Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/0c52a841-d684-35fd-bf49-e35f16f8d13a.roa
File:                     0c52a841-d684-35fd-bf49-e35f16f8d13a.roa (raw, json)
Hash identifier:          ua0dkmOzuqKkLgV0+kyF7IH+KDoO3E4KMh+Y7MwpnKk=
Subject key identifier:   81:AC:7D:3C:E5:F6:EF:F4:E2:D1:36:87:F4:FA:2E:86:A3:83:4F:62
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B980AABB6233E3D81E06F0900
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/0c52a841-d684-35fd-bf49-e35f16f8d13a.roa
Signing time:             Tue 21 Oct 2025 09:32:04 +0000
ROA not before:           Tue 21 Oct 2025 09:32:04 +0000
ROA not after:            Mon 19 Jan 2026 10:32:04 +0000
asID:                     35039
IP address blocks:        130.214.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:0a:ab:b6:23:3e:3d:81:e0:6f:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Oct 21 09:32:04 2025 GMT
            Not After : Jan 19 10:32:04 2026 GMT
        Subject: CN=10b9fdbc-14e6-4ff5-b9e6-8cc4a7d4da29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1e:f5:3c:bc:05:5f:e6:f9:92:f0:42:73:6b:
                    a6:d2:d7:9d:56:fb:9b:a7:00:cc:b9:ee:88:26:73:
                    31:d7:50:5c:16:4e:75:c1:42:15:27:88:18:e7:8c:
                    da:10:72:e0:17:df:b9:bf:bc:8b:e1:08:bd:3e:e8:
                    45:00:7e:13:b9:68:ac:79:0d:72:e6:0f:6b:37:13:
                    31:dc:92:27:46:96:d7:54:8f:22:fd:de:12:6c:66:
                    70:5c:fc:cf:9e:e6:c1:c8:1e:47:c8:00:5f:fd:68:
                    f7:62:d3:94:5d:74:ca:94:1f:07:f2:a4:9f:81:78:
                    21:90:6d:be:41:73:22:6d:36:05:14:8d:ff:b0:df:
                    43:2b:09:64:f9:b4:43:a0:98:4f:97:41:02:21:55:
                    97:1b:20:43:23:e0:4f:4a:ec:2b:fb:a3:9b:d9:a4:
                    2c:b1:94:49:23:fe:13:8e:62:76:a6:59:03:da:fc:
                    30:cd:84:2d:21:90:5f:81:9c:43:04:90:fa:f9:fe:
                    1a:73:7e:65:3f:87:f9:d8:a5:e3:ff:4d:e6:96:7b:
                    ba:79:f4:ba:59:5a:e1:ae:23:f8:03:1a:64:58:c0:
                    2c:f3:d7:03:15:6b:f6:d4:a4:65:43:40:41:a6:ba:
                    10:b0:fe:cd:02:a1:ce:c8:1d:17:4c:df:b1:c0:9e:
                    98:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AC:7D:3C:E5:F6:EF:F4:E2:D1:36:87:F4:FA:2E:86:A3:83:4F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/0c52a841-d684-35fd-bf49-e35f16f8d13a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a2:68:0c:6b:b2:d6:4a:85:84:9e:1d:89:98:96:30:94:a5:
         30:e0:80:9f:3e:3d:5c:9c:f0:85:b2:f6:58:f7:bb:c7:36:de:
         e6:ce:46:79:a5:f2:98:2c:0e:c0:31:7f:f5:b2:64:e6:2d:1a:
         04:88:cf:35:5e:2c:ba:5f:42:31:f4:fb:ca:d0:ad:6d:5a:08:
         10:d0:ab:e1:63:56:a2:b2:19:87:55:2a:62:20:c5:5a:63:56:
         b0:6c:67:2e:21:c4:b4:76:6c:85:21:0a:2c:52:fe:28:bc:1d:
         ed:44:7a:83:33:a7:7b:9e:e2:d4:0a:44:7e:90:b0:ed:11:f5:
         8a:32:1d:80:2c:28:a2:84:2f:c8:93:74:e4:c7:62:cb:21:4f:
         dd:90:2c:b3:79:c6:28:8b:41:40:e1:3e:41:a3:9b:f7:88:0c:
         27:4c:d9:50:ee:af:d7:09:5c:2a:6f:75:5c:db:68:07:2c:5c:
         58:c1:fe:7c:f6:cc:f3:12:2e:f9:94:1b:1a:55:2e:e2:3e:af:
         9b:20:bb:80:2f:e4:cc:19:a2:b5:14:9f:19:1a:f0:b4:27:73:
         f2:f9:90:e6:45:55:89:5f:16:10:6a:5e:88:00:49:b6:5e:2c:
         36:d5:63:22:42:c1:91:15:f8:7e:dc:84:3d:85:f6:4f:f4:91:
         6e:c1:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:05:01 2025 by rpki-client