Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/79cba9c2-c2ca-3154-bf62-7b969a37ea48.roa
File:                     79cba9c2-c2ca-3154-bf62-7b969a37ea48.roa (raw, json)
Hash identifier:          hg6FwcC6PcR7sBEjD9Go+p76YOqEKhHqJgjNUMYQ4pA=
Subject key identifier:   A9:CD:F3:7F:4B:45:80:21:66:7E:2E:83:07:F7:4F:6C:1D:FE:02:2D
Certificate issuer:       /CN=570595b1-8680-4be0-ba0e-5d08aa118fab
Certificate serial:       010D0C9F4328584EA78763860A63D3E8652CBC80
Authority key identifier: FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/79cba9c2-c2ca-3154-bf62-7b969a37ea48.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3428
IP address blocks:        130.20.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:63:86:0a:63:d3:e8:65:2c:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570595b1-8680-4be0-ba0e-5d08aa118fab
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=69a3f689-eb2e-4216-924a-00e21651bde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:dc:46:fb:02:e8:53:21:a2:b7:42:a0:05:
                    1d:4e:65:12:ce:a1:76:8a:76:34:2b:05:df:fd:45:
                    7e:7e:02:8d:a3:d0:f0:3f:8a:93:7b:25:55:d9:28:
                    76:d6:1e:97:b2:06:d8:a6:bc:10:64:2e:42:1c:cc:
                    a4:db:e7:2c:77:bc:8a:43:db:21:b3:1c:27:4b:4d:
                    c4:2b:9e:c7:5d:4a:db:20:f3:2d:35:30:ff:a2:49:
                    a4:5d:b9:cc:b6:39:fb:c2:41:d7:5e:92:ee:34:46:
                    18:7c:21:91:29:76:79:3c:c1:d6:f3:17:3c:7d:37:
                    2c:f3:e5:73:0e:b7:d6:3e:5d:8d:8b:4a:5c:af:ff:
                    28:3b:29:e7:a9:e2:d2:3c:43:76:e0:05:94:ae:cb:
                    f4:dc:23:10:cd:0d:dd:3d:e9:fd:37:c3:aa:de:fc:
                    d5:7a:50:9f:6a:4f:7e:3e:f4:36:7d:50:59:3e:fa:
                    01:77:0c:2c:6b:48:9e:7e:52:20:f2:c4:09:3d:08:
                    40:ad:0d:54:1f:36:1c:05:15:ff:73:18:2f:c6:d4:
                    7d:20:a0:b4:79:fe:87:8e:a2:4b:44:b1:b9:fc:49:
                    13:4a:e3:b4:16:6e:e8:62:4b:c8:0a:3b:78:0a:59:
                    60:b2:4b:67:77:ad:05:f7:25:e6:11:79:58:ab:93:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CD:F3:7F:4B:45:80:21:66:7E:2E:83:07:F7:4F:6C:1D:FE:02:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/79cba9c2-c2ca-3154-bf62-7b969a37ea48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.crl

            X509v3 Authority Key Identifier:
                keyid:FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e3:b6:78:60:d3:0a:cf:31:a0:33:e3:da:94:1d:60:50:9f:
         11:9e:bf:a7:56:1d:bb:4b:21:c3:01:dc:54:2c:90:5f:f5:d3:
         0f:9c:30:85:09:95:37:10:ee:90:80:1a:4e:1b:b6:87:31:96:
         f1:4d:8d:46:a3:a7:3e:ef:d8:8b:59:33:f4:b9:8a:2d:a6:ad:
         09:48:8c:93:47:70:13:94:27:28:8b:b1:c3:18:9b:d9:0d:07:
         6a:90:df:9d:55:10:e5:b7:07:ce:d6:03:cd:27:f6:07:25:6a:
         7b:ee:1f:ad:52:6b:20:72:18:cd:30:df:64:d5:8a:70:21:8e:
         70:4b:f8:82:cf:63:98:e8:7b:8d:f9:6b:47:31:ab:6f:97:42:
         8d:27:59:28:ab:e7:ce:73:06:f0:fc:c0:4e:69:d2:0e:23:33:
         af:90:29:5f:0f:e1:96:09:1e:eb:a1:aa:e7:9e:34:97:c1:4e:
         f4:c6:39:c7:dd:68:9c:83:46:7e:2c:83:c2:54:5f:58:52:4c:
         fe:43:f4:dd:63:24:d1:20:a5:d0:bf:f4:07:25:01:1f:73:c0:
         36:47:7b:6f:b7:c3:34:9f:16:1b:b6:af:20:b7:97:b0:2c:d2:
         b2:10:47:a3:f0:77:f1:c0:45:f9:b0:be:61:62:f8:c1:35:23:
         42:67:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:21:19 2026 by rpki-client