Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/4d8bd863-f50e-38d3-8d86-0539bdbcc796.roa
File:                     4d8bd863-f50e-38d3-8d86-0539bdbcc796.roa (raw, json)
Hash identifier:          L17YGUzJAvJ0j6Bvu30aiZ8gFIU+vOiN2clTW616xWo=
Subject key identifier:   9F:E6:33:F2:89:E7:A8:FC:BD:86:FE:8C:08:CF:29:DA:AD:F3:B7:1A
Certificate issuer:       /CN=8461abaf-8773-4e40-ad91-9135219be7a4
Certificate serial:       010D0C9F4328584ED001F71744928E55D2A33A40
Authority key identifier: 1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/4d8bd863-f50e-38d3-8d86-0539bdbcc796.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     7324
IP address blocks:        130.51.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f7:17:44:92:8e:55:d2:a3:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8461abaf-8773-4e40-ad91-9135219be7a4
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=ab52a777-bbe9-49aa-9735-c159c8ba44ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:87:32:8f:95:10:41:50:99:4b:03:d2:2a:99:
                    24:2c:7d:56:14:5e:a6:73:77:8d:69:51:ca:0c:ec:
                    6c:0d:46:f9:6f:8c:32:25:bb:19:16:33:f5:86:9e:
                    cf:82:e9:1e:46:bd:b0:e1:7e:8c:2c:bb:3d:45:e4:
                    e7:4f:52:b6:b6:ba:af:33:2f:66:0d:0b:fc:e0:93:
                    09:00:4b:58:aa:70:0d:98:b0:c8:e2:2f:33:74:3f:
                    76:83:80:0d:d8:20:8e:38:97:de:d2:0a:8d:83:8d:
                    c6:d2:02:e9:9f:ad:f2:33:31:fe:33:2c:3a:e2:d0:
                    d5:45:db:d8:7c:30:d8:f0:15:7f:d5:d3:ab:9c:58:
                    50:fd:4a:82:30:d6:ec:db:58:c3:be:da:f8:d9:a3:
                    1f:c9:3f:c5:c2:92:bb:19:fd:bc:4e:e3:fa:02:54:
                    87:28:36:6a:56:d1:f1:7e:42:2f:fb:88:a0:d4:b4:
                    ca:cb:8b:a6:38:32:c3:fc:fb:39:fd:29:07:ab:ca:
                    20:12:40:7c:3e:72:a2:7f:5a:94:6d:61:df:2e:d5:
                    96:a0:e0:16:25:c0:68:6b:32:1b:37:90:a0:51:35:
                    86:ac:df:97:67:54:c6:d9:59:2b:63:c4:f5:00:dc:
                    91:82:d6:51:06:89:48:c3:87:1a:14:75:48:3a:82:
                    14:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E6:33:F2:89:E7:A8:FC:BD:86:FE:8C:08:CF:29:DA:AD:F3:B7:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/4d8bd863-f50e-38d3-8d86-0539bdbcc796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl

            X509v3 Authority Key Identifier:
                keyid:1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:09:8f:49:99:7d:2b:d6:aa:2d:9a:c2:72:50:a8:65:18:e6:
         24:82:0b:6b:f5:b7:4b:53:8c:46:f6:20:a1:7d:fd:59:cd:cf:
         46:39:a5:37:7f:e2:d7:7f:3d:b4:03:2f:bc:0f:3b:ee:5c:c4:
         3c:c6:56:1e:18:ba:23:87:54:57:5f:aa:62:7d:d1:a4:b5:67:
         1e:05:af:0d:15:79:b2:98:80:48:a0:d6:2b:2d:54:68:01:cd:
         aa:64:eb:fb:1f:e2:03:20:78:25:73:4e:be:37:3f:8e:4b:1b:
         6b:dc:55:49:de:71:16:d1:54:7d:5f:ea:18:4e:dd:72:f2:35:
         fa:08:97:f7:2a:66:af:8c:37:00:fe:66:05:9f:dc:59:5b:db:
         07:cf:1b:68:22:ac:aa:0b:5b:3f:f0:57:1a:5d:de:ea:ab:91:
         39:d0:53:93:a1:07:cd:a8:71:9d:84:22:da:1b:fe:7a:11:67:
         72:03:22:1b:7f:7a:d9:04:12:ef:6f:2a:fe:62:88:9e:1c:fd:
         86:e7:48:a7:61:08:94:bb:45:bf:ca:8a:8b:37:05:cc:78:bb:
         41:6e:fc:2c:42:f8:e7:94:97:1d:28:26:a8:51:97:4c:d9:44:
         3f:4d:d5:7b:d7:e7:f9:7c:82:ff:1a:d8:d9:9d:ee:18:71:e0:
         55:3f:56:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:21:20 2026 by rpki-client