Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2b200d51-23d1-3d4d-bbc5-31aa972aec89.roa
File:                     2b200d51-23d1-3d4d-bbc5-31aa972aec89.roa (raw, json)
Hash identifier:          dv5gASMD9fTi4HAFXNHtSoEmONYgKHkG5RB/qbfEa7Y=
Subject key identifier:   9E:20:B6:93:38:C7:B1:6E:AC:B4:63:FE:E1:76:22:B4:E9:CE:DF:E0
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D5884E645EA45EE0E2E807800
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2b200d51-23d1-3d4d-bbc5-31aa972aec89.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     35039
IP address blocks:        130.214.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:e6:45:ea:45:ee:0e:2e:80:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=ec0fa777-7abd-4d79-8ff6-d04782209cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:7c:5c:39:cb:6c:84:bb:36:69:ed:2d:16:
                    8a:19:ed:c8:a3:62:a0:89:f7:4b:3f:ed:c4:29:b4:
                    35:aa:32:7a:ec:5e:0e:a8:8c:8a:71:ee:02:f4:f6:
                    58:bc:9e:13:0b:a0:20:ae:38:d7:bf:fb:77:c6:b8:
                    c9:3d:00:29:44:a2:0f:06:aa:8d:8d:6b:e2:ea:89:
                    dc:ec:88:e5:c2:d4:42:e8:a4:1e:f2:e9:7f:ce:ba:
                    a5:4e:59:00:08:7a:e6:b6:f3:08:e0:47:da:6d:f4:
                    d0:32:02:ba:5c:d5:23:e7:21:6f:43:1a:2c:ab:cf:
                    fe:e2:f5:9d:c8:ce:3e:75:ed:39:17:ca:0f:a2:9c:
                    e1:e5:bc:e3:e3:bc:6a:8d:a4:dc:a3:0d:56:24:47:
                    7f:92:c8:87:f1:fc:3c:1c:93:16:6f:f9:a6:03:f8:
                    fd:4f:1c:ab:0e:ac:1f:0e:a4:da:34:be:00:8b:db:
                    b5:f4:33:6d:c1:6e:4a:ae:4d:66:86:6c:2d:f1:b0:
                    cb:2b:d9:fc:80:d0:d3:c6:5b:88:e7:56:6f:37:01:
                    8d:6a:c5:8e:ce:8b:ad:cc:be:8a:43:82:e5:c4:bf:
                    27:16:91:53:81:3a:2e:8d:72:df:f7:4f:24:be:a8:
                    0d:eb:e2:26:de:15:df:27:e8:cd:b4:5f:90:ea:51:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:20:B6:93:38:C7:B1:6E:AC:B4:63:FE:E1:76:22:B4:E9:CE:DF:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2b200d51-23d1-3d4d-bbc5-31aa972aec89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:96:b1:a5:de:f6:2a:44:f3:ed:63:ee:2d:cb:50:02:49:4f:
         80:73:2b:c1:61:56:12:07:17:21:98:82:28:55:64:e6:8d:60:
         b7:44:03:da:93:ec:c9:c5:c5:e8:1b:f5:78:10:9e:cf:59:76:
         09:83:b9:e4:92:d2:db:73:9d:51:0d:1e:04:07:e3:86:89:e2:
         96:f4:a4:5a:13:df:02:73:eb:69:14:8b:56:8c:05:73:fe:87:
         d9:d0:f6:1e:75:06:e1:35:8c:cb:20:c1:23:3e:f1:83:1c:ac:
         1e:72:e8:9c:28:50:06:e7:e7:0d:18:31:41:32:7a:de:a8:aa:
         6a:5b:9b:3a:06:5b:2d:39:d8:74:ec:87:af:b8:19:b7:2d:4f:
         46:d9:6c:8c:f4:8c:34:70:b9:df:2d:98:3b:39:16:af:77:34:
         9a:41:33:ce:73:1d:ff:9a:6c:a9:88:6a:ac:f8:95:cc:e7:70:
         26:cf:36:96:33:51:a3:a7:bd:8b:ce:fd:db:bf:58:db:49:06:
         26:0b:c0:0b:df:75:9f:c5:50:42:16:cf:2c:25:36:43:68:27:
         ca:48:46:29:2a:c2:b2:6c:90:9c:e1:78:a1:bd:b7:b7:8c:03:
         ec:39:2f:9e:0f:80:64:e1:5b:ee:86:3d:0c:71:7d:0c:41:b3:
         6a:e3:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:21:36 2026 by rpki-client