Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/11a8d685-5401-340f-a257-d9727d529de7.roa
File:                     11a8d685-5401-340f-a257-d9727d529de7.roa (raw, json)
Hash identifier:          LfDjSJGfxyZNwxUjiSlyvbI7osC8Yj4lqN9RFH51GU0=
Subject key identifier:   E3:5D:84:6A:C2:E4:8C:00:A6:46:80:90:10:DB:50:6D:6E:56:25:78
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584AF8C263D8544C17ABEDCCD380
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/11a8d685-5401-340f-a257-d9727d529de7.roa
Signing time:             Mon 25 Aug 2025 08:12:54 +0000
ROA not before:           Mon 25 Aug 2025 08:12:54 +0000
ROA not after:            Sun 23 Nov 2025 09:12:54 +0000
asID:                     31898
IP address blocks:        130.35.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f8:c2:63:d8:54:4c:17:ab:ed:cc:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug 25 08:12:54 2025 GMT
            Not After : Nov 23 09:12:54 2025 GMT
        Subject: CN=2a7231de-1b26-493a-98b3-bd9b3880465b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:13:f4:24:6e:44:95:59:70:14:8c:e2:8c:a2:
                    c2:37:b7:a6:0d:f2:f3:7e:72:7c:93:a0:7f:46:a5:
                    5b:d9:82:c8:03:29:ff:30:ad:35:bc:a9:a6:d3:e2:
                    ad:56:8a:69:d2:91:d6:d3:27:b7:8b:f6:2b:35:4e:
                    07:21:c6:60:f2:fa:b7:18:14:74:8e:e7:1e:ae:71:
                    3c:01:70:20:f7:bf:4b:22:3c:a5:9c:a1:e6:83:c2:
                    f2:13:72:b1:b7:d0:fe:5c:50:de:14:04:66:36:97:
                    76:88:41:ca:e7:d0:52:73:89:87:c2:a9:19:b3:51:
                    5f:95:b4:28:a2:8b:f5:56:35:1f:d2:7d:82:41:4c:
                    57:13:7d:fe:e7:ec:ed:63:a0:de:84:b1:e8:ea:f1:
                    cb:fb:00:ed:c8:99:5a:5f:b0:b7:67:f8:26:42:a1:
                    59:47:0f:12:99:cb:3d:40:8d:f2:91:a0:1b:a5:07:
                    09:9e:9f:e7:48:0d:97:e8:ba:b1:47:7f:d3:9d:28:
                    d0:85:6c:54:be:65:3d:01:28:99:fb:8d:48:62:ec:
                    67:d2:03:08:e8:66:df:3e:ca:74:af:f9:00:f2:b3:
                    e3:57:32:d5:a1:5c:61:8e:4c:28:8b:08:84:90:df:
                    09:37:c6:1a:8e:f2:8c:7a:f7:78:bd:33:1a:9b:57:
                    85:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5D:84:6A:C2:E4:8C:00:A6:46:80:90:10:DB:50:6D:6E:56:25:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/11a8d685-5401-340f-a257-d9727d529de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:93:c0:84:a7:a4:7f:74:90:a5:66:52:8f:33:cb:8f:ea:41:
         9b:9b:69:51:88:b3:c1:1e:c6:3f:df:17:a0:b0:d2:22:d6:b0:
         6d:3f:c8:cc:73:00:c9:23:cb:08:f0:93:83:56:9b:62:61:fe:
         cd:37:57:c0:c8:50:8b:ce:83:32:0b:68:5a:ca:d1:e3:d8:ec:
         38:48:a9:ca:04:a6:f3:ba:e2:e4:73:11:e8:6f:7e:c7:78:db:
         51:9d:0d:62:2c:2d:f1:f2:e5:af:ec:ed:07:10:eb:a1:6c:27:
         01:d1:8a:6e:db:90:31:5a:a2:15:b6:27:c3:f3:d2:97:d1:95:
         fd:24:63:44:fb:cc:67:fa:1a:bb:ac:82:35:36:2c:3e:e0:77:
         ce:a7:4b:a3:43:ae:a0:d8:46:e3:78:db:b7:1c:05:a0:d8:e3:
         0b:d7:d4:1c:bb:e4:3c:1b:67:d7:9a:ed:c4:6e:16:6a:c4:04:
         ee:b9:0a:87:66:39:c4:fe:60:25:74:3c:a8:f5:0b:3e:1a:83:
         13:97:cd:e9:5e:9b:79:dc:22:52:27:c8:6e:83:91:81:f0:ec:
         c7:47:f5:ab:8d:bb:da:04:3c:5f:1c:60:78:74:16:71:07:a0:
         87:fe:d0:aa:f2:57:bd:79:3b:ca:dd:3b:a7:68:67:1d:45:3c:
         19:31:e6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:12:29 2025 by rpki-client