Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/121ebac5-47bb-3263-9ad1-25219b9bbcb4.roa
File:                     121ebac5-47bb-3263-9ad1-25219b9bbcb4.roa (raw, json)
Hash identifier:          ca+7QOA0ipBOT1bxNIFIsGohd7nocJHO/QBAcZmAK0g=
Subject key identifier:   50:BE:94:4F:9D:16:8D:B7:54:F5:2D:42:24:8B:FC:CA:38:04:88:A1
Certificate issuer:       /CN=cb84dafa-5c30-4458-8de9-79ae91217514
Certificate serial:       010D0C9F4328584EB57C46923B351C11B62C0F40
Authority key identifier: 4E:40:4E:4E:7B:43:0E:09:9A:CA:36:5F:7E:7D:B2:33:2F:F2:F0:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/121ebac5-47bb-3263-9ad1-25219b9bbcb4.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     20473
IP address blocks:        130.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/cb84dafa-5c30-4458-8de9-79ae91217514.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/cb84dafa-5c30-4458-8de9-79ae91217514.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:46:92:3b:35:1c:11:b6:2c:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb84dafa-5c30-4458-8de9-79ae91217514
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=f5863f83-41b4-4099-9d55-22cab974f343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:75:72:97:c6:e9:53:ab:cd:19:aa:dc:7f:
                    2a:d7:a1:11:2a:ff:70:c6:10:4e:7c:d6:d5:aa:0f:
                    b8:23:a4:a8:f4:fe:cc:28:36:bd:d1:d8:4e:51:9e:
                    e8:72:73:66:a9:1d:d2:89:27:30:c4:c1:20:41:30:
                    65:11:20:86:1c:1b:d0:a5:ad:e2:73:06:89:95:10:
                    ca:b1:e0:57:2e:86:d4:25:7c:54:14:78:2d:63:d5:
                    29:29:a3:b7:cf:4a:24:f5:ad:eb:43:9c:0f:e5:1b:
                    40:a5:40:fd:3b:b3:8d:d7:81:e6:8e:90:87:1f:3e:
                    dc:dd:d6:ca:94:88:1d:85:20:39:8d:cc:bf:62:0e:
                    90:e0:24:7a:42:da:0d:58:01:a9:66:fc:4c:57:4d:
                    9c:2d:fb:1d:78:40:df:7f:18:5d:4e:4f:9c:02:d8:
                    78:ea:7e:c7:8c:f9:dc:90:c8:2c:6a:d1:f2:9d:c7:
                    1a:86:76:8d:e8:5c:2e:ab:93:39:db:ae:b6:af:43:
                    04:22:30:0c:42:33:fc:2e:e2:a4:aa:5c:09:d4:2f:
                    0e:3a:01:1d:a2:e2:c8:12:67:83:c4:bd:39:e7:d8:
                    39:a8:3c:23:4b:6e:ce:f2:35:06:37:da:1d:97:49:
                    ae:a1:81:53:5c:50:4f:2d:0a:07:55:d0:76:bd:e6:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BE:94:4F:9D:16:8D:B7:54:F5:2D:42:24:8B:FC:CA:38:04:88:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/121ebac5-47bb-3263-9ad1-25219b9bbcb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/cb84dafa-5c30-4458-8de9-79ae91217514.crl

            X509v3 Authority Key Identifier:
                keyid:4E:40:4E:4E:7B:43:0E:09:9A:CA:36:5F:7E:7D:B2:33:2F:F2:F0:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:03:b9:d0:e3:18:d7:af:7d:61:a7:75:64:a9:75:c7:0b:52:
         d8:60:03:92:05:49:24:e8:c6:ea:8a:1d:68:63:6c:2e:11:5b:
         1b:c0:dd:d4:c4:e0:4d:3f:b2:ab:a1:20:74:3c:ea:58:63:bf:
         74:60:1e:8b:58:24:9a:31:88:fc:e1:92:88:20:41:ad:ee:ef:
         42:0f:cc:7a:f7:90:30:76:5e:b5:26:71:1c:79:5a:a0:52:ec:
         94:1e:58:fe:dd:75:b6:50:e1:fa:b4:5a:eb:c7:97:69:d9:b3:
         ec:bf:02:03:2d:5b:96:ad:e5:eb:48:e9:07:de:ec:e2:70:9c:
         4a:33:eb:2b:9a:60:dc:7e:58:83:28:7d:8b:04:a3:b1:76:46:
         45:16:d6:86:51:c4:c0:9a:f6:98:f6:ba:c2:a0:84:9a:5c:90:
         69:57:40:bd:7e:f4:a8:a0:e0:27:b5:49:00:4a:56:9a:7e:9e:
         5b:60:91:60:51:40:ad:c2:fa:e4:75:46:5d:87:07:2c:8c:e1:
         6d:99:ac:74:bf:73:07:0c:59:98:82:9e:4d:9d:8c:d2:52:a5:
         64:4c:4e:eb:e5:90:69:47:c7:1c:59:b2:40:a2:eb:ce:e9:34:
         9f:a5:6f:47:ca:ef:e9:70:20:4f:95:6e:f4:ee:f2:c9:15:46:
         49:d7:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:49:59 2026 by rpki-client