Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/092db359-5903-3025-8894-f1e9b03d57f8.roa
File:                     092db359-5903-3025-8894-f1e9b03d57f8.roa (raw, json)
Hash identifier:          /T+PYl+IXYpxG9YSA7ghEmQLX5WFgj5il5tjT0c+CgQ=
Subject key identifier:   7F:CC:DA:32:84:84:8D:60:26:95:D8:00:EE:0B:5D:7A:4C:91:16:0B
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B980A7BAD9F92B428E943B050
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/092db359-5903-3025-8894-f1e9b03d57f8.roa
Signing time:             Tue 21 Oct 2025 09:31:41 +0000
ROA not before:           Tue 21 Oct 2025 09:31:41 +0000
ROA not after:            Mon 19 Jan 2026 10:31:41 +0000
asID:                     35039
IP address blocks:        130.214.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:0a:7b:ad:9f:92:b4:28:e9:43:b0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Oct 21 09:31:41 2025 GMT
            Not After : Jan 19 10:31:41 2026 GMT
        Subject: CN=2175a35d-e519-4437-b5ed-75dc3379e924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cf:70:ad:61:d6:13:eb:85:96:23:a3:93:02:
                    0e:c7:f3:23:07:ea:58:ee:5e:f1:2f:06:8a:d1:51:
                    d4:cd:19:75:6f:d3:2e:f2:58:45:28:db:21:26:b8:
                    c0:a2:ab:2e:52:a9:65:45:ad:81:fa:aa:24:69:43:
                    18:12:73:0c:52:06:5a:4c:86:91:9e:1b:a6:07:55:
                    a4:a3:c9:7f:ae:9a:8d:b9:8d:70:5b:56:94:e1:ff:
                    33:39:1a:31:57:82:80:18:15:37:2b:cc:da:67:f0:
                    9f:c8:dd:de:eb:30:15:76:3e:d0:93:6f:77:c6:c9:
                    78:2f:c9:b0:b0:52:cc:e7:d7:4b:6a:a1:89:3c:8f:
                    9b:85:dd:bd:d2:1d:01:78:86:fa:47:f1:6b:e4:40:
                    5a:a7:93:be:db:65:b5:9d:9e:f9:54:72:e5:70:c3:
                    8b:30:22:14:78:42:5f:2f:b4:d6:44:b9:fc:92:4f:
                    d0:f9:d0:86:57:a0:b3:d7:a9:b3:cc:1b:91:19:75:
                    a7:94:2d:f1:0a:7d:c9:df:a7:99:e8:25:c0:df:91:
                    a4:9e:b0:4e:d5:c5:e8:e1:8a:e9:5f:99:3f:0d:80:
                    d0:28:85:84:f6:c2:5c:d0:f2:3c:65:bc:41:0b:f2:
                    27:3c:cb:de:7b:71:d8:f4:67:39:23:33:dd:9a:b1:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CC:DA:32:84:84:8D:60:26:95:D8:00:EE:0B:5D:7A:4C:91:16:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/092db359-5903-3025-8894-f1e9b03d57f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:6a:df:60:a3:5e:76:77:fa:61:eb:e0:1b:99:22:b0:db:4d:
         1e:a5:cf:87:cc:6f:dc:9e:d5:82:d2:91:11:42:a7:e4:2a:fa:
         59:29:79:3a:ec:0c:e0:75:4f:2f:bd:b1:64:1e:71:4d:80:a0:
         76:08:43:75:58:75:c4:9e:7d:d7:e6:15:d3:d8:d1:c3:f8:1d:
         7d:17:38:9b:a3:35:0c:a6:90:a0:fc:ec:d2:7a:64:92:7a:32:
         8a:b3:b2:5f:54:89:91:9b:c0:b5:01:1b:cd:0f:4a:f2:6f:03:
         18:cd:a9:1b:c4:ee:4a:d7:da:0d:f2:c4:e5:13:a1:40:29:7c:
         44:4d:d1:f7:6f:af:c5:fe:d1:8e:32:c5:b0:9c:5e:65:3a:e8:
         59:67:be:1e:0a:1b:72:e5:7c:a5:c6:e0:d5:0d:fb:24:54:c2:
         ea:62:08:7f:39:80:ae:9e:69:12:c4:26:e5:13:44:c3:15:33:
         a1:dd:4b:67:00:0f:15:4a:09:6e:69:ee:c3:b0:1c:c4:da:3d:
         d1:ea:5c:5d:5d:80:11:a3:18:cf:13:fa:f7:4d:04:1b:2f:8f:
         f1:36:7c:24:0f:af:ad:1e:99:4d:16:65:97:ee:6a:9b:56:fe:
         58:a2:1e:39:73:7d:f4:66:04:76:0d:5a:c8:26:c5:0f:65:69:
         ed:da:00:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCnutn5K0KOlDsFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI1MTAyMTA5MzE0MVoXDTI2MDExOTEwMzE0MVowLzEtMCsGA1UEAxMk
MjE3NWEzNWQtZTUxOS00NDM3LWI1ZWQtNzVkYzMzNzllOTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs9wrWHWE+uFliOjkwIOx/MjB+pY7l7xLwaK
0VHUzRl1b9Mu8lhFKNshJrjAoqsuUqllRa2B+qokaUMYEnMMUgZaTIaRnhumB1Wk
o8l/rpqNuY1wW1aU4f8zORoxV4KAGBU3K8zaZ/CfyN3e6zAVdj7Qk293xsl4L8mw
sFLM59dLaqGJPI+bhd290h0BeIb6R/Fr5EBap5O+22W1nZ75VHLlcMOLMCIUeEJf
L7TWRLn8kk/Q+dCGV6Cz16mzzBuRGXWnlC3xCn3J36eZ6CXA35GknrBO1cXo4Yrp
X5k/DYDQKIWE9sJc0PI8ZbxBC/InPMvee3HY9Gc5IzPdmrG02wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/M2jKEhI1gJpXYAO4LXXpMkRYLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMDkyZGIzNTktNTkwMy0z
MDI1LTg4OTQtZjFlOWIwM2Q1N2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtasMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5q32CjXnZ3+mHr4BuZIrDbTR6lz4fMb9ye1YLSkRFCp+Qq+lkpeTrs
DOB1Ty+9sWQecU2AoHYIQ3VYdcSefdfmFdPY0cP4HX0XOJujNQymkKD87NJ6ZJJ6
Moqzsl9UiZGbwLUBG80PSvJvAxjNqRvE7krX2g3yxOUToUApfERN0fdvr8X+0Y4y
xbCcXmU66Flnvh4KG3LlfKXG4NUN+yRUwupiCH85gK6eaRLEJuUTRMMVM6HdS2cA
DxVKCW5p7sOwHMTaPdHqXF1dgBGjGM8T+vdNBBsvj/E2fCQPr60emU0WZZfuaptW
/liiHjlzffRmBHYNWsgmxQ9lae3aABU=
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:04:52 2025 by rpki-client