Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/636d53e0-7f1f-3531-840a-1459b23446b8.roa
File:                     636d53e0-7f1f-3531-840a-1459b23446b8.roa (raw, json)
Hash identifier:          +ZAicGzbv9P8csYTemlRx1eF4cinBe94Nmk33EqD2us=
Subject key identifier:   20:7C:5D:36:9D:58:3C:CB:67:F1:2E:B7:13:67:31:9B:19:9A:3D:57
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B980A93B3385AE7A6005FD9E0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/636d53e0-7f1f-3531-840a-1459b23446b8.roa
Signing time:             Tue 21 Oct 2025 09:31:53 +0000
ROA not before:           Tue 21 Oct 2025 09:31:53 +0000
ROA not after:            Mon 19 Jan 2026 10:31:53 +0000
asID:                     35039
IP address blocks:        130.214.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:0a:93:b3:38:5a:e7:a6:00:5f:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Oct 21 09:31:53 2025 GMT
            Not After : Jan 19 10:31:53 2026 GMT
        Subject: CN=6143537a-9aa5-48b0-895b-04940a66b2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:31:34:cd:94:74:ae:85:a8:a0:e6:c3:d0:71:
                    2d:4d:ac:c6:62:b2:01:8e:d3:72:44:f2:7a:a7:12:
                    84:94:39:e4:46:b9:e5:ad:77:0c:ef:4f:ba:b6:42:
                    b6:2f:bf:d3:9b:4a:40:40:79:a6:f2:b8:1f:46:0f:
                    db:7c:c0:36:97:8d:8b:b3:62:50:a5:df:92:c8:14:
                    6a:3b:01:ec:c8:ab:40:27:1c:3e:25:ee:54:3e:c2:
                    b3:dd:29:04:85:09:e7:1f:88:81:84:33:a9:e9:df:
                    f6:44:4f:57:1b:a3:e3:58:47:cc:75:0c:f9:5c:6a:
                    46:dc:4c:7c:91:8c:3e:84:2d:fc:99:c3:ea:b8:27:
                    c6:c4:bd:bd:8d:fa:8c:c6:44:6d:d0:cf:d7:48:4f:
                    c2:6d:53:ff:d3:bb:3f:00:d7:2c:44:6a:6d:69:04:
                    91:11:17:b3:33:f9:d9:70:53:fa:82:8b:0d:d9:63:
                    d1:17:da:78:19:50:0c:b8:15:8c:e2:ab:7b:fd:23:
                    10:aa:0f:26:ff:43:70:ee:f0:3e:11:7e:62:a5:86:
                    51:7f:4a:ff:63:14:31:7b:fd:6d:e0:56:45:24:c2:
                    56:76:3c:4e:07:c9:02:7d:d4:2b:de:89:76:00:12:
                    ff:c4:76:3e:09:50:dd:55:83:25:9e:53:cb:6c:1a:
                    7d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7C:5D:36:9D:58:3C:CB:67:F1:2E:B7:13:67:31:9B:19:9A:3D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/636d53e0-7f1f-3531-840a-1459b23446b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:83:0b:18:9b:ac:e6:1c:23:9a:d7:31:53:68:98:ff:4a:d3:
         b8:d7:d5:bf:26:8a:f8:6d:45:12:35:ba:11:28:40:c5:f5:7b:
         45:ff:64:fd:1f:4a:74:b4:10:95:71:1a:0d:23:33:9b:b0:b6:
         1a:52:e1:ee:35:67:53:79:6e:4a:35:5d:60:30:77:fb:99:68:
         a7:ff:cd:5a:b4:0e:59:d8:e4:19:77:a7:81:5d:da:b9:95:1f:
         86:72:4e:e8:b1:b5:8b:9d:e7:ff:6e:9d:19:8c:b6:cc:43:31:
         40:65:f9:c0:b3:01:1f:2e:73:1d:88:3e:d6:0b:c4:4a:d9:87:
         89:b0:ea:f9:a2:e8:50:5c:e2:56:6f:38:76:50:9d:e0:76:df:
         59:cd:eb:67:bf:95:01:f8:95:a5:56:88:a9:7e:64:a8:aa:74:
         3f:1a:08:b9:a3:10:66:b4:a5:e4:c0:91:58:75:ef:0d:b1:ba:
         05:76:8e:9e:cd:3e:46:72:f7:54:0d:44:c8:b3:1a:65:6c:a0:
         b7:3e:4c:21:5d:2c:f7:f7:d7:da:42:6c:02:89:9d:72:34:2a:
         91:3e:49:19:2b:91:cf:85:e2:2b:a8:07:0e:05:65:f8:eb:e5:
         98:15:d0:50:94:43:f4:f0:0c:27:34:f9:d2:c1:e9:73:b3:d8:
         ad:d8:40:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:04:47 2025 by rpki-client