Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323d3cfb-b9ce-34c9-bce4-119a300e8a69.roa
File:                     323d3cfb-b9ce-34c9-bce4-119a300e8a69.roa (raw, json)
Hash identifier:          tkZTtKiWC0e9gSwHMSqNHL0B4Jj4wfKRFw+UY6a+Ebc=
Subject key identifier:   95:8A:08:19:20:10:B9:44:C7:E1:CE:8D:25:04:AC:41:E7:77:07:CD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D1F4A4A309E248EE1FB75C100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323d3cfb-b9ce-34c9-bce4-119a300e8a69.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396982
IP address blocks:        130.211.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:4a:30:9e:24:8e:e1:fb:75:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=6f745d76-8f0d-4188-9294-cf08e3306dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9a:e7:58:39:8b:ea:62:2f:20:64:b4:9f:b5:
                    77:d6:2d:33:ea:ee:f2:74:cc:3b:17:9e:9d:6e:d6:
                    00:eb:b7:0e:5d:b7:17:e2:4d:18:8d:9d:ca:f8:3d:
                    ae:d1:16:06:57:8b:2f:9a:d7:50:98:55:db:1b:a0:
                    b6:0c:55:f3:2f:0b:fb:c8:5f:51:e1:f1:ca:3a:64:
                    b1:bc:e7:c9:1b:dc:65:88:8f:b3:90:92:5f:51:63:
                    0a:7e:4e:3a:40:9f:89:fe:90:43:c1:68:19:27:0f:
                    65:6c:60:6b:57:90:f2:bf:09:64:26:65:b9:81:92:
                    a1:c5:a0:37:39:c6:93:25:a2:2d:f2:4c:15:a8:a7:
                    b3:c8:9b:f2:3c:52:35:3c:6f:79:dd:ad:f3:ef:3d:
                    1f:63:f6:42:fb:2c:b1:f4:83:3a:fd:d6:ce:d8:63:
                    71:98:34:f5:9f:fc:b0:b5:02:be:c3:b7:5d:39:bb:
                    ff:59:15:87:c0:e1:37:de:fd:05:79:13:97:46:e0:
                    c4:fb:4a:f7:c5:ab:36:24:a3:59:8c:07:b7:68:b8:
                    61:04:c2:81:66:8d:59:34:5f:57:67:fe:99:22:c0:
                    f9:b8:a5:0a:2b:ba:60:ff:c9:f3:45:43:d0:04:5f:
                    f1:f6:19:a0:32:c5:39:42:98:e3:4d:25:17:26:63:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8A:08:19:20:10:B9:44:C7:E1:CE:8D:25:04:AC:41:E7:77:07:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323d3cfb-b9ce-34c9-bce4-119a300e8a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.211.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:16:f1:f2:2d:21:40:46:bd:13:24:fb:78:6b:68:46:ff:ce:
         09:4d:3d:79:9d:2d:8a:9b:0c:13:01:35:f7:12:a9:37:3c:30:
         3f:e4:1a:00:d9:df:fe:bb:ed:7a:87:c7:1d:a7:b6:9c:32:a9:
         71:63:ef:a8:db:1a:08:fc:d4:0b:1b:a3:56:c7:bb:84:e6:cf:
         2f:c3:b7:f0:34:72:47:08:5c:c1:ac:53:ae:85:3f:f1:87:09:
         e1:28:a3:7a:af:42:40:4a:55:e6:2b:66:38:24:cb:fa:49:c3:
         f1:fe:90:88:67:6d:4f:9a:2c:d2:3f:a6:23:34:a7:38:35:2d:
         22:92:c7:6f:b3:a1:ba:ca:31:cd:eb:6a:f0:10:43:16:a4:74:
         0c:13:58:b2:7d:84:4c:c2:08:76:85:3c:f1:36:75:ba:41:58:
         03:4e:d2:79:d2:80:1f:ad:ab:0b:f0:8c:c8:24:1c:f5:83:e0:
         0a:6f:6e:09:91:ae:11:d0:dc:91:11:a1:0f:f3:fe:ea:ad:05:
         59:33:72:49:0f:a9:ba:4f:ec:53:79:50:45:85:4f:9d:0a:fc:
         70:03:cc:19:1a:a9:11:7b:c7:56:e6:24:13:76:f3:d2:4f:91:
         3d:3a:63:fc:42:0a:08:59:dc:30:8a:51:b3:51:c6:87:96:14:
         ac:4e:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:53:20 2026 by rpki-client