Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/5578c2eb-ec9b-3a78-987e-67b09469ac3d.roa
File:                     5578c2eb-ec9b-3a78-987e-67b09469ac3d.roa (raw, json)
Hash identifier:          psas6eLTF/KaAbsnYTL6KeUMWj4clhSub+LN1N3Py6s=
Subject key identifier:   83:8B:3C:C4:56:01:FF:5B:2E:56:A8:65:D0:AC:23:A2:E0:DE:03:4A
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584EDB2C940412E2A8B6C105F740
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/5578c2eb-ec9b-3a78-987e-67b09469ac3d.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     35039
IP address blocks:        130.214.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:94:04:12:e2:a8:b6:c1:05:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=05af18c3-85ee-4ea9-af6c-a8c4e01012ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:aa:af:84:6a:57:e8:a8:2f:82:2d:b1:d0:9d:
                    d5:2f:38:93:45:d9:bc:03:f1:5c:65:c6:49:66:38:
                    5c:ea:fb:6f:59:86:94:e6:60:28:a9:7d:43:d9:23:
                    a0:8c:4a:db:f4:a0:20:52:c1:41:a7:31:54:5c:bf:
                    9d:94:7a:0d:19:34:65:76:52:d5:dd:81:8b:e2:84:
                    36:eb:a1:e9:09:08:f4:9b:de:27:e1:65:ab:ae:ea:
                    ce:82:ab:9e:9e:99:73:b8:fe:2d:43:5c:4a:cd:d6:
                    2c:e7:9c:bc:8e:7a:d9:b8:c9:4f:50:47:d2:05:37:
                    5d:1a:8c:be:c0:e0:cf:f9:b1:03:dd:37:b3:09:c9:
                    d8:9e:ae:d1:c5:10:fc:79:e9:0a:b8:38:42:d5:ad:
                    29:16:12:3e:8f:7a:ba:35:76:25:16:56:00:56:ed:
                    22:af:1c:cb:3e:57:ba:bc:1c:b3:c6:ed:f5:1d:29:
                    08:99:7c:14:29:53:30:68:da:40:cf:0f:56:12:36:
                    ea:e5:b7:77:b3:15:60:81:c5:63:b8:7e:ba:e1:69:
                    32:20:20:dd:f8:62:e9:c6:bf:d9:e7:6a:6a:9e:8e:
                    12:31:97:41:1c:a0:7f:86:bc:c9:cb:99:c3:c8:41:
                    8f:7e:59:d6:2d:e8:b2:92:68:d2:db:8a:5f:46:59:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8B:3C:C4:56:01:FF:5B:2E:56:A8:65:D0:AC:23:A2:E0:DE:03:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/5578c2eb-ec9b-3a78-987e-67b09469ac3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f8:5f:68:a0:3a:24:ac:f1:4a:02:f4:08:7b:ab:a0:ae:6e:
         77:c1:4b:b9:76:6d:90:1b:a3:3a:b8:d5:8d:f4:87:81:68:55:
         a1:61:e3:28:ed:70:4f:70:3f:38:ff:51:96:5d:36:e2:16:e5:
         79:19:94:b1:c7:d6:49:ae:44:08:d0:c3:5c:8a:76:d4:52:28:
         26:7e:6a:b7:2a:04:85:76:0c:32:cc:e9:13:c2:28:e8:ed:63:
         f7:80:c3:bd:b6:cb:de:e6:22:86:4e:4a:bd:87:5e:d1:3d:60:
         45:9a:93:93:8d:bf:ed:d8:1c:62:0f:c0:fb:3b:a0:15:85:60:
         81:e6:54:83:60:89:d9:f7:15:88:ba:b1:73:4c:72:8c:0d:14:
         03:4b:30:f0:1d:eb:15:78:e8:c3:98:6f:54:d8:58:07:bd:13:
         1e:f3:98:8b:84:c0:04:c6:b0:81:87:f1:4c:2a:c0:ce:8b:3b:
         47:d0:be:d6:49:b8:56:5c:e5:9a:b2:d7:08:ef:56:1a:3c:49:
         27:b6:51:4f:97:2a:44:86:90:80:bd:28:b7:52:ff:fe:40:c1:
         04:5c:63:b3:65:8a:25:27:a1:79:e9:d2:22:e1:cf:35:61:b9:
         0b:37:11:b7:88:99:de:b8:df:b5:9a:83:5b:8e:47:01:c6:b6:
         11:28:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 03:37:27 2026 by rpki-client