Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3714bac8-5325-3b3b-8b60-5b212dcc6fc9.roa
File:                     3714bac8-5325-3b3b-8b60-5b212dcc6fc9.roa (raw, json)
Hash identifier:          pnSk69D6Z7XnBAqwrChlJ20A2BRPtcGWOncSioKg8zA=
Subject key identifier:   14:FB:34:45:B2:79:6C:A7:9F:9A:C6:DD:A8:82:96:09:A2:EE:E5:70
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584F7E7D8BCF568E64F8917A8780
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3714bac8-5325-3b3b-8b60-5b212dcc6fc9.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     35039
IP address blocks:        130.214.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:8b:cf:56:8e:64:f8:91:7a:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=7c028327-9cb7-4253-8e92-ee9c27e35874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:62:06:05:a4:99:97:e5:c6:f1:b2:15:30:
                    ef:27:18:59:f8:8e:56:d5:4f:c6:39:b6:10:52:bd:
                    a6:ca:71:01:b8:c0:ba:00:68:e6:54:1a:d8:fa:3e:
                    5f:2d:11:d2:b3:e2:81:d0:5f:66:80:8a:ff:85:93:
                    7f:cd:0b:10:bb:5b:6e:7b:54:ec:12:82:4b:2d:88:
                    ce:12:29:ff:8c:5b:ef:4f:b1:35:fb:fd:f4:e3:21:
                    6e:cd:3a:d9:7b:db:e2:43:14:b9:ef:ac:d4:83:86:
                    4a:5b:6d:ef:cb:76:06:7d:fd:2a:d4:c2:a8:c2:cd:
                    12:f2:88:78:db:4e:0d:45:45:22:c2:d2:a8:fc:ec:
                    64:ca:8e:02:9a:ee:dd:b4:ba:2f:93:93:f2:f6:b8:
                    5f:b2:9d:4c:3f:fa:75:e7:d4:64:6c:c7:d7:72:4b:
                    61:b5:fc:0c:f7:71:a4:72:c5:05:ee:45:86:be:2c:
                    d6:83:c3:3c:de:bc:ad:7a:b0:ac:9b:4f:c6:ee:86:
                    53:e1:49:92:47:2c:7a:85:ef:bc:23:ea:eb:87:10:
                    25:49:48:3b:60:e6:0b:17:21:5d:40:6e:fb:d2:83:
                    38:d8:f6:46:de:78:84:0d:0e:da:e4:4c:0f:a6:df:
                    8a:8c:be:de:c6:d7:89:b1:a6:05:1e:2c:56:6d:e8:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FB:34:45:B2:79:6C:A7:9F:9A:C6:DD:A8:82:96:09:A2:EE:E5:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3714bac8-5325-3b3b-8b60-5b212dcc6fc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:af:4a:36:a0:04:31:59:81:f2:07:49:4d:4f:15:e5:94:1d:
         d1:de:00:b7:dd:68:6e:aa:38:5b:fc:3c:8c:64:10:26:ca:ae:
         81:0e:0d:41:91:b9:c6:2c:36:d9:fd:71:23:eb:6a:46:f1:91:
         cb:e1:e6:9f:7b:df:3e:c5:4e:e1:e4:8b:ce:a4:e9:cb:83:88:
         73:ed:08:08:a5:90:e5:05:79:56:be:8f:3b:18:b0:19:b6:49:
         a3:46:86:7f:21:1e:ba:c0:41:60:c4:a0:b0:3e:11:c2:df:51:
         69:c0:5b:eb:b8:a1:46:01:fb:dd:ee:8b:98:ec:0d:ad:0b:be:
         79:74:b9:a7:07:8d:d4:26:35:b9:cf:bc:bc:ed:11:38:b0:8b:
         b5:10:26:f6:b3:7c:1c:ac:30:cf:eb:f6:9f:0e:f9:62:a7:30:
         86:31:44:f9:b7:e7:15:0b:9b:73:e7:fd:93:4d:5c:93:6f:de:
         94:1c:58:39:13:de:e9:50:ae:33:90:26:f5:5a:ea:1e:57:bd:
         11:db:74:90:63:03:21:76:a4:b3:36:71:12:32:cb:45:ff:b0:
         a8:70:7d:0a:73:e5:ae:e1:17:0c:fa:20:e5:92:1a:b5:76:0b:
         fb:9f:5c:e9:93:4b:ed:d3:7f:9c:60:fa:54:2f:2d:68:83:58:
         47:fb:70:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fYvPVo5k+JF6h4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
N2MwMjgzMjctOWNiNy00MjUzLThlOTItZWU5YzI3ZTM1ODc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV5iBgWkmZflxvGyFTDvJxhZ+I5W1U/GObYQ
Ur2mynEBuMC6AGjmVBrY+j5fLRHSs+KB0F9mgIr/hZN/zQsQu1tue1TsEoJLLYjO
Ein/jFvvT7E1+/304yFuzTrZe9viQxS576zUg4ZKW23vy3YGff0q1MKows0S8oh4
204NRUUiwtKo/Oxkyo4Cmu7dtLovk5Py9rhfsp1MP/p159RkbMfXckthtfwM93Gk
csUF7kWGvizWg8M83ryterCsm0/G7oZT4UmSRyx6he+8I+rrhxAlSUg7YOYLFyFd
QG770oM42PZG3niEDQ7a5EwPpt+KjL7exteJsaYFHixWbeg6aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBT7NEWyeWynn5rG3aiClgmi7uVwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMzcxNGJhYzgtNTMyNS0z
YjNiLThiNjAtNWIyMTJkY2M2ZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtZ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSvSjagBDFZgfIHSU1PFeWUHdHeALfdaG6qOFv8PIxkECbKroEODUGR
ucYsNtn9cSPrakbxkcvh5p973z7FTuHki86k6cuDiHPtCAilkOUFeVa+jzsYsBm2
SaNGhn8hHrrAQWDEoLA+EcLfUWnAW+u4oUYB+93ui5jsDa0Lvnl0uacHjdQmNbnP
vLztETiwi7UQJvazfBysMM/r9p8O+WKnMIYxRPm35xULm3Pn/ZNNXJNv3pQcWDkT
3ulQrjOQJvVa6h5XvRHbdJBjAyF2pLM2cRIyy0X/sKhwfQpz5a7hFwz6IOWSGrV2
C/ufXOmTS+3Tf5xg+lQvLWiDWEf7cHk=
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:28:51 2026 by rpki-client