Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/22a91abd-1d04-39b7-90cf-87f440b0aa64.roa
File:                     22a91abd-1d04-39b7-90cf-87f440b0aa64.roa (raw, json)
Hash identifier:          hJsq9gym7duXQq2tlrVfZpQeS8B7aJlant9+0ubx8XU=
Subject key identifier:   C4:8D:92:86:57:B9:CC:0F:03:DB:F4:91:56:DE:48:3E:D5:90:8E:5C
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584EDB2C8D91EAD2B3F214D59640
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/22a91abd-1d04-39b7-90cf-87f440b0aa64.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     35039
IP address blocks:        130.214.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:8d:91:ea:d2:b3:f2:14:d5:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=83a16edc-a6d5-48e2-908c-8610655c8dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:21:c0:ff:ee:a5:6c:dc:7f:1f:61:48:65:16:
                    f9:cb:99:a5:5c:31:c9:4e:48:32:87:11:bc:80:02:
                    0c:94:0c:f1:bc:50:41:ce:90:96:7c:9d:b4:ed:04:
                    59:21:d0:7d:05:c3:7c:1b:61:c9:1c:a8:9b:8a:c4:
                    01:d8:ab:25:b4:66:db:ee:54:f6:85:03:4e:9f:53:
                    1f:7d:06:34:5a:9a:c5:7c:a8:3c:67:d2:36:34:86:
                    9c:31:e9:68:b7:8d:9d:98:ac:ac:f3:1a:28:8a:62:
                    df:7e:ac:fc:3c:b7:c2:0b:84:a6:01:7e:99:f2:78:
                    22:8e:51:21:65:96:48:87:27:65:e9:67:af:08:1c:
                    92:78:61:58:23:77:7f:5e:61:88:a3:bd:d2:46:1c:
                    41:6d:46:64:7b:83:f7:17:e9:f6:c6:63:11:fd:66:
                    27:b0:c0:db:7a:bb:5d:02:3f:dd:0c:3a:13:1d:2c:
                    e0:6d:09:12:79:6d:f2:49:9a:77:8c:56:0c:b5:7f:
                    a5:fa:90:07:95:cc:f6:87:65:43:cd:2a:98:01:df:
                    38:57:70:6e:c0:37:53:b0:04:e4:55:f4:ec:6d:85:
                    38:c1:5d:d0:0d:77:aa:ea:1a:b7:06:01:e2:19:2a:
                    31:e6:fa:40:5f:b3:31:cb:ff:75:06:d5:e7:27:91:
                    2e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8D:92:86:57:B9:CC:0F:03:DB:F4:91:56:DE:48:3E:D5:90:8E:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/22a91abd-1d04-39b7-90cf-87f440b0aa64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:57:70:d3:66:dc:80:23:36:62:fb:0d:3d:32:9f:33:57:bb:
         a1:2f:34:53:db:2d:c8:48:31:8b:fa:d7:83:bb:5c:ae:16:ce:
         02:5b:54:bb:ef:12:62:65:33:a0:ed:f6:4f:a1:ca:1e:f7:6b:
         2f:c0:b0:c5:23:83:c2:6a:4c:0c:f8:5e:74:f6:bc:1c:18:52:
         e4:81:d8:36:22:bd:0d:82:90:8d:e4:73:df:2b:85:77:d0:96:
         48:89:73:57:68:5b:5e:2d:53:97:fb:b9:85:be:72:c1:08:93:
         5e:b6:d5:6d:8b:ce:b0:ff:13:05:fa:da:10:e9:c8:65:cb:8a:
         28:e6:11:3f:d4:db:c8:ce:7a:68:bc:59:e1:63:22:1e:07:81:
         93:28:0a:42:92:52:8a:75:fd:13:80:4a:41:a1:81:40:e1:6b:
         1a:df:db:44:f2:a0:d8:a2:32:97:3b:a3:4e:29:11:33:27:42:
         8f:5b:b4:a4:46:68:2d:71:ad:6f:7e:e9:a9:22:fa:09:60:4b:
         9d:ff:6a:df:23:41:17:0f:c4:a8:bd:89:49:54:57:52:c0:9f:
         b7:f0:64:7e:8d:2a:3f:4b:1e:fb:c4:27:8c:6b:3d:9a:98:63:
         97:9c:0b:5a:78:a7:29:19:90:40:d8:e4:f2:c0:cb:ce:88:c0:
         87:ea:88:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLI2R6tKz8hTVlkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk
ODNhMTZlZGMtYTZkNS00OGUyLTkwOGMtODYxMDY1NWM4ZGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCHA/+6lbNx/H2FIZRb5y5mlXDHJTkgyhxG8
gAIMlAzxvFBBzpCWfJ207QRZIdB9BcN8G2HJHKibisQB2KsltGbb7lT2hQNOn1Mf
fQY0WprFfKg8Z9I2NIacMelot42dmKys8xooimLffqz8PLfCC4SmAX6Z8ngijlEh
ZZZIhydl6WevCBySeGFYI3d/XmGIo73SRhxBbUZke4P3F+n2xmMR/WYnsMDbertd
Aj/dDDoTHSzgbQkSeW3ySZp3jFYMtX+l+pAHlcz2h2VDzSqYAd84V3BuwDdTsATk
VfTsbYU4wV3QDXeq6hq3BgHiGSox5vpAX7Mxy/91BtXnJ5EuCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSNkoZXucwPA9v0kVbeSD7VkI5cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMjJhOTFhYmQtMWQwNC0z
OWI3LTkwY2YtODdmNDQwYjBhYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtZmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlXcNNm3IAjNmL7DT0ynzNXu6EvNFPbLchIMYv614O7XK4WzgJbVLvv
EmJlM6Dt9k+hyh73ay/AsMUjg8JqTAz4XnT2vBwYUuSB2DYivQ2CkI3kc98rhXfQ
lkiJc1doW14tU5f7uYW+csEIk1621W2LzrD/EwX62hDpyGXLiijmET/U28jOemi8
WeFjIh4HgZMoCkKSUop1/ROASkGhgUDhaxrf20TyoNiiMpc7o04pETMnQo9btKRG
aC1xrW9+6aki+glgS53/at8jQRcPxKi9iUlUV1LAn7fwZH6NKj9LHvvEJ4xrPZqY
Y5ecC1p4pykZkEDY5PLAy86IwIfqiG0=
-----END CERTIFICATE-----
Generated at Sat Aug 22 01:43:48 2026 by rpki-client