78:5b:d0:04:51:c5:b0:
         a7:15:7e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:37:11 2026 by rpki-client