Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/e46bb1df-0975-383a-9c16-6f1506a689f4.roa
File:                     e46bb1df-0975-383a-9c16-6f1506a689f4.roa (raw, json)
Hash identifier:          AYdoKLYR/OQbT4nlIQnmNK3OBMtRn1v5fcRqiRGCMUM=
Subject key identifier:   6A:2E:77:33:2E:DB:55:81:8F:2B:FB:38:6F:AA:35:E2:C0:6A:7F:3A
Certificate issuer:       /CN=ec3e698c-c88d-4621-b933-5d412f17844a
Certificate serial:       010D0C9F4328584E455532457FCD224DD20DC480
Authority key identifier: 84:53:1C:65:81:35:D3:CF:34:2C:DC:C5:ED:A4:FD:5A:CB:BC:B3:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/e46bb1df-0975-383a-9c16-6f1506a689f4.roa
Signing time:             Tue 23 Jun 2026 20:50:57 +0000
ROA not before:           Tue 23 Jun 2026 20:50:57 +0000
ROA not after:            Mon 21 Sep 2026 20:50:57 +0000
asID:                     852
IP address blocks:        130.17.96.0/19 maxlen: 24
                          130.17.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/ec3e698c-c88d-4621-b933-5d412f17844a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/ec3e698c-c88d-4621-b933-5d412f17844a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:55:32:45:7f:cd:22:4d:d2:0d:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3e698c-c88d-4621-b933-5d412f17844a
        Validity
            Not Before: Jun 23 20:50:57 2026 GMT
            Not After : Sep 21 20:50:57 2026 GMT
        Subject: CN=e920db8d-d64f-4cae-8022-583b89b5b710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8a:31:a4:5c:5c:2f:39:31:e2:77:f8:4d:ee:
                    5d:0c:fd:25:c9:d2:b2:47:1c:88:93:7d:ca:93:bd:
                    59:b3:13:06:ee:c7:ca:48:e0:a8:81:7b:65:f4:7f:
                    d4:c4:4b:5c:1e:00:70:f4:2c:79:80:0e:23:20:a5:
                    48:af:3a:b3:96:53:99:b6:45:35:b4:9c:75:63:65:
                    e8:04:10:ef:9e:72:cf:70:0a:d6:37:11:93:3f:cb:
                    30:d1:80:f9:b5:82:fd:7b:93:d8:a6:bf:c1:2e:92:
                    aa:b8:4f:24:2f:d8:db:57:9d:bd:dc:86:a8:00:ce:
                    06:03:0e:96:9b:f3:dc:45:71:83:9d:0f:8d:37:8b:
                    a4:66:b0:d2:9d:fd:09:f6:54:2c:1b:23:11:1a:c9:
                    cd:15:18:a6:57:3c:a2:08:28:b9:af:38:0f:bf:f9:
                    5c:f8:ce:f3:fd:23:da:88:a5:1f:fe:df:9b:89:c0:
                    cb:d7:06:02:17:7a:12:57:0b:c1:d9:1d:80:6f:12:
                    bf:e6:11:01:a8:23:db:62:76:66:68:3b:dd:8e:8d:
                    17:39:9f:dc:1b:29:b1:1b:2b:f2:6a:aa:9d:d0:35:
                    e4:10:cd:1f:98:4a:eb:83:78:fd:d1:93:2c:ad:46:
                    87:16:24:ee:f8:80:f2:19:cb:28:61:11:31:ca:4b:
                    45:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2E:77:33:2E:DB:55:81:8F:2B:FB:38:6F:AA:35:E2:C0:6A:7F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/e46bb1df-0975-383a-9c16-6f1506a689f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/ec3e698c-c88d-4621-b933-5d412f17844a.crl

            X509v3 Authority Key Identifier:
                keyid:84:53:1C:65:81:35:D3:CF:34:2C:DC:C5:ED:A4:FD:5A:CB:BC:B3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.17.96.0-130.17.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:11:a7:6f:6c:b8:6f:3c:3f:af:fc:db:ba:73:de:9c:13:
         ec:10:61:da:31:3e:2b:34:42:64:c3:f2:03:c4:59:11:bd:c2:
         06:92:a0:14:1b:66:df:d0:da:a8:ca:18:c5:a1:16:f6:aa:ec:
         89:75:5b:82:e0:b3:06:49:4b:b8:55:74:8b:c0:24:74:15:38:
         8a:b6:c5:a5:5c:74:37:a6:a1:51:8b:d0:dc:25:1b:7b:cd:ff:
         8e:ac:66:32:c6:14:fb:6f:00:07:ee:1a:9c:c0:c1:d9:b1:7a:
         44:a2:00:2c:05:43:50:94:26:07:33:47:a4:53:a5:eb:8c:93:
         35:ed:69:ec:c3:c7:c6:c5:30:27:ca:5b:97:26:02:fc:07:92:
         0c:f6:52:6a:a4:30:14:70:17:42:be:be:d3:e7:0d:8e:c9:3c:
         4a:5c:47:14:cc:84:d3:89:a3:db:b0:c1:d9:b5:47:05:d7:06:
         38:0b:bf:b2:67:fa:a8:2c:a3:d0:f9:c7:20:be:1d:8d:df:2a:
         12:3d:ff:50:d3:a4:8e:33:e5:1f:7c:eb:cf:e0:d3:a0:c0:f7:
         16:22:89:27:76:79:fc:51:02:c2:59:9a:e3:29:35:70:fd:39:
         d9:13:19:69:98:1a:22:ad:f5:ca:77:9a:10:10:90:40:60:08:
         cd:12:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 14:06:40 2026 by rpki-client