Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3714bac8-5325-3b3b-8b60-5b212dcc6fc9.roa
File:                     3714bac8-5325-3b3b-8b60-5b212dcc6fc9.roa (raw, json)
Hash identifier:          roO0AVvRp5e/Nb9RDUCGk3g8VNbw28rLJj3mdQaxLB8=
Subject key identifier:   B8:5E:58:60:C4:5B:8B:C3:AE:5A:2C:02:FF:F4:19:26:AD:38:6A:11
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D5884DDBB9D8A747E7D16F870
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3714bac8-5325-3b3b-8b60-5b212dcc6fc9.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     35039
IP address blocks:        130.214.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:dd:bb:9d:8a:74:7e:7d:16:f8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=80ab3626-5ad8-4910-bded-cfbe6d36328d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:82:41:71:61:8e:0b:47:df:0d:ee:15:95:f0:
                    9d:6a:84:bd:10:08:25:74:8a:72:dc:50:85:3f:db:
                    59:75:fa:af:bc:7d:2e:cf:9c:19:62:77:07:a0:45:
                    55:99:67:e4:f9:0e:5a:7b:73:4d:5d:2e:5b:40:cf:
                    80:73:2e:58:c7:38:0a:40:63:b0:66:cf:18:23:6f:
                    15:fb:69:50:17:68:0f:1f:2b:b8:e9:dd:c9:63:62:
                    f7:a0:35:13:ba:56:0e:c4:fa:17:c2:9d:66:e5:4c:
                    8f:5f:f4:ed:8e:20:0c:3b:13:23:fc:77:dd:68:63:
                    1e:ed:9e:1e:31:b1:99:2a:f9:2f:81:0d:e8:37:d4:
                    40:6f:b8:62:33:5e:56:3f:5e:a3:c9:d5:c9:23:7c:
                    20:28:b2:3a:44:a8:70:1b:0c:0f:f0:fc:b2:78:2e:
                    4e:80:d2:84:47:11:aa:e1:f0:d7:c9:5d:43:a1:65:
                    f1:7a:ef:24:a4:ef:b3:fe:2e:cd:fa:39:be:7e:79:
                    82:24:30:db:c7:4c:7b:bf:ec:75:f5:2c:b5:01:a2:
                    01:e2:8d:ad:e8:c2:48:eb:8d:ff:bb:64:41:f0:85:
                    09:5e:99:15:55:0f:80:e8:77:21:a3:2d:0f:cd:92:
                    a7:59:1c:29:ac:58:5d:74:88:17:83:8d:49:90:06:
                    ea:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5E:58:60:C4:5B:8B:C3:AE:5A:2C:02:FF:F4:19:26:AD:38:6A:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3714bac8-5325-3b3b-8b60-5b212dcc6fc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4a:3a:bb:2a:5d:a3:ac:8c:0b:7c:08:df:28:4a:d2:7a:f3:
         6d:af:38:da:18:f1:63:01:40:be:b7:91:64:88:d8:7d:8c:fb:
         6f:94:39:5b:4f:97:94:ef:37:68:e9:d2:e2:7d:4b:79:8b:78:
         40:ab:b2:37:f4:c0:67:b5:82:5e:f0:83:91:8d:91:95:03:2f:
         81:70:09:23:b2:46:dc:ba:e3:7e:ae:7c:bf:f7:af:6e:b3:6b:
         72:ec:68:3f:e5:62:86:4a:b2:32:db:cf:9a:1a:98:3b:25:d1:
         35:d0:80:90:a9:db:31:f9:d3:b9:75:7f:cc:c2:67:36:aa:57:
         95:b6:ea:d8:89:ce:8e:4a:c7:3a:a5:93:d3:6c:6b:46:4a:5d:
         99:f0:34:56:84:02:c4:0a:39:3a:ac:b7:ec:37:2d:f3:7e:82:
         ba:aa:80:71:f3:3c:95:e9:d3:5b:27:1b:c6:1e:6e:a3:1f:fe:
         bd:65:16:05:0e:3e:d5:c9:05:b1:58:48:52:44:28:0d:3e:17:
         e2:49:fd:00:af:df:95:be:cc:1f:62:2d:71:20:63:3e:57:85:
         b4:f0:94:79:5a:28:1b:b9:b3:fa:68:87:60:73:4a:18:fb:23:
         3f:a4:da:89:23:0e:07:58:6d:3b:78:b5:cb:46:d9:17:74:3b:
         be:97:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:21:47 2026 by rpki-client