Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1ae0304b-485d-3b47-8129-159c4ab2d927.roa
File:                     1ae0304b-485d-3b47-8129-159c4ab2d927.roa (raw, json)
Hash identifier:          DKwCkLZ/axJuTz7I89ybc00F6BLd7/OWZfxX8/YDRps=
Subject key identifier:   37:C9:4D:EC:DB:20:76:42:D7:2D:0B:82:14:70:C1:CF:66:76:9F:6C
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584EDB2C908628C502978DFA9600
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1ae0304b-485d-3b47-8129-159c4ab2d927.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     35039
IP address blocks:        130.214.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:90:86:28:c5:02:97:8d:fa:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=06970cce-c7a7-470e-804d-c72f22c8a033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4f:08:f4:7e:0d:8f:33:37:20:50:f0:d6:4c:
                    be:80:9b:a1:46:be:46:ed:06:3e:11:9f:a8:bf:41:
                    f0:22:e3:65:9a:b0:15:da:1b:61:f6:0b:56:bf:0b:
                    a5:db:51:45:1b:2f:c0:4b:4a:78:9f:2f:8d:d4:16:
                    63:1f:52:42:0a:5f:1a:90:13:17:27:fc:11:1e:17:
                    70:cb:86:5e:82:dd:1b:32:00:ba:5e:b8:f8:96:53:
                    dd:a2:aa:57:43:96:ae:80:34:77:5a:4d:13:78:c0:
                    5e:75:1f:10:df:cb:5e:07:c2:2c:d7:94:0d:ab:3c:
                    a0:64:5b:02:6a:1e:81:c9:24:bb:96:34:5d:c9:67:
                    f3:39:28:a7:f6:74:67:f8:09:a6:2e:97:a4:e5:68:
                    62:f6:cf:6c:5c:b2:a4:82:f3:cb:7e:89:ab:7a:4b:
                    1e:43:f9:23:52:a5:08:e6:93:3b:f6:7c:82:08:49:
                    ed:f4:93:b0:c1:e5:69:1f:c0:9a:55:1b:6f:3e:a8:
                    d7:7e:2c:bb:6b:e5:29:8d:b3:ab:d7:e1:94:af:62:
                    2b:9c:95:4d:2e:98:1c:d6:c9:36:4b:d4:d2:c5:66:
                    ea:8c:e2:19:f0:72:11:f8:81:3a:8b:3f:45:52:82:
                    09:fc:b1:aa:cb:d6:0d:e4:86:53:1b:40:13:08:20:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C9:4D:EC:DB:20:76:42:D7:2D:0B:82:14:70:C1:CF:66:76:9F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1ae0304b-485d-3b47-8129-159c4ab2d927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:54:29:80:82:88:53:f7:b7:9b:e9:d0:1d:a6:17:64:9c:7f:
         55:10:6a:5f:42:6b:c1:cb:47:86:b7:80:0e:cc:1f:77:66:0e:
         e1:d8:12:50:b7:04:09:47:00:91:79:a8:62:4e:0c:26:36:dd:
         c1:ad:0f:b4:8d:d7:34:eb:b2:5f:a1:88:ac:0d:c1:fa:8a:6f:
         ba:81:26:78:51:91:76:c2:f9:17:0a:4f:eb:b0:8b:b8:10:37:
         8f:e0:0a:11:59:9c:a2:d5:f1:55:89:df:96:80:58:a2:31:99:
         ea:fe:ff:a5:21:99:86:08:2a:d5:6f:fb:f7:b0:71:fb:cf:bc:
         a8:b1:12:79:fd:85:08:eb:db:6a:a2:b4:93:3a:c0:b6:a7:05:
         de:77:e7:a5:a5:1e:48:10:aa:ea:c5:a7:13:bf:5c:63:2e:de:
         0d:bc:1b:2d:ff:26:48:11:64:99:c8:c2:04:e8:4a:c8:84:5a:
         3b:ec:ba:9f:05:8f:d6:92:a4:64:9d:1b:2d:8e:f2:6f:b2:47:
         1e:5e:40:d3:4c:ec:2c:89:9e:0d:cd:bf:16:70:be:af:0f:80:
         23:dd:d6:80:02:89:64:da:b5:07:26:78:97:07:bd:59:9a:4a:
         53:58:dd:69:46:6a:ce:29:fb:b6:90:0f:4e:77:4e:aa:71:ad:
         78:aa:a2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:46:33 2026 by rpki-client