Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/8b53ab0a-c85c-3b93-8b70-07a56b5b3dad.roa
File:                     8b53ab0a-c85c-3b93-8b70-07a56b5b3dad.roa (raw, json)
Hash identifier:          H3uYcqfMMAuwJApzuX9fyfoQcdy2zBHNzLhpoBKpSQI=
Subject key identifier:   79:6A:6B:E6:28:EB:CB:93:3E:35:FC:12:08:8F:DC:B0:F6:80:AE:0E
Certificate issuer:       /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial:       010D0C9F4328584B1D9C28DFC761965EFD5A2300
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/8b53ab0a-c85c-3b93-8b70-07a56b5b3dad.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     2055
IP address blocks:        130.39.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:28:df:c7:61:96:5e:fd:5a:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=9327f8ae-570c-4cbc-84aa-19c87641dbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:76:16:93:74:c4:ea:d5:43:d5:df:90:a8:27:
                    cf:9a:3b:42:12:cf:ee:a1:08:8c:22:49:3a:51:66:
                    e7:a4:73:56:60:83:dd:34:00:be:4a:de:a0:4a:bf:
                    fb:18:45:66:8f:62:83:46:94:98:f2:90:32:2b:de:
                    8b:02:b2:ad:c0:75:e6:7f:42:fc:07:6d:8b:6e:46:
                    bd:35:dc:d5:98:3e:f5:e6:1d:03:40:cb:87:92:9d:
                    7a:07:76:ac:85:76:45:22:0b:a1:74:85:f4:56:a0:
                    ec:41:58:01:af:f2:f9:7e:d1:b5:3b:3e:75:74:ff:
                    e7:fe:bd:cb:3a:4b:7e:ca:c8:f1:c6:17:38:e5:95:
                    ac:24:7e:d5:d1:f4:98:b9:bc:cc:58:08:6a:91:84:
                    ea:a9:c2:4f:50:67:38:99:5b:3f:61:c4:a7:4b:db:
                    56:96:17:cb:55:60:64:7f:77:57:80:73:16:90:b7:
                    ca:36:f0:d2:66:44:a5:f4:f6:13:7b:a9:09:74:13:
                    c4:3d:d0:1b:ac:b1:95:79:c1:27:6d:7e:1b:e4:c2:
                    7e:cd:88:05:c4:66:4a:fc:59:eb:c5:c0:6b:e1:f9:
                    bd:45:a7:12:3a:f2:53:d5:b1:95:de:2e:9d:f3:a4:
                    20:59:1a:32:fd:1b:ed:14:86:33:d6:07:58:b9:1f:
                    06:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6A:6B:E6:28:EB:CB:93:3E:35:FC:12:08:8F:DC:B0:F6:80:AE:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/8b53ab0a-c85c-3b93-8b70-07a56b5b3dad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl

            X509v3 Authority Key Identifier:
                keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.39.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b2:f4:0c:aa:05:bb:ad:93:ab:d8:f8:7d:5d:e9:d0:a6:85:
         b0:dd:18:ad:e8:f4:b9:ed:fe:92:07:ba:e0:6a:cf:6f:23:55:
         74:76:22:91:bf:f3:13:38:79:07:63:1e:6f:bc:bb:70:90:99:
         b6:73:0d:0c:52:7c:8e:5a:23:71:a5:c4:b9:5f:fc:9b:29:75:
         5a:f7:60:d3:a3:12:b3:18:b3:17:67:3d:94:3b:4f:d2:9f:ab:
         98:b9:59:13:f8:ab:c2:a2:51:04:dd:39:b7:73:5b:d6:d5:26:
         5b:cd:4b:85:6c:5e:54:64:7f:f9:7d:7b:dc:e5:56:b5:99:55:
         e5:9d:4f:36:09:96:19:aa:f5:fa:57:f1:2e:59:c4:38:a0:f6:
         30:7e:75:1f:e0:53:87:05:73:07:f5:bf:71:a7:af:66:26:ca:
         0a:2b:4d:1c:80:e0:9f:55:64:b6:8f:19:97:eb:cb:92:4b:e9:
         46:c6:70:50:f4:40:aa:a0:71:cf:7e:29:f0:0d:07:39:c7:90:
         82:d6:9f:5f:86:6f:ed:a0:0b:5c:41:71:76:29:b5:e9:a3:98:
         65:39:e3:ac:39:a6:83:c6:be:71:26:93:02:eb:37:5d:3b:af:
         9c:39:6e:a8:87:50:7d:23:08:9a:9d:25:47:0a:61:6e:82:75:
         09:a1:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:11:55 2025 by rpki-client