Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e31ad85f-3aec-3c96-a88c-4edca82e76a8.roa
File:                     e31ad85f-3aec-3c96-a88c-4edca82e76a8.roa (raw, json)
Hash identifier:          /kYQspRwpIJcM57tROoHNeW5lB7T8jnYExhP0Afjr7Q=
Subject key identifier:   70:ED:38:68:95:11:A2:E7:48:00:3E:ED:99:1D:86:17:1D:01:7A:38
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584E78FF891BEEF10CCB255CFF28
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e31ad85f-3aec-3c96-a88c-4edca82e76a8.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     31898
IP address blocks:        130.35.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:89:1b:ee:f1:0c:cb:25:5c:ff:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=dffa0413-be5d-46c2-b773-2275287a09ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:cf:64:7b:07:51:1f:66:78:07:63:33:ef:
                    7b:f3:9f:9e:88:e5:45:cc:79:37:c7:6c:bd:a7:23:
                    a9:6d:b7:f5:ec:f1:8f:d5:df:0a:94:8f:8b:e3:70:
                    ab:90:9e:ac:4f:f6:7b:75:75:02:c4:7f:f7:ed:e8:
                    ad:ff:02:32:45:4b:dc:e5:67:70:12:78:8f:66:12:
                    ff:14:7b:e4:28:69:30:df:f9:ce:98:90:95:36:3a:
                    9a:8a:9b:9d:e5:4b:3b:90:9b:5e:99:b4:99:16:3f:
                    f4:da:ea:12:e6:dd:e9:fb:8a:9f:f6:f0:ac:0a:dc:
                    d4:9d:e0:2b:c4:4b:d1:12:9b:f9:dc:a6:be:55:e7:
                    1f:d5:78:90:44:23:d2:da:60:8a:5f:35:63:95:4d:
                    b8:dc:be:a8:0b:61:7b:df:3f:77:ba:00:2b:eb:e9:
                    69:03:1e:b3:6c:3e:d1:6d:11:cd:2d:ae:24:9c:e5:
                    db:e6:2b:2c:5a:37:1c:76:e4:c1:d8:6b:d8:04:20:
                    d8:25:d7:67:d8:d5:59:8b:d7:41:6b:ac:c1:01:32:
                    fb:ea:e4:2d:d5:d3:69:4f:60:45:d3:be:61:15:cd:
                    b5:c0:bb:bd:52:6d:c0:c0:6f:d9:a7:ed:53:68:72:
                    f5:c8:3a:7a:15:02:cf:7a:75:4a:61:09:6f:64:1f:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:ED:38:68:95:11:A2:E7:48:00:3E:ED:99:1D:86:17:1D:01:7A:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e31ad85f-3aec-3c96-a88c-4edca82e76a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d1:ab:f4:fc:82:83:48:f9:00:c6:cd:40:3a:a5:55:5b:bf:
         dd:d5:f9:c4:85:31:e0:4f:b4:8d:62:22:5c:f2:55:50:40:79:
         c8:fd:86:c0:74:cf:81:97:88:00:57:80:86:84:8c:67:16:c1:
         85:dc:4f:a2:5f:d8:0a:1e:d9:08:bd:77:58:c8:b0:24:3d:97:
         84:a8:d5:b5:08:56:7e:85:44:af:2d:5d:fa:28:f6:bf:ff:9f:
         81:08:d4:e4:63:4a:cc:cb:be:b6:70:46:16:8c:00:62:d4:52:
         e5:41:91:6f:4f:3f:79:2a:d0:93:59:43:9a:be:30:2d:50:9c:
         95:d3:b2:c4:55:6a:86:cc:78:65:e2:8c:d1:03:5f:a9:33:16:
         ee:bf:c1:37:2b:42:ac:a5:82:0d:44:d3:13:aa:90:20:2d:45:
         26:1d:5b:02:71:95:84:f6:1f:94:d7:cb:e0:f1:1c:8d:a5:43:
         37:19:f7:b7:90:55:7e:1a:9d:73:d5:38:31:dc:8e:96:9b:30:
         d5:9d:f5:ec:04:d3:07:ee:93:c3:bf:25:a1:bc:a3:01:3d:9c:
         d5:50:6b:b0:43:42:a2:18:72:87:43:72:00:1d:ec:ee:9f:59:
         6d:6a:5e:27:7c:55:5f:79:a8:b7:63:7a:9d:4f:c3:ec:e2:f8:
         c4:75:dc:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/4kb7vEMyyVc/ygwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy
ZTQ0MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
ZGZmYTA0MTMtYmU1ZC00NmMyLWI3NzMtMjI3NTI4N2EwOWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVPPZHsHUR9meAdjM+9785+eiOVFzHk3x2y9
pyOpbbf17PGP1d8KlI+L43CrkJ6sT/Z7dXUCxH/37eit/wIyRUvc5WdwEniPZhL/
FHvkKGkw3/nOmJCVNjqaipud5Us7kJtembSZFj/02uoS5t3p+4qf9vCsCtzUneAr
xEvREpv53Ka+Vecf1XiQRCPS2mCKXzVjlU243L6oC2F73z93ugAr6+lpAx6zbD7R
bRHNLa4knOXb5issWjccduTB2GvYBCDYJddn2NVZi9dBa6zBATL76uQt1dNpT2BF
075hFc21wLu9Um3AwG/Zp+1TaHL1yDp6FQLPenVKYQlvZB8tqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDtOGiVEaLnSAA+7ZkdhhcdAXo4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0
MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZTMxYWQ4NWYtM2FlYy0z
Yzk2LWE4OGMtNGVkY2E4MmU3NmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx
MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj
MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1
MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHRq/T8goNI+QDGzUA6pVVbv93V+cSFMeBPtI1iIlzyVVBAecj9hsB0
z4GXiABXgIaEjGcWwYXcT6Jf2Aoe2Qi9d1jIsCQ9l4So1bUIVn6FRK8tXfoo9r//
n4EI1ORjSszLvrZwRhaMAGLUUuVBkW9PP3kq0JNZQ5q+MC1QnJXTssRVaobMeGXi
jNEDX6kzFu6/wTcrQqylgg1E0xOqkCAtRSYdWwJxlYT2H5TXy+DxHI2lQzcZ97eQ
VX4anXPVODHcjpabMNWd9ewE0wfuk8O/JaG8owE9nNVQa7BDQqIYcodDcgAd7O6f
WW1qXid8VV95qLdjep1Pw+zi+MR13Is=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:51:00 2026 by rpki-client