Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bdda2cdf-5e97-3e11-8313-3cc4e68dd250.roa
File:                     bdda2cdf-5e97-3e11-8313-3cc4e68dd250.roa (raw, json)
Hash identifier:          KUgIoWG5+TkZoqjxUA8E0HNcjT6qOio29TMP6EODNQk=
Subject key identifier:   28:40:EC:1B:DA:3D:26:7C:4E:39:8F:63:F2:5A:74:AC:EE:5A:C2:E2
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584EA79BF85808079E1AE47C8380
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bdda2cdf-5e97-3e11-8313-3cc4e68dd250.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        130.41.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:f8:58:08:07:9e:1a:e4:7c:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=38500584-79f0-46fa-a1ad-b7a1637d30f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:06:dd:8f:33:ec:fb:ed:87:dd:bf:c1:8b:
                    25:bd:a4:d5:6d:a7:db:98:4d:9d:41:76:e9:d9:39:
                    91:fc:b0:57:67:9f:d9:f6:1c:8c:28:d3:ea:18:0f:
                    90:40:27:96:d4:09:3f:93:10:55:1c:24:70:b3:b0:
                    c5:a3:8b:c7:8b:8c:56:c2:c7:86:00:8d:a3:e2:96:
                    b0:e7:0b:55:cb:e0:cb:91:e9:14:0d:ed:5c:66:92:
                    02:35:a0:94:cb:a9:f8:8e:55:03:cf:dd:f3:1a:6d:
                    f6:a6:f0:d4:0f:ff:54:fe:5f:2d:4f:1e:17:e2:d2:
                    6c:db:11:be:d8:d8:24:ec:b2:97:c8:71:f9:67:d2:
                    f3:d1:1c:42:da:5a:fe:41:d3:e6:eb:89:24:fb:77:
                    f9:77:6e:25:66:42:3c:c7:50:f0:17:43:b8:6e:58:
                    81:ac:3b:9a:6e:b7:53:ce:23:fe:58:8b:e9:fe:8f:
                    75:e8:15:02:5b:a3:b2:9e:b9:d8:9b:92:bf:79:da:
                    47:ba:69:e4:26:32:ca:b0:8c:03:b4:13:9a:0f:8b:
                    ae:8d:b9:97:d2:f6:83:42:94:cf:be:22:47:24:7d:
                    d3:84:6e:a0:2b:c8:54:5f:81:bf:98:cc:87:28:2b:
                    8a:05:88:ed:da:20:90:4c:de:79:46:0e:69:6d:2d:
                    a5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:40:EC:1B:DA:3D:26:7C:4E:39:8F:63:F2:5A:74:AC:EE:5A:C2:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bdda2cdf-5e97-3e11-8313-3cc4e68dd250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:84:a1:0e:15:68:85:b4:eb:74:87:8a:ba:6a:63:fa:3a:53:
         ea:a1:c8:00:35:bd:d6:c1:b5:9d:06:fd:c3:29:42:0c:72:37:
         79:3a:5e:d3:d7:f5:10:67:8e:ab:63:7a:df:36:07:99:32:82:
         ab:58:2d:34:43:f2:26:79:3a:82:f6:d5:ca:52:f4:73:ba:24:
         dc:60:80:cc:a5:2e:d7:6f:61:47:09:71:f3:d6:43:d3:1e:a2:
         96:ab:89:d5:2a:4e:b2:08:01:ea:ea:28:e5:be:a4:d0:79:72:
         fd:8c:50:7e:b3:11:8c:57:07:0d:77:ee:1e:77:d4:4c:c8:c5:
         7d:a7:26:45:90:87:55:8d:c0:13:11:db:92:0b:3d:30:b7:21:
         db:6e:1e:e1:fa:82:e8:bf:66:fe:1d:63:7d:c3:13:43:d6:84:
         d6:b5:db:44:03:3b:14:0e:b4:fd:4e:ef:a0:ed:ee:d2:f5:51:
         32:f7:3d:e4:dd:66:39:bf:9c:65:cc:70:ce:84:ea:91:63:45:
         c0:94:41:7a:c6:6c:eb:45:0c:de:3b:3d:d9:06:32:70:4f:83:
         a5:a0:b9:74:b3:af:36:10:2c:e9:4f:f9:a2:d6:0b:18:ef:cc:
         c3:3d:d6:31:d5:70:c4:ba:f5:aa:82:bd:be:6e:06:be:13:83:
         c1:27:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:34:29 2026 by rpki-client