Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/008c5432-1031-326c-8c11-3ba5b9051066.roa
File:                     008c5432-1031-326c-8c11-3ba5b9051066.roa (raw, json)
Hash identifier:          aCxQz7Hk7trrWPj4XGfozjXzyTQVF18c7hKgcwkC4ZQ=
Subject key identifier:   2C:79:09:50:93:32:9F:07:6E:9D:E7:90:F8:DB:68:2D:4E:3A:AF:B7
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584E38C9B8BFC2B7BCACA44CA180
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/008c5432-1031-326c-8c11-3ba5b9051066.roa
Signing time:             Fri 19 Jun 2026 09:00:12 +0000
ROA not before:           Fri 19 Jun 2026 09:00:12 +0000
ROA not after:            Thu 17 Sep 2026 09:00:12 +0000
asID:                     35039
IP address blocks:        130.214.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:c9:b8:bf:c2:b7:bc:ac:a4:4c:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jun 19 09:00:12 2026 GMT
            Not After : Sep 17 09:00:12 2026 GMT
        Subject: CN=72921edc-58b7-41b7-bdcd-3d9be95edbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:03:56:cd:ba:ff:17:45:e9:3c:59:1b:cf:69:
                    43:ff:6f:c0:45:dc:b8:ea:9b:a1:c3:e4:22:ba:0e:
                    39:d8:56:88:52:36:8b:ec:c6:48:5c:b8:7b:cf:98:
                    57:67:cc:bc:57:43:18:24:58:57:53:9b:74:16:9c:
                    07:6a:7a:dd:bd:63:90:7c:97:2e:70:f7:c5:d1:22:
                    21:f6:11:70:d7:08:64:63:9f:4f:87:e6:c4:43:23:
                    65:14:ad:ff:ba:52:d3:3a:e9:bd:e6:16:44:a2:0b:
                    98:78:bb:6a:49:51:ba:ea:ec:e5:d4:40:fb:5a:18:
                    90:ec:fb:f5:e2:36:38:72:43:29:52:f7:28:b9:da:
                    cc:56:0d:53:4a:f2:29:c7:48:17:6e:1e:05:c0:f6:
                    24:b3:ac:c8:92:aa:38:0f:ac:ad:89:6e:19:29:a5:
                    ee:83:f2:05:a2:1b:b9:88:4d:99:43:0b:62:50:d3:
                    43:f7:ac:3d:d4:03:f7:9c:eb:b2:40:1d:d8:cf:39:
                    52:f3:6d:dc:ed:bd:48:35:36:c7:23:92:40:2b:05:
                    82:6f:50:d0:7b:95:f1:ba:39:c1:6e:b3:52:43:1a:
                    f0:0a:2b:ea:5d:01:d1:f8:eb:ec:50:65:35:b3:56:
                    3a:17:ab:bd:13:f9:b7:41:f3:03:7a:7c:fe:64:e9:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:79:09:50:93:32:9F:07:6E:9D:E7:90:F8:DB:68:2D:4E:3A:AF:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/008c5432-1031-326c-8c11-3ba5b9051066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9a:64:f9:88:08:04:45:8a:12:e5:fd:77:ae:6b:63:26:c1:
         a6:d4:f0:70:1b:f7:9b:0d:4a:6c:85:a5:e4:97:f3:c4:96:44:
         ae:b0:ea:4b:14:00:60:2f:1e:90:81:dd:8c:8d:a8:18:52:be:
         ea:a6:4e:21:8f:2e:0d:45:8c:d6:f0:37:0f:80:7d:34:0a:8c:
         57:f5:4a:30:a6:12:a5:a7:78:c1:6a:87:b0:c0:11:cd:09:cd:
         d4:d9:b8:7e:e9:43:4b:06:0f:cf:97:9b:bf:c5:8b:f8:fd:bf:
         02:d1:27:a4:44:be:dc:29:58:65:a9:ef:b5:90:88:8d:70:f5:
         73:c6:e4:b7:d1:5b:fc:50:fe:54:f7:98:6b:27:21:59:74:f0:
         c1:f1:58:4a:42:00:07:10:d0:56:ed:95:95:3f:d1:ef:1e:a7:
         04:d8:fc:16:8c:3f:76:cd:01:51:76:62:4c:0b:85:90:34:1b:
         23:93:64:4b:73:a5:8b:a0:e4:cf:8d:dc:27:15:42:5b:1d:dd:
         fb:85:74:cb:60:e9:2f:89:d6:bd:18:68:52:31:a9:fb:08:03:
         87:05:ae:28:10:4c:d1:39:eb:97:1d:49:47:7c:f3:b5:93:55:
         f3:74:e7:35:59:c6:bb:8d:92:72:10:b5:0b:af:1a:ea:cc:f0:
         22:69:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:53:50 2026 by rpki-client