Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4329ee4f-9457-3f75-a28a-ba88236b34dc.roa
File:                     4329ee4f-9457-3f75-a28a-ba88236b34dc.roa (raw, json)
Hash identifier:          lo+KFr9AGgF8SGlwxqjwp9uhstOsvl3NmUSyIyA8wWQ=
Subject key identifier:   04:CF:97:D5:FD:E5:5C:28:21:24:86:C9:62:B6:86:6F:F6:ED:19:16
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584EDB2C8B6981EF25AE7F8F4AE0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4329ee4f-9457-3f75-a28a-ba88236b34dc.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     35039
IP address blocks:        130.214.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:8b:69:81:ef:25:ae:7f:8f:4a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=47225a74-1418-4142-adcb-114512f99986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:58:9d:da:3d:80:0f:c3:90:4d:69:dd:96:
                    c1:c9:88:8b:2f:22:7a:7c:f2:75:10:a7:1f:7a:38:
                    29:25:f5:2c:1f:f6:69:78:39:70:21:50:99:9c:9a:
                    52:08:86:b8:ee:af:bf:c2:61:88:c5:3d:fd:a3:c2:
                    73:e4:10:e7:d0:0a:c5:c1:78:8c:e2:29:69:c8:13:
                    80:47:9b:e7:6b:af:45:41:cc:1d:a8:3e:23:2e:f7:
                    58:3e:d4:99:8f:cf:13:a0:50:eb:79:b6:9b:bb:ac:
                    02:75:1e:b0:6a:dc:35:3b:e4:70:11:05:df:e2:56:
                    2a:68:73:dc:93:92:a7:b1:c6:31:01:79:d3:50:33:
                    2b:b1:fe:34:49:7a:33:21:2a:2e:d8:ee:14:c4:d1:
                    dc:8f:48:c2:46:70:f6:b2:c7:2b:a3:b8:07:6b:6b:
                    78:82:b1:99:53:b0:40:6f:5b:ae:67:7a:90:44:84:
                    83:6a:9a:bd:b5:ea:43:45:b8:4d:05:6b:76:2e:e8:
                    55:a3:1b:87:d1:c3:0b:19:3a:fc:a9:9d:e0:91:4b:
                    79:6e:a8:33:e5:49:c7:0c:da:dc:51:dc:01:a8:aa:
                    df:bf:17:5e:d8:11:3c:2e:cf:b1:7e:60:a6:2e:ce:
                    c5:04:1f:a9:e9:99:99:bc:61:e1:75:f4:40:16:6d:
                    ea:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CF:97:D5:FD:E5:5C:28:21:24:86:C9:62:B6:86:6F:F6:ED:19:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4329ee4f-9457-3f75-a28a-ba88236b34dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:89:29:ba:ff:77:8f:75:ca:df:4a:b5:ad:a7:e1:3d:19:
         f0:55:16:0b:55:86:7f:74:04:3a:f2:3f:2b:81:50:ea:f7:69:
         7e:4e:58:f1:5d:e8:98:21:56:61:8f:25:6a:e1:56:6f:c0:1e:
         e1:10:1c:05:99:ab:fe:f5:ff:19:ab:85:68:63:fc:63:49:1a:
         26:fd:1c:5b:96:38:a6:e0:a0:e2:1a:6d:cd:f4:55:9b:ba:cc:
         ba:5b:0d:28:55:39:bd:c6:41:16:f0:e0:e1:61:f0:f9:fa:4a:
         7f:7b:11:e7:e6:96:1e:cf:5a:b4:e1:39:92:ff:6c:37:49:fb:
         63:64:34:04:e0:76:32:cf:59:43:ab:64:79:cb:e2:7b:a7:95:
         21:51:78:3b:3c:29:d0:38:39:f7:72:37:d3:ce:cb:72:88:ac:
         33:27:86:13:22:bc:f6:e8:a1:da:4f:6a:49:2c:13:31:e5:0b:
         e6:c2:3d:cf:6c:0b:85:9c:7d:49:9e:52:cc:cb:38:09:c7:8d:
         6a:65:1d:ca:9e:e3:30:ce:83:86:72:fc:69:2e:66:d6:20:e3:
         08:ba:45:62:50:c2:a8:6b:9c:80:e8:90:61:89:01:7c:3c:48:
         b1:1f:60:cb:e7:1c:66:c7:d9:4e:29:7d:a6:6e:1f:5a:51:8f:
         69:fa:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 03:35:59 2026 by rpki-client