Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/7f65c40a-10e7-3835-949e-124c6fe0e110.roa
File:                     7f65c40a-10e7-3835-949e-124c6fe0e110.roa (raw, json)
Hash identifier:          iuVI6PsWPsb8Noc993r7q8zxsqNK/TYFxyuCU5ZOE+E=
Subject key identifier:   E6:2A:6F:98:60:92:2F:50:68:2E:17:0B:7B:7E:CB:BB:F7:98:CB:AC
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584EDB2C8EC4C1C1F8662CD0CBC0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/7f65c40a-10e7-3835-949e-124c6fe0e110.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     35039
IP address blocks:        130.214.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:8e:c4:c1:c1:f8:66:2c:d0:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=78b6e285-accd-45f0-8c8a-be66c1235b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:d0:90:6c:45:29:b3:c8:57:b4:89:56:f5:
                    55:e3:0a:1b:85:16:e0:51:40:83:61:54:ec:3a:fc:
                    35:48:5d:5d:7c:8d:38:69:ed:d5:4b:a7:c3:d5:18:
                    ac:ef:8a:6d:76:65:eb:3a:25:fa:b5:58:80:44:dd:
                    a4:6c:8b:e2:12:d0:bf:ee:f5:5a:7d:89:cc:fb:85:
                    e5:aa:1e:96:07:b1:c6:3f:6e:85:87:00:fb:0f:4e:
                    33:4a:84:09:74:3f:49:6d:64:41:8b:ab:e3:6b:e8:
                    ac:e9:f5:e8:02:d6:16:8b:a9:14:26:e3:ab:47:3b:
                    25:4a:f3:f2:c7:73:69:15:79:9a:3e:bf:e0:2d:fa:
                    b6:c8:02:cf:e3:a6:6d:cd:43:a0:31:56:f1:b6:a0:
                    b0:86:27:8e:cc:fe:ef:37:67:a9:10:6e:f8:fe:82:
                    f3:6a:6a:78:ea:05:e1:36:6b:d4:aa:ee:90:50:03:
                    c4:f6:f5:ce:54:3e:6b:aa:0d:12:88:74:26:2c:63:
                    e4:3a:9b:79:aa:88:a5:f5:34:58:5e:e7:05:98:fa:
                    00:e9:51:e4:dd:74:29:d9:d4:7c:59:30:09:f5:b1:
                    79:bd:d4:66:0d:a4:6f:e5:07:16:3d:5a:5f:83:fb:
                    39:83:2c:41:c1:78:22:68:58:fc:91:e5:42:f0:4a:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2A:6F:98:60:92:2F:50:68:2E:17:0B:7B:7E:CB:BB:F7:98:CB:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/7f65c40a-10e7-3835-949e-124c6fe0e110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:22:b6:2b:49:60:4f:6f:e0:ec:b6:5c:9d:85:2e:18:c5:
         83:47:b9:e6:0e:bf:7e:cc:9d:b3:36:4e:7b:47:9e:59:0a:b8:
         58:73:c4:f5:c0:a1:a0:d9:6c:58:5f:9b:97:3b:10:40:b6:09:
         95:dd:0f:cf:f0:48:43:75:bd:4f:65:ae:2c:fb:22:ae:4b:38:
         a7:d8:8b:0c:a8:5e:ce:17:38:10:67:c5:40:0d:39:08:f0:c0:
         9f:ac:7b:b3:a0:76:cd:bd:51:fe:18:10:10:71:69:db:07:94:
         be:29:5a:4f:1c:c3:2f:0b:d6:21:3f:05:de:c0:7e:6d:b6:44:
         26:17:6e:df:93:83:b2:e7:7c:55:16:8f:0e:17:12:02:47:e2:
         f8:1e:33:df:92:f1:c6:fb:e0:2e:90:33:53:54:16:0f:45:a7:
         c0:80:63:c1:8b:51:db:5a:99:5f:f2:15:57:24:87:5e:76:20:
         b7:00:57:77:68:0d:16:1e:c6:9c:90:f1:81:d7:5d:cc:a2:78:
         39:27:0f:01:f2:5e:8a:7f:ba:37:d8:b9:5a:84:72:f1:33:cb:
         51:97:10:c5:9a:74:a0:bd:b4:7d:ac:1f:0d:b2:fd:1e:05:ad:
         85:f1:d1:10:c8:41:20:c2:e7:53:0c:3b:6d:06:f8:e8:98:be:
         9e:34:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 03:37:33 2026 by rpki-client