Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e31ad85f-3aec-3c96-a88c-4edca82e76a8.roa
File:                     e31ad85f-3aec-3c96-a88c-4edca82e76a8.roa (raw, json)
Hash identifier:          SlwpPaM3alM1HZBj8ByBFdfkHkaG/sU9cpgHx2jFvBY=
Subject key identifier:   A4:06:AE:74:69:42:C5:D5:7B:DE:A2:D3:3F:82:60:36:4E:00:F6:27
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584AF8C1EAEA0A328ABC9C3F7A00
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e31ad85f-3aec-3c96-a88c-4edca82e76a8.roa
Signing time:             Mon 25 Aug 2025 08:11:57 +0000
ROA not before:           Mon 25 Aug 2025 08:11:57 +0000
ROA not after:            Sun 23 Nov 2025 09:11:57 +0000
asID:                     31898
IP address blocks:        130.35.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f8:c1:ea:ea:0a:32:8a:bc:9c:3f:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug 25 08:11:57 2025 GMT
            Not After : Nov 23 09:11:57 2025 GMT
        Subject: CN=7214eab1-f92c-4297-8535-8aeec93d9fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:2c:3a:15:bb:cd:ce:7e:19:f1:3d:5a:98:
                    8b:1b:a0:b3:81:d0:cb:2a:7b:06:94:e8:3c:b0:ef:
                    d5:3f:fc:37:03:bb:1c:f4:63:8e:19:00:51:b8:8b:
                    21:e0:ee:63:2f:b6:52:f4:1d:90:61:ee:40:d3:45:
                    90:21:f1:a6:9f:aa:71:f7:1b:29:b5:22:e6:f0:68:
                    1b:e1:0a:a0:69:ad:c6:e0:72:36:96:80:29:70:65:
                    2e:9a:e4:fe:b3:1d:34:12:ee:eb:44:a8:82:df:8d:
                    93:57:e1:27:b7:0e:3d:0d:df:70:bc:68:6e:83:6b:
                    c5:f9:3f:c2:b0:19:1f:b2:0d:1b:1f:9f:2c:d3:5d:
                    49:87:c9:51:93:84:d9:4c:da:d0:52:0a:ad:7a:81:
                    1f:79:82:93:5f:22:e4:cb:08:bd:d0:c7:d3:f0:f5:
                    ed:3d:a0:b7:8a:d3:98:bb:60:98:f7:0f:70:37:5e:
                    0d:f3:c4:2f:80:93:be:32:7f:ad:3f:a9:5a:2b:b0:
                    48:89:36:72:fe:7a:cc:f9:1b:8c:39:33:54:13:c9:
                    a7:7d:98:7c:04:19:0b:e8:07:6a:1a:1f:33:ea:30:
                    1a:97:69:1b:e8:b1:03:13:e1:41:4a:9f:d7:0d:7c:
                    a1:59:30:65:5d:09:b7:8c:86:fa:f1:dc:a6:73:7e:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:06:AE:74:69:42:C5:D5:7B:DE:A2:D3:3F:82:60:36:4E:00:F6:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e31ad85f-3aec-3c96-a88c-4edca82e76a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:9b:6e:87:94:d8:e1:87:a1:45:a3:12:9b:b3:b7:a4:d8:2f:
         27:46:3d:fe:f4:ab:4d:ac:01:c0:fc:df:bc:94:a6:27:73:81:
         b2:fb:b5:f1:40:c5:d8:7b:2a:36:e4:99:dd:e5:c4:9b:02:f9:
         03:bf:c4:a9:7b:4e:0b:91:d0:1e:98:61:fe:0e:04:d8:72:21:
         a5:43:4a:d7:a6:49:ae:b4:19:ac:23:9d:33:3b:d5:1d:36:9c:
         35:22:f3:40:46:9d:09:9a:c1:50:ac:ff:5c:cb:20:1e:46:9e:
         6c:c6:7d:52:12:04:d2:06:cd:7f:2c:99:51:8a:24:d6:8d:97:
         46:2b:29:e6:ee:22:46:01:ca:0e:91:42:5e:e7:68:22:6e:06:
         1f:af:26:c1:79:5e:32:9c:66:53:0d:f1:b9:8f:e1:db:e5:23:
         a5:11:8e:53:41:b2:86:a3:5b:91:98:9f:1b:3f:a6:0e:6e:35:
         32:d3:32:e2:a5:3b:bb:0c:88:a6:83:b7:f7:18:bc:60:3e:f7:
         68:17:84:42:b0:58:fd:56:58:74:3a:c3:58:e0:9c:55:ad:24:
         33:c8:33:5a:65:ba:c5:63:6f:df:e0:0c:ac:70:38:b6:95:b8:
         ca:90:0e:59:28:f9:80:f0:e5:65:89:11:2a:82:3e:00:ac:cc:
         dd:e9:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:11:26 2025 by rpki-client