Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/7669d4b9-47f9-3ec6-bc63-c8273031ce5c.roa
File:                     7669d4b9-47f9-3ec6-bc63-c8273031ce5c.roa (raw, json)
Hash identifier:          1GN4Ee5ZFYF9/v+KhV5kuOEyzEb8axApna8CcPHzEb8=
Subject key identifier:   70:10:24:95:BF:F3:00:83:CA:8E:6D:C6:FB:4B:63:D4:B6:A8:8D:C9
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584E38C9C37B210E2F1F4893BE00
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/7669d4b9-47f9-3ec6-bc63-c8273031ce5c.roa
Signing time:             Fri 19 Jun 2026 09:00:12 +0000
ROA not before:           Fri 19 Jun 2026 09:00:12 +0000
ROA not after:            Thu 17 Sep 2026 09:00:12 +0000
asID:                     35039
IP address blocks:        130.214.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:c9:c3:7b:21:0e:2f:1f:48:93:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jun 19 09:00:12 2026 GMT
            Not After : Sep 17 09:00:12 2026 GMT
        Subject: CN=ef34af39-8aff-4d56-8565-2944c0c7d810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:d8:82:b1:a5:21:6a:9a:c7:e4:09:4d:48:
                    b8:b8:25:f8:21:01:9a:e3:56:08:ff:24:89:51:60:
                    de:5f:4b:4b:fe:d8:12:0e:2a:7a:b0:48:6c:71:74:
                    11:9d:37:3d:54:a8:b8:a7:55:c7:02:8c:9e:51:e7:
                    8e:6c:5e:f7:f6:83:94:65:ec:55:70:1c:7e:a9:85:
                    29:3c:3e:9f:5c:94:90:42:a3:f8:af:3e:4a:85:f3:
                    8c:b8:7c:93:39:b6:3b:5d:13:24:04:b3:0c:d4:1c:
                    e6:10:8a:ff:2e:a2:b3:e5:c1:19:84:6c:6c:c8:c0:
                    81:40:c5:2a:c0:1c:08:54:43:62:a5:8f:00:f5:e1:
                    de:3e:98:3c:d0:41:75:a3:45:2b:83:af:a1:11:73:
                    19:b2:c2:7e:ff:cb:09:26:41:59:bd:fe:8c:5b:ac:
                    27:b5:81:ec:b4:d6:c0:39:e9:7e:c8:5b:c1:5a:c9:
                    4d:1d:b1:4d:b4:78:90:14:16:f1:66:ef:f2:84:0e:
                    53:dd:e9:64:5e:20:d0:40:36:0d:b8:b9:d3:23:94:
                    59:6f:96:ad:88:73:d3:c4:9f:7a:ff:f0:70:a8:15:
                    65:de:6e:94:86:69:ff:98:d5:7e:d3:80:6e:ef:5f:
                    b4:e7:2c:6f:f8:bf:28:fb:37:2a:bd:59:4f:76:bc:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:10:24:95:BF:F3:00:83:CA:8E:6D:C6:FB:4B:63:D4:B6:A8:8D:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/7669d4b9-47f9-3ec6-bc63-c8273031ce5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:13:bb:15:15:a5:15:bf:0c:5e:97:e2:44:3f:e7:3a:12:
         af:1e:1e:75:f5:63:6f:e3:0e:21:99:4d:72:8a:b1:64:8a:28:
         d1:68:db:ba:d4:80:02:41:b5:3a:99:84:80:69:d8:d0:ab:25:
         0a:99:94:f1:da:2e:97:c9:6f:22:60:c2:55:c3:00:65:91:a0:
         ba:d3:0d:99:4a:d9:0a:b2:34:8f:ce:c3:be:9f:16:16:31:9b:
         60:84:15:f3:94:de:b1:43:ce:2e:46:47:f6:ed:ba:e0:1a:2c:
         1c:9b:b1:bc:fa:1e:0f:af:fe:a3:7d:df:7b:01:d7:c9:c4:86:
         fd:3e:58:34:69:1a:40:75:3f:bd:f0:2b:64:bf:95:31:ba:1a:
         a4:32:ed:34:d1:d3:2c:80:5c:c9:f7:34:1c:c5:49:fb:fc:75:
         5d:69:19:9f:8e:98:d2:43:33:3f:84:c7:89:e1:1b:91:e3:07:
         e4:a6:5b:98:17:f4:20:f5:97:66:d9:bc:5b:f2:20:17:97:71:
         2f:30:6a:52:1d:2b:33:d6:c8:87:52:c6:0c:8c:b2:64:af:13:
         35:9a:b8:b0:78:aa:bc:d5:a6:43:85:7d:d1:1d:b2:0c:25:e1:
         18:30:76:75:e9:d0:71:9d:63:42:f5:6f:fb:af:30:39:a5:60:
         54:e8:2c:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE44ycN7IQ4vH0iTvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI2MDYxOTA5MDAxMloXDTI2MDkxNzA5MDAxMlowLzEtMCsGA1UEAxMk
ZWYzNGFmMzktOGFmZi00ZDU2LTg1NjUtMjk0NGMwYzdkODEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgLYgrGlIWqax+QJTUi4uCX4IQGa41YI/ySJ
UWDeX0tL/tgSDip6sEhscXQRnTc9VKi4p1XHAoyeUeeObF739oOUZexVcBx+qYUp
PD6fXJSQQqP4rz5KhfOMuHyTObY7XRMkBLMM1BzmEIr/LqKz5cEZhGxsyMCBQMUq
wBwIVENipY8A9eHePpg80EF1o0Urg6+hEXMZssJ+/8sJJkFZvf6MW6wntYHstNbA
Oel+yFvBWslNHbFNtHiQFBbxZu/yhA5T3elkXiDQQDYNuLnTI5RZb5atiHPTxJ96
//BwqBVl3m6Uhmn/mNV+04Bu71+05yxv+L8o+zcqvVlPdrzQCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHAQJJW/8wCDyo5txvtLY9S2qI3JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNzY2OWQ0YjktNDdmOS0z
ZWM2LWJjNjMtYzgyNzMwMzFjZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2JE7sVFaUVvwxel+JEP+c6Eq8eHnX1Y2/jDiGZTXKKsWSKKNFo27rU
gAJBtTqZhIBp2NCrJQqZlPHaLpfJbyJgwlXDAGWRoLrTDZlK2QqyNI/Ow76fFhYx
m2CEFfOU3rFDzi5GR/btuuAaLBybsbz6Hg+v/qN933sB18nEhv0+WDRpGkB1P73w
K2S/lTG6GqQy7TTR0yyAXMn3NBzFSfv8dV1pGZ+OmNJDMz+Ex4nhG5HjB+SmW5gX
9CD1l2bZvFvyIBeXcS8walIdKzPWyIdSxgyMsmSvEzWauLB4qrzVpkOFfdEdsgwl
4RgwdnXp0HGdY0L1b/uvMDmlYFToLIg=
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:52:17 2026 by rpki-client