Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3ea87a5c-5449-3476-85ba-b76f8912054d.roa
File:                     3ea87a5c-5449-3476-85ba-b76f8912054d.roa (raw, json)
Hash identifier:          CkP0DbU+JphbfsnMtT/bjSMPNHrlsJNZ8ys4L/5lbXc=
Subject key identifier:   D4:D0:A8:69:BD:3D:1D:F2:22:24:4B:0D:4A:B8:8E:BC:D4:07:15:D9
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584EDB2C8D1318736444C4E30680
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3ea87a5c-5449-3476-85ba-b76f8912054d.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     35039
IP address blocks:        130.214.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:8d:13:18:73:64:44:c4:e3:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=76a77113-9104-4860-9311-7932a3ab98a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:cb:bf:49:e7:1a:9f:99:8c:5f:cb:31:c9:
                    62:89:d9:4f:7d:ae:21:aa:d9:56:a4:32:a3:3f:67:
                    20:83:8c:aa:ad:5e:87:73:8f:30:08:9d:70:ea:45:
                    30:f1:8e:33:bf:6d:76:9c:94:62:3b:ad:7c:f0:0b:
                    4c:26:2a:42:13:b6:ab:a6:68:79:74:0f:b8:22:1f:
                    79:b7:46:3c:19:f9:52:e2:08:09:24:c6:3f:9e:a1:
                    c6:53:51:0a:8f:95:40:3c:39:f8:38:b8:7c:36:42:
                    ce:33:f8:87:6f:2a:3d:c3:6f:d6:0b:2b:08:89:c0:
                    d0:01:e2:21:b2:c6:5a:76:17:1b:a1:80:cb:0e:fb:
                    c3:ba:4b:a1:25:e1:f0:45:c0:39:94:97:7c:bb:46:
                    a6:65:da:bb:88:36:4f:8d:f9:26:fa:fb:bc:f8:f5:
                    ca:fa:d2:ef:5b:c0:d2:af:43:8d:a9:2d:78:62:ca:
                    ad:77:fa:46:32:da:ed:93:89:b6:76:60:7a:42:1c:
                    f4:e4:44:af:23:40:a4:68:ad:38:27:69:e2:1f:43:
                    93:64:dc:d6:09:3a:e6:d3:8b:bc:02:22:97:6d:ac:
                    8c:8e:67:7e:eb:23:89:e6:22:32:1f:30:e0:2c:c3:
                    3d:b3:3a:89:80:9c:84:c9:56:a2:b5:5e:d9:ba:7b:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D0:A8:69:BD:3D:1D:F2:22:24:4B:0D:4A:B8:8E:BC:D4:07:15:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3ea87a5c-5449-3476-85ba-b76f8912054d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f9:03:f7:51:ad:04:77:13:20:63:05:ac:fb:d4:c7:7a:61:
         45:37:dc:10:da:02:94:66:f8:e7:92:f2:ae:c8:7e:02:7b:85:
         04:e7:ce:a2:7a:f5:9b:ba:98:94:dc:ba:f2:1e:5f:48:04:e1:
         bd:24:30:71:91:e1:1b:bb:30:3e:86:79:89:50:0e:84:76:d4:
         cc:c3:d1:73:1c:a9:9c:90:55:56:4e:b0:b3:59:21:69:50:f0:
         38:d1:49:4a:a6:f6:2f:c6:95:7c:aa:a2:17:6b:88:e6:85:ba:
         be:8d:8c:da:58:a8:38:6a:d2:09:11:3b:b5:bf:32:40:9e:c8:
         dd:93:b1:f7:94:36:84:0b:c2:16:ff:87:99:90:47:2a:b0:66:
         63:c0:c1:c9:59:4d:61:fc:2d:70:e4:38:a8:5d:b8:29:ed:47:
         f0:b3:33:ae:2e:4e:8a:2d:a2:c2:78:02:b8:aa:70:a8:7b:cf:
         20:ec:34:48:94:0c:48:ef:69:a9:35:37:cd:d9:7a:90:e3:1d:
         dc:44:9f:72:0f:48:c6:3b:3f:a5:d9:99:ad:6b:0f:00:c4:f1:
         fe:c3:ee:67:8a:97:ea:ea:fd:76:e3:5d:dc:f4:ac:cb:1d:fe:
         33:e7:13:af:dd:4f:4b:da:6b:c9:da:da:9d:dc:7e:22:27:17:
         3e:69:26:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLI0TGHNkRMTjBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk
NzZhNzcxMTMtOTEwNC00ODYwLTkzMTEtNzkzMmEzYWI5OGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6TLv0nnGp+ZjF/LMcliidlPfa4hqtlWpDKj
P2cgg4yqrV6Hc48wCJ1w6kUw8Y4zv212nJRiO6188AtMJipCE7arpmh5dA+4Ih95
t0Y8GflS4ggJJMY/nqHGU1EKj5VAPDn4OLh8NkLOM/iHbyo9w2/WCysIicDQAeIh
ssZadhcboYDLDvvDukuhJeHwRcA5lJd8u0amZdq7iDZPjfkm+vu8+PXK+tLvW8DS
r0ONqS14Ysqtd/pGMtrtk4m2dmB6Qhz05ESvI0CkaK04J2niH0OTZNzWCTrm04u8
AiKXbayMjmd+6yOJ5iIyHzDgLMM9szqJgJyEyVaitV7ZunvHWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNTQqGm9PR3yIiRLDUq4jrzUBxXZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvM2VhODdhNWMtNTQ0OS0z
NDc2LTg1YmEtYjc2Zjg5MTIwNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtaQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADD5A/dRrQR3EyBjBaz71Md6YUU33BDaApRm+OeS8q7IfgJ7hQTnzqJ6
9Zu6mJTcuvIeX0gE4b0kMHGR4Ru7MD6GeYlQDoR21MzD0XMcqZyQVVZOsLNZIWlQ
8DjRSUqm9i/GlXyqohdriOaFur6NjNpYqDhq0gkRO7W/MkCeyN2TsfeUNoQLwhb/
h5mQRyqwZmPAwclZTWH8LXDkOKhduCntR/CzM64uTootosJ4AriqcKh7zyDsNEiU
DEjvaak1N83ZepDjHdxEn3IPSMY7P6XZma1rDwDE8f7D7meKl+rq/XbjXdz0rMsd
/jPnE6/dT0vaa8na2p3cfiInFz5pJnk=
-----END CERTIFICATE-----
Generated at Sat Aug 22 03:35:54 2026 by rpki-client