Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7bd29ed6-d136-3140-a669-60b6b6ed5c3d.roa
File:                     7bd29ed6-d136-3140-a669-60b6b6ed5c3d.roa (raw, json)
Hash identifier:          XDA2Ye/9D+HMGCeysFNUuUE3YPmO3swRNBWHLsFdOCI=
Subject key identifier:   9C:E2:F8:02:45:41:EE:85:FB:DE:91:CE:6B:16:73:91:80:B6:95:A5
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4232E445A65F42C36AF8000
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7bd29ed6-d136-3140-a669-60b6b6ed5c3d.roa
Signing time:             Wed 19 Aug 2026 18:03:42 +0000
ROA not before:           Wed 19 Aug 2026 18:03:42 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        129.250.130.252/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:2e:44:5a:65:f4:2c:36:af:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:42 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=25ff20a5-ba10-4530-ac5f-f8109a2e34da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:c2:f6:ee:72:f6:b6:35:a1:67:86:d5:63:
                    17:b1:01:20:63:6f:e7:f8:6d:eb:b8:75:e2:89:49:
                    bf:3f:bf:51:2d:2d:90:92:9c:ae:77:9f:cb:d0:25:
                    b0:51:12:9c:fe:42:05:b0:95:13:05:f9:46:67:ca:
                    63:e3:d9:78:74:f9:89:ec:43:59:2a:7d:bf:79:97:
                    9a:e7:6d:d6:28:db:13:5e:65:ce:b6:80:91:22:d6:
                    d2:9a:8c:06:3c:0a:ab:80:19:56:4e:40:93:83:3c:
                    e7:1b:27:f9:23:ce:df:69:93:60:ad:d2:d7:aa:23:
                    b5:d2:70:6d:1f:3d:37:9c:10:84:8f:34:33:74:57:
                    bd:a2:54:04:bd:c3:b0:1f:5e:eb:2c:e5:59:78:0e:
                    ef:4f:56:fe:2f:90:49:0f:9e:c6:4a:be:4c:f1:3d:
                    d5:f6:a6:80:1f:25:63:09:00:46:b8:d4:ab:66:8e:
                    ca:f7:64:2e:a5:31:3b:14:33:09:ed:b4:cc:00:a8:
                    33:27:e7:84:ee:33:50:24:7c:b9:c3:a5:8f:77:53:
                    e5:9a:f3:b4:ea:4d:da:16:3d:7f:00:28:7b:02:9b:
                    9a:91:b7:4a:3b:88:48:be:4d:b5:2f:8f:ea:a4:3a:
                    f6:7c:c7:bb:8b:71:68:8f:79:fe:ca:fd:cb:e6:f4:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E2:F8:02:45:41:EE:85:FB:DE:91:CE:6B:16:73:91:80:B6:95:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7bd29ed6-d136-3140-a669-60b6b6ed5c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.130.252/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:ab:cd:21:c9:3c:8f:bf:77:c9:ef:9c:0a:50:d2:66:65:
         81:72:62:13:8b:c5:ad:ef:74:4f:6d:dc:7e:ba:58:f2:41:59:
         5b:50:b4:df:60:33:16:b7:d4:cf:72:d1:19:0e:8f:1e:7e:45:
         c5:28:dc:d6:47:ba:78:c6:74:c6:68:13:97:28:86:5d:dc:15:
         ae:da:e7:31:75:47:75:5f:48:e4:a6:0b:2d:11:7c:6d:57:ec:
         d0:e6:b9:c8:8c:dd:fa:1c:26:54:df:65:bc:f8:ba:71:6f:40:
         43:29:5b:4c:54:1f:27:74:f6:16:34:21:d0:a5:09:26:33:2b:
         c2:16:92:f8:75:ee:15:2b:49:d2:ab:ee:62:e6:0f:09:0a:71:
         b4:df:6d:50:3c:3d:4e:1f:16:ef:62:77:00:87:07:8d:04:a9:
         79:df:bf:6c:35:f1:2e:a8:46:fd:c5:43:5d:9b:24:cb:fd:81:
         56:27:7b:19:84:b8:26:ee:54:31:a1:13:aa:92:2a:46:45:7b:
         ed:ce:dc:f8:20:30:6b:b5:b7:93:63:bf:88:c3:fe:fa:ee:6d:
         9d:bd:3a:be:0d:95:1d:64:a5:a6:b2:45:e5:53:09:de:c7:2f:
         5d:06:7e:0c:b6:28:4a:2e:a7:d1:f1:c2:1b:e2:5d:80:15:d5:
         61:53:ec:8b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7kIy5EWmX0LDavgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDgxOTE4MDM0MloXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MjVmZjIwYTUtYmExMC00NTMwLWFjNWYtZjgxMDlhMmUzNGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3XC9u5y9rY1oWeG1WMXsQEgY2/n+G3ruHXi
iUm/P79RLS2Qkpyud5/L0CWwURKc/kIFsJUTBflGZ8pj49l4dPmJ7ENZKn2/eZea
523WKNsTXmXOtoCRItbSmowGPAqrgBlWTkCTgzznGyf5I87faZNgrdLXqiO10nBt
Hz03nBCEjzQzdFe9olQEvcOwH17rLOVZeA7vT1b+L5BJD57GSr5M8T3V9qaAHyVj
CQBGuNSrZo7K92QupTE7FDMJ7bTMAKgzJ+eE7jNQJHy5w6WPd1PlmvO06k3aFj1/
ACh7ApuakbdKO4hIvk21L4/qpDr2fMe7i3Foj3n+yv3L5vTJ7wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJzi+AJFQe6F+96RzmsWc5GAtpWlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvN2JkMjllZDYtZDEzNi0z
MTQwLWE2NjktNjBiNmI2ZWQ1YzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUCgfqC/DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBzz6vNIck8j793ye+cClDSZmWBcmITi8Wt73RPbdx+uljyQVlbULTf
YDMWt9TPctEZDo8efkXFKNzWR7p4xnTGaBOXKIZd3BWu2ucxdUd1X0jkpgstEXxt
V+zQ5rnIjN36HCZU32W8+Lpxb0BDKVtMVB8ndPYWNCHQpQkmMyvCFpL4de4VK0nS
q+5i5g8JCnG0321QPD1OHxbvYncAhweNBKl5379sNfEuqEb9xUNdmyTL/YFWJ3sZ
hLgm7lQxoROqkipGRXvtztz4IDBrtbeTY7+Iw/767m2dvTq+DZUdZKWmskXlUwne
xy9dBn4MtihKLqfR8cIb4l2AFdVhU+yL
-----END CERTIFICATE-----
Generated at Thu Sep 17 12:12:32 2026 by rpki-client