Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/19b5dd36-df30-315a-9e41-87502f2c43dc.roa
File:                     19b5dd36-df30-315a-9e41-87502f2c43dc.roa (raw, json)
Hash identifier:          yUjzT3R893ynAnPRT3py4esplrz1yaq51YJpoMpHDD0=
Subject key identifier:   78:C7:EF:35:44:33:16:15:21:A5:31:D9:E2:D3:CE:79:39:5A:81:82
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B980A8FBC70443B28A5EEC800
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/19b5dd36-df30-315a-9e41-87502f2c43dc.roa
Signing time:             Tue 21 Oct 2025 09:31:51 +0000
ROA not before:           Tue 21 Oct 2025 09:31:51 +0000
ROA not after:            Mon 19 Jan 2026 10:31:51 +0000
asID:                     35039
IP address blocks:        130.214.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:0a:8f:bc:70:44:3b:28:a5:ee:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Oct 21 09:31:51 2025 GMT
            Not After : Jan 19 10:31:51 2026 GMT
        Subject: CN=4af304fa-4822-4681-b10f-b48aa488f65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:72:71:53:91:2a:bd:4b:27:9e:33:5a:ad:e2:
                    cb:08:3d:e8:00:dd:75:a1:47:4b:f4:23:99:6a:4d:
                    73:a3:81:1c:8b:90:66:5c:96:ea:85:ea:ac:3d:d1:
                    3d:f2:8b:ea:b1:b9:58:40:16:52:99:a4:07:86:2a:
                    f4:b8:2f:7c:e9:15:e0:5d:6e:63:d6:90:da:1f:aa:
                    be:17:08:7c:d5:45:c7:74:7d:d5:bd:6f:f6:f8:1a:
                    f8:c9:73:9a:25:38:65:2f:12:b1:ce:78:b0:26:19:
                    d4:29:ce:76:bf:47:02:87:1b:1f:e5:c7:a8:24:10:
                    05:5f:66:09:79:d4:76:fa:03:7d:31:2a:ac:9c:1e:
                    c2:c8:da:21:80:1c:b7:c2:f2:bf:70:14:15:65:d9:
                    47:7a:6b:6c:d5:3c:e0:b2:8b:3b:83:87:3d:ee:76:
                    77:c8:6c:52:ec:e2:48:e1:65:96:49:9c:38:28:e7:
                    11:6b:6a:b3:76:10:50:68:c1:96:a1:21:48:23:6f:
                    6b:be:22:12:90:84:f5:1a:e0:c9:32:af:b6:50:0d:
                    dd:72:34:80:a8:6d:14:df:a9:65:90:ce:4e:63:47:
                    0b:d3:57:40:c8:1d:7f:98:e8:b3:c4:d1:de:7e:96:
                    c0:56:dd:cd:9e:94:c3:a0:bc:75:93:4f:c5:28:80:
                    82:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C7:EF:35:44:33:16:15:21:A5:31:D9:E2:D3:CE:79:39:5A:81:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/19b5dd36-df30-315a-9e41-87502f2c43dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:44:ff:60:d4:89:62:ca:5c:fb:37:d6:01:4f:84:92:3c:bf:
         2f:62:cc:75:e8:c1:6d:e8:09:cf:b4:73:a1:b3:47:95:4f:3c:
         ae:1f:db:3f:23:36:74:71:b6:8c:31:1d:81:4a:94:6d:8c:70:
         0e:bf:e3:c1:4e:22:e4:41:07:c2:40:d0:67:12:d8:4c:99:67:
         b6:bc:3c:30:20:e2:ba:26:3c:a4:9b:8f:7f:21:83:f6:3b:5d:
         bb:ad:d0:14:b9:8b:0c:62:cf:ba:74:36:8d:11:7b:45:10:08:
         2e:31:06:b9:73:03:c9:1c:e3:37:3c:9a:5b:37:ea:8a:3f:9b:
         26:22:bd:d7:da:be:71:54:cb:f6:8f:68:f2:19:f1:ad:b6:27:
         22:f4:c6:ec:af:bb:49:89:c4:e5:1a:c4:36:74:8c:2c:e4:e1:
         ca:61:5b:09:e8:68:b8:27:aa:12:5c:b0:e2:59:86:cc:89:63:
         a5:3c:80:2d:d5:af:ed:23:bd:0b:9c:7f:0c:fa:54:f7:d0:f2:
         9c:c4:6c:bf:58:e5:22:23:3b:af:c5:20:0e:e3:a5:5c:80:a1:
         7e:f8:db:e9:68:dd:4c:24:ec:a2:6d:1e:93:03:0b:e8:07:29:
         5a:ad:09:5b:7c:46:e9:7f:36:82:21:a9:e7:17:9e:d9:b4:52:
         f9:9c:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:04:49 2025 by rpki-client