Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/454723fd-dd2f-3e4e-915f-0b2b1a64a4ba.roa
File:                     454723fd-dd2f-3e4e-915f-0b2b1a64a4ba.roa (raw, json)
Hash identifier:          t3p0rS5fvVMUsYLkkNcCRv/kSvmz9uT572sDZJhNlAk=
Subject key identifier:   5D:A5:5E:1B:99:33:5C:56:E5:DE:40:7F:37:A8:AB:1A:3C:8B:F7:79
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D5884E78C4A6B823BC7B24D00
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/454723fd-dd2f-3e4e-915f-0b2b1a64a4ba.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     35039
IP address blocks:        130.214.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:e7:8c:4a:6b:82:3b:c7:b2:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=fafd4e61-3cd5-4eba-a7e8-d69e6c0ac8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:bd:ef:ab:af:a5:bb:6b:06:ea:58:c2:fa:
                    32:b6:68:2f:c2:f3:46:87:b6:a2:af:d3:63:36:7a:
                    ca:95:b3:49:db:de:71:b8:07:11:ec:f6:23:bb:b1:
                    b5:3b:43:f6:4d:a9:87:1a:cc:2b:32:f8:43:8e:e4:
                    92:dd:90:07:cd:5c:a9:7d:7b:48:7d:92:19:32:de:
                    30:93:ec:03:bc:9f:e7:43:ce:72:f8:6f:f5:68:7c:
                    87:dd:8c:1a:b8:eb:93:b4:72:6e:f7:be:d7:ae:92:
                    3a:a2:23:af:ea:a7:22:cb:ba:0c:fd:c8:d4:14:c0:
                    21:6c:8f:b7:49:37:e6:dc:66:33:92:0d:e4:c6:da:
                    f6:29:5b:ba:82:66:99:28:ee:d6:a9:10:6e:75:be:
                    ad:d1:e8:16:30:3a:20:35:f6:5a:3f:82:10:2e:1d:
                    6b:31:79:b2:bd:ff:0c:3d:c3:80:c1:06:08:46:08:
                    1d:31:1e:67:2e:be:e4:83:b7:d1:58:69:60:d8:96:
                    55:26:d6:cd:1c:38:f2:87:4c:17:9f:df:36:29:9f:
                    2d:1e:e2:6d:9e:77:6a:cc:fe:60:64:b1:47:53:0c:
                    96:f8:2f:43:d4:72:ab:b3:ec:41:07:02:ff:7f:e7:
                    09:1b:e7:d1:2c:2c:70:cd:6d:aa:4f:94:b5:84:f3:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A5:5E:1B:99:33:5C:56:E5:DE:40:7F:37:A8:AB:1A:3C:8B:F7:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/454723fd-dd2f-3e4e-915f-0b2b1a64a4ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:44:ab:ce:17:37:39:8d:04:b9:41:42:9b:ff:98:e7:56:07:
         07:01:10:b7:c1:ce:13:92:de:93:6e:0f:d5:c7:ed:65:d5:50:
         de:ad:4e:d3:c6:a3:1e:5f:36:15:46:b3:60:39:54:0a:1c:ad:
         8b:2b:dc:e5:5a:55:0e:4c:f0:d8:f0:68:23:30:db:24:62:eb:
         35:1d:1b:89:49:1a:fb:4f:66:78:88:27:dc:64:71:03:6f:1b:
         79:52:43:80:2a:ec:b3:52:37:1f:f2:4d:3d:38:db:74:f0:fa:
         9d:3f:c8:8d:7e:ca:5e:bb:50:45:79:ff:34:6e:90:ba:3b:62:
         3d:75:2a:96:48:ef:64:fb:a7:7c:b6:eb:4d:c5:cc:6b:36:06:
         39:ad:39:51:e3:63:6d:06:02:aa:c5:01:3c:fa:c9:e4:1e:0f:
         4a:2c:25:00:e7:8e:07:7c:99:20:2e:c7:d3:84:a1:a2:40:cf:
         67:08:3c:1f:b0:7e:25:07:1c:f1:76:a3:b4:d9:2d:f8:4e:5a:
         e0:36:04:82:65:44:4d:be:2e:b4:47:a4:b0:98:c7:72:19:fd:
         c2:f9:23:e0:ae:ef:11:3f:13:0b:17:f8:c0:9f:b3:d3:7a:b5:
         43:61:9a:be:e8:55:f0:2e:88:22:2e:2b:6f:80:5e:da:95:e8:
         ce:97:24:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:24:56 2026 by rpki-client