Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/103b4e90-f86d-3c4a-bbb3-164444858efc.roa
File:                     103b4e90-f86d-3c4a-bbb3-164444858efc.roa (raw, json)
Hash identifier:          hm2q5kJgzphT9q4S3m9vgtEauTe8lCQx5oZfTYDj808=
Subject key identifier:   EC:8B:D3:26:FD:58:F8:97:85:3E:80:C7:44:58:33:66:D2:98:7F:7D
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D5884E5DB1FE9A474BCDA6F20
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/103b4e90-f86d-3c4a-bbb3-164444858efc.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     35039
IP address blocks:        130.214.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:e5:db:1f:e9:a4:74:bc:da:6f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=a9d5c319-9e55-4941-b386-dd2286325be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:f2:22:ed:03:fd:61:8f:6c:96:78:2d:62:
                    19:c8:83:2e:6c:60:64:42:bd:e0:c9:c4:55:46:9f:
                    ac:30:71:be:f2:69:64:08:e7:55:ad:1a:3c:4d:ce:
                    15:93:92:f0:46:60:72:d4:4a:52:b2:4b:e8:e2:8b:
                    70:8d:2d:f7:7f:26:d8:00:6a:fb:53:30:a4:89:a9:
                    d9:9c:9d:50:63:5c:8e:2f:62:fa:85:94:0a:14:f8:
                    e1:a9:c2:74:af:9c:11:75:4d:6f:e1:28:3b:f4:af:
                    6a:26:69:87:54:41:94:e9:1f:d0:4e:43:7d:f8:1f:
                    9f:71:73:91:80:22:a2:c3:5b:78:50:88:88:af:3c:
                    e6:58:d3:ad:59:da:37:58:1f:62:3c:0c:8d:49:12:
                    37:34:92:67:cf:7d:5f:62:b8:11:4f:84:93:55:38:
                    10:a4:fb:1f:1c:c9:d7:0f:18:92:4e:f9:fc:65:e7:
                    27:04:df:81:21:2b:09:92:cf:e0:e8:2c:bd:37:23:
                    8b:e3:af:c2:c6:20:19:c5:19:e4:34:95:da:3d:19:
                    71:29:f8:ba:e7:c3:59:71:ba:36:44:6f:5f:42:ae:
                    81:89:20:5a:56:f5:a7:2b:94:63:67:e8:60:ee:13:
                    58:85:f8:f0:ac:74:ba:8f:11:c7:b1:43:2e:f2:2a:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8B:D3:26:FD:58:F8:97:85:3E:80:C7:44:58:33:66:D2:98:7F:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/103b4e90-f86d-3c4a-bbb3-164444858efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:1c:83:10:6c:92:de:1a:f0:5e:63:e9:12:1b:d8:76:8b:b3:
         44:62:46:6b:cd:24:f9:6f:1a:13:78:11:28:e6:51:82:85:e4:
         51:84:46:42:62:d6:e6:c6:5c:54:db:94:93:1d:02:15:18:a1:
         f7:ab:70:0a:52:b8:43:e0:a9:4a:79:45:31:d7:c2:7b:e1:5e:
         dc:ee:84:ad:ec:1c:61:7f:24:47:76:3c:a7:88:38:22:ff:cd:
         ad:9f:d7:e8:98:f5:47:7e:a7:57:9b:29:98:c2:4b:4d:af:1b:
         dd:fa:c9:00:87:18:62:06:2a:b5:1a:40:80:ff:c5:1f:af:4e:
         0c:61:ec:97:33:d4:cf:6c:98:bb:a8:71:9e:79:9c:bb:bf:f7:
         37:1e:45:09:a2:5f:e7:11:76:f6:62:67:cf:91:8b:bb:55:5a:
         16:5a:e4:88:66:f6:d4:22:d5:3a:9b:99:64:c6:6c:63:16:83:
         19:e3:42:da:84:14:ae:2d:eb:bc:f8:b8:45:31:d1:b5:52:e2:
         21:63:29:f4:e8:f2:a8:0e:31:70:b8:ae:4f:2a:7d:2d:ec:b9:
         b5:62:18:17:a2:c4:f3:7f:85:fe:4d:77:ec:ec:82:fe:1b:7d:
         a2:74:0b:84:e2:91:3f:0e:7c:bd:44:5e:45:ba:fe:a7:e2:b6:
         e9:e2:fb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:23:40 2026 by rpki-client