Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/94306b01-ead2-3d02-adce-7f1b38e324f9.roa
File:                     94306b01-ead2-3d02-adce-7f1b38e324f9.roa (raw, json)
Hash identifier:          xjdLibW5t/EToPprIvwGIH0/EFYQ3xg2ucID49qD1Dw=
Subject key identifier:   F9:63:27:4B:FC:E4:62:EF:50:40:17:13:74:F2:64:8C:46:EA:BD:46
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584CACB327F5FD607770A7C54AC0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/94306b01-ead2-3d02-adce-7f1b38e324f9.roa
Signing time:             Wed 28 Jan 2026 11:54:39 +0000
ROA not before:           Wed 28 Jan 2026 11:54:39 +0000
ROA not after:            Tue 28 Apr 2026 10:54:39 +0000
asID:                     35039
IP address blocks:        130.214.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ac:b3:27:f5:fd:60:77:70:a7:c5:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jan 28 11:54:39 2026 GMT
            Not After : Apr 28 10:54:39 2026 GMT
        Subject: CN=ae6f9bc9-9e6b-4ecc-9d20-9f2aa7d2ee98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:01:1e:c5:f6:84:96:c4:be:83:2b:fa:dd:
                    ae:0c:74:b0:a3:4e:d2:17:e7:6b:32:8d:0c:98:d5:
                    1d:96:8f:cd:75:00:e7:b4:6b:4c:cc:e7:ec:39:98:
                    8d:82:71:d8:1c:c2:52:7b:0e:a8:31:d0:b6:6e:9e:
                    1d:2e:81:f7:11:5b:ea:83:7a:a9:ee:bc:6c:55:33:
                    ba:6a:70:cb:28:79:0c:ae:e6:4a:83:87:54:7e:c8:
                    70:a8:d7:23:81:8a:de:76:be:35:21:44:44:64:ba:
                    79:c4:d0:4c:e7:bc:f0:af:82:33:79:7b:0f:fa:c1:
                    cd:bf:87:57:8e:2b:77:1f:d5:2c:56:b3:6d:65:13:
                    ad:c8:e2:94:e4:0c:65:88:e0:99:a2:b9:a0:da:ee:
                    39:8b:c0:73:71:23:50:81:35:a7:65:f8:d1:54:f5:
                    16:1a:30:c5:94:2e:57:cc:9b:d0:82:f1:f2:66:11:
                    ee:23:ac:25:40:82:b2:64:63:59:7b:34:20:a0:8e:
                    07:d8:b1:05:65:cb:b8:00:6a:35:9a:6c:9b:1d:86:
                    e5:f4:8b:99:a8:49:a6:17:1f:0a:70:89:78:9d:1b:
                    a0:b7:1d:4d:0a:f8:cc:df:57:fe:b0:1c:d3:17:ac:
                    3d:57:3c:e2:a5:22:ff:83:4a:cf:12:3c:92:9e:e8:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:63:27:4B:FC:E4:62:EF:50:40:17:13:74:F2:64:8C:46:EA:BD:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/94306b01-ead2-3d02-adce-7f1b38e324f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a3:4f:1b:49:51:82:e6:88:3b:1a:22:40:39:92:6f:aa:fe:
         77:fd:96:ae:5e:3a:81:76:99:04:b4:c8:91:dd:40:56:23:12:
         ce:71:f5:a3:e3:1e:45:bc:90:d8:89:7f:03:c8:8e:a2:79:9a:
         2d:cd:a8:a3:c4:af:0e:ee:9f:b1:71:1a:9b:e9:75:ff:71:37:
         1a:d8:6f:fa:e1:63:af:99:89:5c:6b:79:0d:28:01:a0:8e:64:
         c0:53:fb:4e:94:71:2e:37:be:3c:bc:71:5b:45:36:bd:b8:e5:
         34:b6:ab:7d:12:90:29:60:d1:b9:53:53:8e:e0:10:69:0e:48:
         31:19:53:7e:dc:f5:d7:37:ed:2e:26:13:a6:01:a4:36:c5:0c:
         99:cc:e4:0e:c8:39:c6:af:0b:4f:cf:f5:50:a8:b8:31:4b:cd:
         d2:ff:f9:5c:81:f5:07:bc:f2:14:2e:0b:08:26:ae:2e:c1:1e:
         78:ad:3c:be:9d:8d:32:86:50:e6:64:51:d1:b0:77:d2:ff:ff:
         70:90:25:b6:f8:74:c5:18:b5:da:97:e7:1f:26:f1:9c:2c:f2:
         c8:12:36:b3:aa:19:60:1c:4c:c2:c9:af:47:ee:e9:e3:f5:bd:
         63:81:6a:2e:37:d8:0e:aa:07:f3:cf:42:d7:f6:08:6f:14:a4:
         9c:67:b6:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyssyf1/WB3cKfFSsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI2MDEyODExNTQzOVoXDTI2MDQyODEwNTQzOVowLzEtMCsGA1UEAxMk
YWU2ZjliYzktOWU2Yi00ZWNjLTlkMjAtOWYyYWE3ZDJlZTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WcBHsX2hJbEvoMr+t2uDHSwo07SF+drMo0M
mNUdlo/NdQDntGtMzOfsOZiNgnHYHMJSew6oMdC2bp4dLoH3EVvqg3qp7rxsVTO6
anDLKHkMruZKg4dUfshwqNcjgYredr41IUREZLp5xNBM57zwr4IzeXsP+sHNv4dX
jit3H9UsVrNtZROtyOKU5AxliOCZormg2u45i8BzcSNQgTWnZfjRVPUWGjDFlC5X
zJvQgvHyZhHuI6wlQIKyZGNZezQgoI4H2LEFZcu4AGo1mmybHYbl9IuZqEmmFx8K
cIl4nRugtx1NCvjM31f+sBzTF6w9VzzipSL/g0rPEjySnugSQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPljJ0v85GLvUEAXE3TyZIxG6r1GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvOTQzMDZiMDEtZWFkMi0z
ZDAyLWFkY2UtN2YxYjM4ZTMyNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtYeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJCjTxtJUYLmiDsaIkA5km+q/nf9lq5eOoF2mQS0yJHdQFYjEs5x9aPj
HkW8kNiJfwPIjqJ5mi3NqKPErw7un7FxGpvpdf9xNxrYb/rhY6+ZiVxreQ0oAaCO
ZMBT+06UcS43vjy8cVtFNr245TS2q30SkClg0blTU47gEGkOSDEZU37c9dc37S4m
E6YBpDbFDJnM5A7IOcavC0/P9VCouDFLzdL/+VyB9Qe88hQuCwgmri7BHnitPL6d
jTKGUOZkUdGwd9L//3CQJbb4dMUYtdqX5x8m8Zws8sgSNrOqGWAcTMLJr0fu6eP1
vWOBai432A6qB/PPQtf2CG8UpJxntk0=
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:41:19 2026 by rpki-client