Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/094e6fc0-13fb-3e41-b547-101864c6f875.roa
File:                     094e6fc0-13fb-3e41-b547-101864c6f875.roa (raw, json)
Hash identifier:          PoMfmPQoryJuE8XRmWm5FeEuBeOMCfQRaaKKCqyyR7o=
Subject key identifier:   F9:D1:45:A8:1E:1F:13:E2:DA:23:38:8A:76:96:2E:CF:57:21:2B:48
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEEAD4480BCD650F3BDAF6A80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/094e6fc0-13fb-3e41-b547-101864c6f875.roa
Signing time:             Thu 21 Aug 2025 17:32:16 +0000
ROA not before:           Thu 21 Aug 2025 17:32:16 +0000
ROA not after:            Wed 19 Nov 2025 18:32:16 +0000
asID:                     31898
IP address blocks:        130.61.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:ad:44:80:bc:d6:50:f3:bd:af:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 21 17:32:16 2025 GMT
            Not After : Nov 19 18:32:16 2025 GMT
        Subject: CN=b18d2714-1dd9-4f7e-8ca2-401a944b97b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b4:58:5c:5b:d4:6a:a3:76:d8:b3:e3:01:09:
                    de:0b:16:03:08:8e:b4:34:89:e2:2a:dd:8e:8e:d8:
                    af:40:91:d6:be:2e:6c:f3:8d:7a:fd:ff:ce:f2:aa:
                    1e:56:fb:4d:0e:ac:c1:1a:de:71:e2:df:88:74:cc:
                    46:24:52:ac:9e:12:f1:cf:3d:a9:e0:99:bc:99:8b:
                    0d:46:4a:a7:a2:e1:52:c8:ad:13:9a:54:8a:6e:85:
                    d9:53:29:f0:d9:68:1f:f9:84:dd:35:04:47:8a:8e:
                    99:0f:39:aa:1d:37:2d:3e:59:ad:92:6a:40:8a:c8:
                    89:a0:c0:c0:a5:af:81:4f:5b:be:10:2c:41:64:1c:
                    c5:99:fa:5f:62:3a:80:5d:cc:11:1c:82:77:d6:24:
                    b4:76:fe:28:4b:00:cd:cc:be:50:51:8b:bf:1e:3e:
                    fd:ec:58:0f:fe:d6:12:47:8a:21:39:9d:5b:5e:f8:
                    7d:a3:f4:31:82:36:78:bd:dc:f1:5a:b0:e0:f0:7f:
                    9a:b3:b7:76:37:c9:fd:4a:59:5b:3b:bc:3c:10:ef:
                    af:2e:e7:99:bd:55:77:6b:0c:5e:e4:c4:ce:02:af:
                    1b:8f:07:c7:63:df:a2:2c:96:10:ae:78:34:05:00:
                    7a:70:90:62:8d:54:7c:c5:58:8a:7d:34:08:b2:08:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D1:45:A8:1E:1F:13:E2:DA:23:38:8A:76:96:2E:CF:57:21:2B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/094e6fc0-13fb-3e41-b547-101864c6f875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.61.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:13:db:52:15:e0:de:f8:18:73:86:c0:89:1e:a0:3a:50:eb:
         c8:ed:e8:2f:bf:09:8e:a1:82:70:61:da:a2:af:da:8a:24:4b:
         07:fb:83:b5:6b:68:9f:56:1f:5d:96:bc:69:03:a9:30:e8:8b:
         62:83:56:23:56:46:3e:39:28:fe:85:8b:e8:68:0d:5d:7d:4b:
         cc:50:1e:f7:fd:68:80:4b:8a:b3:c2:ce:17:85:81:53:fa:99:
         f2:18:c9:9a:33:21:a2:0f:f6:d9:2c:0f:b5:9b:55:60:3f:94:
         50:e9:5c:14:44:ab:1f:ab:34:20:5a:98:c1:35:2d:a0:77:69:
         4e:85:d4:21:a1:81:29:21:76:fb:29:f6:5e:93:f4:1f:c4:79:
         7b:27:75:1d:cb:a2:0f:f6:b3:d4:7e:7a:27:5d:0d:b2:c8:7b:
         82:21:78:d5:72:93:d3:a7:88:75:a7:56:f4:e1:c8:90:39:88:
         62:a8:34:b9:93:7a:d3:b2:68:e5:21:29:3f:d2:96:13:f2:7f:
         d4:b5:98:dc:c4:8b:ba:0b:1f:c3:92:6a:0d:e0:d9:df:eb:f2:
         6e:2b:58:16:95:ff:ed:05:f6:98:6f:2b:08:d4:93:98:6a:41:
         b3:65:38:50:fa:4b:a0:dd:7e:9f:8d:b4:c6:67:43:11:07:2b:
         42:16:f2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:14 2025 by rpki-client