Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/10032390-f68d-3373-8245-6ab22eab9957.roa
File:                     10032390-f68d-3373-8245-6ab22eab9957.roa (raw, json)
Hash identifier:          Vcwr0naqZVspsaiGclvK0PhQpMhdlUN7HdhKrq5XdTo=
Subject key identifier:   D0:3B:AC:6A:B1:46:0F:FB:1C:FF:1C:EF:1F:BF:B1:F5:E7:B5:16:5E
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584E38C9C215DB86F73E657EC370
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/10032390-f68d-3373-8245-6ab22eab9957.roa
Signing time:             Fri 19 Jun 2026 09:00:12 +0000
ROA not before:           Fri 19 Jun 2026 09:00:12 +0000
ROA not after:            Thu 17 Sep 2026 09:00:12 +0000
asID:                     35039
IP address blocks:        130.214.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:c9:c2:15:db:86:f7:3e:65:7e:c3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jun 19 09:00:12 2026 GMT
            Not After : Sep 17 09:00:12 2026 GMT
        Subject: CN=ebeedc35-698f-43cf-b4fe-e6f80465e4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:22:18:9e:d4:da:34:a7:63:f0:7f:9e:41:13:
                    5b:0f:86:f5:7f:7f:b2:c8:54:6c:a5:89:cb:10:8a:
                    7c:56:41:2a:a4:b1:36:99:cd:ea:9d:fe:52:0d:34:
                    c8:a4:6f:f8:62:a0:43:1f:23:31:20:04:1c:aa:74:
                    58:65:f4:61:13:4f:ad:58:28:33:28:f3:79:ef:ac:
                    c9:7f:96:43:55:ef:20:37:f9:1a:10:0c:55:ae:f9:
                    e1:4c:7f:d2:1c:e4:43:a6:81:bf:a9:cd:06:c1:4e:
                    3c:a0:7e:c6:5a:8d:63:61:ba:78:1c:8e:20:48:68:
                    d3:80:b4:9e:4d:25:29:18:6e:80:64:09:dd:bb:93:
                    29:d1:58:32:f5:7d:de:db:c2:36:9b:a9:96:f1:0e:
                    c3:d6:3b:b7:40:6c:b9:6f:03:fd:e5:fd:79:18:dd:
                    a1:18:7e:2d:cc:b6:e6:02:8f:7b:dc:0e:54:73:18:
                    16:06:7d:8f:e1:12:fb:f3:27:28:1d:b9:05:03:83:
                    ce:a6:70:ac:22:b1:5f:f4:b9:45:04:73:c5:f9:7d:
                    b8:8e:7e:3f:b0:cb:cf:0e:b8:24:f8:40:d7:ac:b6:
                    c3:48:89:0f:13:3f:db:3c:30:20:e3:ce:53:7e:94:
                    d7:34:85:81:71:98:d9:76:95:6a:ed:9b:df:7d:e9:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3B:AC:6A:B1:46:0F:FB:1C:FF:1C:EF:1F:BF:B1:F5:E7:B5:16:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/10032390-f68d-3373-8245-6ab22eab9957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:48:dd:7d:39:81:ec:e0:92:40:4f:1a:55:9f:5a:7f:e9:f7:
         03:ba:47:c6:6b:04:89:6f:3a:4b:b8:17:c8:bd:d3:fe:01:a1:
         1c:42:46:68:c0:69:88:e4:87:82:6b:1b:1b:2b:9c:4b:15:53:
         92:85:26:9e:b2:41:90:5a:54:c3:ed:37:e2:f8:82:3d:0c:d2:
         d8:85:4b:f9:a0:b3:2b:12:b8:14:d9:d3:27:26:eb:c7:58:0c:
         4b:6e:12:5f:7e:fe:21:1a:10:d6:8e:3d:da:38:24:0d:53:2c:
         2e:7c:c3:e0:e9:24:52:62:07:ea:72:94:97:b9:65:53:8a:e0:
         b3:e1:0d:6e:48:e7:9b:73:76:4c:f0:01:db:17:a6:61:66:f6:
         c1:0c:c9:5b:81:c8:9d:64:e4:fa:55:4a:ea:8a:64:1e:d5:4e:
         c0:6f:ce:af:13:7e:11:67:12:24:1b:87:3f:c4:a6:bb:c1:31:
         e3:a9:ad:93:d4:96:89:32:2d:79:b5:ae:fd:75:3b:da:5d:6d:
         9d:7e:55:02:b7:32:05:34:49:a7:53:cb:90:d9:e3:75:6c:b4:
         47:12:bf:bd:fa:e6:2a:82:5f:e8:0c:37:96:31:93:d6:42:96:
         89:3e:65:b3:27:40:21:f0:15:c3:24:3d:0d:06:72:99:f7:e1:
         50:f5:84:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:53:49 2026 by rpki-client