Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/78eb1a4c-6ebe-3cc0-b8f2-7b60f30b2d44.roa
File:                     78eb1a4c-6ebe-3cc0-b8f2-7b60f30b2d44.roa (raw, json)
Hash identifier:          ypmLGw28lMynkqmHalk+l0Gr0CPPUh8QUTBynv8h6Kk=
Subject key identifier:   1D:0A:5D:12:31:C8:A9:BB:10:70:03:29:6E:EF:E7:CE:6A:98:7D:E5
Certificate issuer:       /CN=cb84dafa-5c30-4458-8de9-79ae91217514
Certificate serial:       010D0C9F4328584EB846F3BA206DD5E609FCFF00
Authority key identifier: 4E:40:4E:4E:7B:43:0E:09:9A:CA:36:5F:7E:7D:B2:33:2F:F2:F0:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/78eb1a4c-6ebe-3cc0-b8f2-7b60f30b2d44.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     212071
IP address blocks:        130.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/cb84dafa-5c30-4458-8de9-79ae91217514.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/cb84dafa-5c30-4458-8de9-79ae91217514.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:46:f3:ba:20:6d:d5:e6:09:fc:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb84dafa-5c30-4458-8de9-79ae91217514
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=c753767c-7d7e-4cf3-91ad-495a98a6e7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:08:3a:32:70:d8:d3:5e:d9:1e:ec:4e:cd:
                    f6:53:ad:a3:65:3e:33:df:84:ef:35:b8:70:f1:70:
                    a0:8c:23:9a:61:45:2f:aa:88:a3:8b:5e:31:72:1f:
                    0e:44:76:54:57:03:fb:fc:23:50:3d:71:24:86:8e:
                    19:ff:99:40:11:0b:13:fd:e1:b3:f2:9c:62:3b:0d:
                    9b:5f:18:f3:c4:65:5a:06:74:1d:3f:a6:1c:77:5c:
                    4c:7f:80:c1:9a:bc:76:18:52:b8:53:3b:c1:61:e1:
                    19:f2:cb:86:32:bd:d7:c2:1a:9f:4e:90:b1:dd:0e:
                    26:48:19:be:23:2a:6a:74:6e:37:2f:cb:82:c7:61:
                    53:9b:d8:e7:3d:6a:10:52:ad:3d:07:95:8a:b4:73:
                    98:76:b5:ce:7a:60:66:0f:77:0d:13:ff:c2:9e:06:
                    3e:c4:d7:02:e6:57:41:57:fc:d0:d9:58:28:bf:1d:
                    01:2c:a9:49:5a:23:c0:1b:32:29:71:b7:cb:21:40:
                    5f:d3:b6:09:2d:d7:7e:d5:70:e7:7b:00:3b:7f:28:
                    38:95:df:ec:7d:db:3e:e4:ee:00:76:18:cb:3d:94:
                    57:4d:71:5b:df:26:68:05:f3:5f:e2:da:a4:8c:90:
                    ea:4f:29:d9:06:dd:d2:a2:68:67:e7:c5:94:27:7f:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0A:5D:12:31:C8:A9:BB:10:70:03:29:6E:EF:E7:CE:6A:98:7D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/78eb1a4c-6ebe-3cc0-b8f2-7b60f30b2d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/cb84dafa-5c30-4458-8de9-79ae91217514.crl

            X509v3 Authority Key Identifier:
                keyid:4E:40:4E:4E:7B:43:0E:09:9A:CA:36:5F:7E:7D:B2:33:2F:F2:F0:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:65:f3:91:95:d5:c8:24:8c:45:2a:22:ca:53:0e:4b:a4:b0:
         19:94:36:60:9b:4f:b1:fc:ef:a0:fd:22:e6:d5:e6:ce:f3:96:
         71:9e:b3:73:df:a1:1c:e4:3c:c1:da:29:b2:35:9c:05:bb:98:
         d6:58:07:ed:42:d7:25:6e:e0:df:ee:38:a1:10:d2:35:eb:08:
         39:f4:4d:dc:2a:c7:8a:25:6e:84:a9:a2:eb:7e:30:3f:38:e8:
         2d:ac:58:15:44:cb:6e:89:8d:43:f1:05:ac:f2:b2:4c:82:83:
         d1:d8:01:10:7f:5e:d9:f9:e9:a3:44:c3:fc:da:6e:00:75:0e:
         b1:6e:e6:3d:b5:4c:7a:79:b1:7f:59:84:fc:3f:83:2d:29:36:
         d1:82:50:f9:43:db:26:d0:f3:87:d6:6b:4f:57:5d:52:41:bf:
         db:9f:87:4b:b6:84:dd:81:21:3f:24:d3:54:83:a9:42:ba:65:
         e1:de:fe:6a:9f:8e:7e:f4:34:e4:b4:6b:ad:b1:b7:21:5f:6f:
         1e:98:55:85:fa:0c:35:28:6c:47:1c:af:0d:a4:89:7b:0c:a0:
         08:2a:d0:bd:f4:75:f9:3c:ce:58:de:31:e9:fc:c2:d7:8c:1d:
         19:5c:d3:53:8e:3e:e3:26:c1:5f:30:d3:13:7b:33:e2:44:09:
         de:67:7f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 11:32:24 2026 by rpki-client