Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b141f248-49b7-31ab-b20c-04519496bec3.roa
File:                     b141f248-49b7-31ab-b20c-04519496bec3.roa (raw, json)
Hash identifier:          mOJz/b84QRqyMELE0GqltiTIIJ5/KxnhgEGQkTJgWio=
Subject key identifier:   C0:A6:36:A2:25:81:51:9E:86:2C:D9:4B:C4:D4:6C:EE:72:2C:59:9A
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584D98BAB4EDBF5C89AA807D0F80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b141f248-49b7-31ab-b20c-04519496bec3.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        130.35.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:b4:ed:bf:5c:89:aa:80:7d:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=8f9662a7-e237-4581-9db2-2589d7133ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:92:8d:0c:8a:f3:a3:13:31:da:21:ac:46:
                    87:7e:3d:7a:fc:38:06:9c:49:5a:96:6a:53:23:87:
                    a7:3d:b3:a9:a2:0d:aa:c9:a7:0e:54:48:50:6a:af:
                    83:ea:ea:33:ce:00:42:bd:f4:e6:52:28:63:99:d6:
                    26:6b:8c:4a:28:d7:a3:45:8e:ea:0b:cb:d5:06:20:
                    25:02:6f:ba:62:aa:7b:20:29:9f:72:a7:3b:9b:55:
                    2c:16:53:3b:57:99:5d:80:43:6b:65:35:ed:d6:0e:
                    75:96:79:09:65:b5:db:d6:f4:51:ef:22:62:2c:23:
                    05:32:37:79:3a:4c:f9:6e:4b:89:35:b7:05:14:16:
                    bb:d7:c2:48:89:b2:f8:6a:29:5c:24:33:54:3f:93:
                    e9:13:ae:83:7c:69:e2:ec:8c:8a:e4:f8:c9:12:d0:
                    85:21:62:96:5c:7d:2c:1e:9f:af:5b:23:cd:d8:83:
                    1a:cc:01:60:bb:78:8d:b2:8a:cb:10:2e:16:61:d2:
                    5f:b6:df:3f:76:e7:6d:33:72:1a:71:03:e0:33:e8:
                    8f:5e:78:28:69:14:49:9c:14:21:f4:90:85:8d:3a:
                    1a:46:83:79:62:88:bc:22:2e:7c:cc:19:8b:64:47:
                    f7:60:0c:6d:a2:64:33:1b:87:fe:91:98:3b:9b:93:
                    f4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A6:36:A2:25:81:51:9E:86:2C:D9:4B:C4:D4:6C:EE:72:2C:59:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b141f248-49b7-31ab-b20c-04519496bec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d3:04:90:cb:45:51:37:eb:ee:de:68:53:86:e7:80:2a:73:
         c3:0a:a7:99:d7:54:2e:6e:60:43:ac:19:24:22:f5:bd:18:2e:
         d1:8c:fd:cb:23:1e:76:5a:81:f5:18:bc:37:ed:0e:66:03:fe:
         37:02:79:7c:bd:9c:5e:2c:7f:a6:98:50:12:6e:4a:01:41:90:
         00:23:ae:b3:ae:86:ff:a4:0a:cf:94:5b:6f:c1:c2:80:62:ac:
         01:bf:8e:89:6d:32:21:ed:d6:fd:30:0b:f2:46:72:69:76:ce:
         64:01:0f:a7:8b:5a:37:96:0e:5a:5b:d1:6d:81:00:07:4e:0e:
         a2:96:a4:70:03:09:dc:69:f7:51:58:9a:c3:27:9a:29:2a:0a:
         71:f8:72:50:dd:e3:3a:f6:eb:06:a5:a0:bd:ed:bd:46:d3:fd:
         47:f2:22:5f:10:04:58:6b:91:82:e4:b5:b0:d9:3a:cf:df:e8:
         61:cf:b2:b6:ba:a6:9e:d7:3a:9d:53:87:9f:49:ce:9a:40:a7:
         65:f9:1f:e0:13:a5:2b:ba:f8:fa:9c:31:a6:89:1c:a4:71:d0:
         dd:67:d1:25:62:a0:05:92:21:56:96:cc:b6:d7:cc:19:c1:eb:
         08:bd:25:b4:2f:bb:a4:e3:1b:39:fa:cc:2f:08:92:59:55:ce:
         c2:d4:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:57 2026 by rpki-client