Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/22a91abd-1d04-39b7-90cf-87f440b0aa64.roa
File:                     22a91abd-1d04-39b7-90cf-87f440b0aa64.roa (raw, json)
Hash identifier:          8Mm6DcYgSV5sQbGsjdrYRZmnVRQgzFKVCyK6ai5T0+8=
Subject key identifier:   52:E3:55:97:FD:B2:0C:CC:A9:6D:B8:FC:17:0D:36:B9:9A:47:3C:97
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B980A34C92F2A6564D0AB1C00
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/22a91abd-1d04-39b7-90cf-87f440b0aa64.roa
Signing time:             Tue 21 Oct 2025 09:31:08 +0000
ROA not before:           Tue 21 Oct 2025 09:31:08 +0000
ROA not after:            Mon 19 Jan 2026 10:31:08 +0000
asID:                     35039
IP address blocks:        130.214.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:0a:34:c9:2f:2a:65:64:d0:ab:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Oct 21 09:31:08 2025 GMT
            Not After : Jan 19 10:31:08 2026 GMT
        Subject: CN=c9e89131-d817-4c4d-8078-3eca2a6c6f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:cd:20:5a:bc:70:dc:47:c9:ea:87:dc:22:
                    4a:51:8b:f6:89:81:6f:db:82:9e:27:46:bf:81:eb:
                    21:11:43:22:5a:b7:99:ec:c4:a7:df:e3:4c:8d:f6:
                    60:72:c1:88:b9:82:cb:fb:72:75:0c:f0:ef:e8:0b:
                    aa:28:ae:62:91:48:9d:08:6e:c7:c3:e8:c0:17:8b:
                    dc:76:e4:d6:c6:53:e6:99:00:66:56:27:7a:64:88:
                    28:17:85:bf:80:11:98:61:5d:27:8d:ff:6f:c7:5f:
                    35:b3:6c:06:37:b3:fa:9a:0e:2d:f6:26:82:39:ce:
                    60:e4:5e:bb:13:e1:51:bf:be:16:40:99:bd:49:ed:
                    65:83:df:40:76:d3:64:db:ef:66:0d:d2:78:ac:e4:
                    74:72:6e:c6:55:ea:26:09:b8:f2:80:41:8a:19:c0:
                    0b:2d:7b:45:56:96:43:ca:f8:24:68:86:0f:d3:82:
                    a6:e5:22:bf:a8:0f:58:da:2e:b3:35:57:9d:d7:59:
                    e3:c5:df:bd:ab:50:ea:83:86:fa:46:6c:e9:e5:54:
                    0e:dc:ed:98:6d:1c:4b:75:67:e9:c6:35:a0:b2:02:
                    4b:c2:f5:aa:08:4c:8f:14:3a:d4:d9:5e:45:40:d4:
                    f0:a3:96:38:b8:26:fe:9b:01:60:1c:6b:8e:8e:27:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:55:97:FD:B2:0C:CC:A9:6D:B8:FC:17:0D:36:B9:9A:47:3C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/22a91abd-1d04-39b7-90cf-87f440b0aa64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:23:1c:7d:ee:40:64:a1:9e:17:f6:9b:3f:d5:0b:8a:2b:
         93:76:a6:96:a7:5f:4a:87:2f:10:31:f5:5f:46:d7:67:4b:35:
         8c:af:05:3d:3b:ec:a4:63:48:58:0f:42:34:52:12:9d:8d:d5:
         8b:70:3a:b1:3c:2b:a8:b0:a4:b2:23:d1:a3:22:45:7a:7e:eb:
         38:9c:a7:87:14:5e:b6:f3:3b:af:e8:44:f7:bd:28:07:2c:45:
         95:75:84:8e:bf:8c:80:f5:4d:c1:42:1f:7d:2d:10:22:91:3f:
         5d:0a:84:64:6c:65:a3:28:78:9f:3a:a7:9a:cc:5f:e4:e7:ab:
         40:57:df:73:85:61:fc:e5:70:0c:53:3f:29:c4:77:29:88:c4:
         6f:bd:ee:97:6e:3f:60:d3:4c:69:a4:cc:97:b7:c7:df:76:cc:
         ff:da:e6:85:03:8c:6a:c8:4c:c6:13:b5:39:0d:84:dd:ff:db:
         23:c4:d9:bd:e7:95:7f:53:45:89:3b:34:57:47:28:cb:b9:49:
         e9:91:aa:91:05:0c:1e:ba:10:48:f2:5a:d4:6f:99:6c:7f:c0:
         aa:a4:0b:6c:86:7d:87:ae:27:fe:7a:14:ce:9d:66:fd:9f:f7:
         3f:1b:21:85:58:12:3e:a1:ba:66:9d:0f:a1:66:ad:4c:ff:7c:
         f2:44:ca:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:05:00 2025 by rpki-client