Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/8d6b8dd5-dd34-3224-bccb-36dc6eaaf5f7.roa
File:                     8d6b8dd5-dd34-3224-bccb-36dc6eaaf5f7.roa (raw, json)
Hash identifier:          Tsffhqh6QD2l0YEadifVbTV2IU8wzfHxXbf8WWcb7Cg=
Subject key identifier:   13:AE:A7:F1:DC:0A:96:09:C8:16:F4:44:88:1D:B0:57:5B:2C:14:9C
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B980A0D788362134350A8EC90
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/8d6b8dd5-dd34-3224-bccb-36dc6eaaf5f7.roa
Signing time:             Tue 21 Oct 2025 09:30:49 +0000
ROA not before:           Tue 21 Oct 2025 09:30:49 +0000
ROA not after:            Mon 19 Jan 2026 10:30:49 +0000
asID:                     35039
IP address blocks:        130.214.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:0a:0d:78:83:62:13:43:50:a8:ec:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Oct 21 09:30:49 2025 GMT
            Not After : Jan 19 10:30:49 2026 GMT
        Subject: CN=82e00d15-bee9-4502-a198-4f9b0bcb5556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b5:1d:ed:cd:f7:d1:3c:e5:f5:64:39:ec:7e:
                    cf:1a:31:09:13:b7:72:77:5a:60:33:70:eb:34:63:
                    98:19:1d:dc:29:18:d2:c7:6f:6a:80:8b:d3:99:b6:
                    49:b1:03:7e:1e:4a:f8:6d:90:1d:e9:52:7d:4e:b3:
                    24:b5:1d:af:74:ee:88:c1:e5:43:2f:91:c3:7b:9f:
                    47:25:11:87:1e:3b:01:31:ab:33:da:99:0d:1e:f7:
                    34:0e:93:9c:06:76:ae:33:bb:7a:be:82:71:67:c4:
                    9c:da:b0:18:3f:ff:af:a7:7f:98:38:f2:26:09:ef:
                    f5:06:70:0f:11:da:93:47:a9:47:69:2e:c6:25:48:
                    d5:84:fe:16:cc:ed:16:d7:58:ec:d2:e0:d9:6c:6c:
                    5a:89:49:61:ea:c1:85:5a:be:18:ad:29:d1:ef:a5:
                    69:67:8f:2f:59:bc:fd:e4:3d:65:af:0c:05:e1:23:
                    05:68:64:9d:2b:1d:b0:10:27:a4:70:97:79:01:d8:
                    ab:dc:68:4c:57:4d:bd:0e:9f:c6:0c:8e:a1:7a:41:
                    ef:62:c6:a7:58:57:a6:f7:6a:2a:ca:fc:e8:df:e1:
                    86:fe:d0:e1:0d:48:3c:97:3b:e5:e7:13:15:b9:0c:
                    a6:29:33:88:53:4e:96:35:20:d5:2f:52:5a:8b:22:
                    ff:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AE:A7:F1:DC:0A:96:09:C8:16:F4:44:88:1D:B0:57:5B:2C:14:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/8d6b8dd5-dd34-3224-bccb-36dc6eaaf5f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ab:cf:99:fa:88:b3:cf:5e:c3:1a:a2:48:69:2c:7c:4d:76:
         15:2e:20:19:6b:bf:ed:1d:75:ea:4f:a2:d2:bf:fe:7f:14:83:
         91:49:13:9b:46:8f:9f:7a:f9:0c:7c:93:3a:ba:cb:21:0a:81:
         5d:0b:49:dc:ec:58:eb:81:1b:b9:cd:6c:cf:42:97:98:6b:49:
         f7:05:f2:72:86:9c:51:dd:9f:85:46:90:71:51:72:81:f5:1c:
         91:a8:c7:64:da:31:7c:57:f8:b6:f7:80:11:4b:13:09:ba:b4:
         c0:4a:3a:00:1f:4f:8e:c7:db:0e:76:8c:be:50:0e:f6:60:32:
         80:b6:d2:f1:0b:4f:00:2e:20:90:eb:8b:c9:ce:b5:8f:f6:79:
         8a:b6:df:5c:ca:bc:ed:00:27:90:7f:21:6c:22:0f:e0:1d:98:
         ed:9a:1f:f1:9d:60:9f:f4:b7:16:97:1d:34:35:91:6d:50:4f:
         98:b6:76:86:be:9f:86:d6:40:99:38:33:d2:e1:1a:81:26:e5:
         bd:4d:43:8f:61:11:db:8a:e9:f8:8e:0e:d6:f2:10:cc:13:12:
         57:be:77:83:5a:d0:56:63:18:e4:28:80:5a:22:68:b8:31:6b:
         1c:70:2d:00:13:ce:37:00:3d:7a:44:24:bd:12:2a:c6:9c:ed:
         98:1b:1a:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCg14g2ITQ1Co7JAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI1MTAyMTA5MzA0OVoXDTI2MDExOTEwMzA0OVowLzEtMCsGA1UEAxMk
ODJlMDBkMTUtYmVlOS00NTAyLWExOTgtNGY5YjBiY2I1NTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbUd7c330Tzl9WQ57H7PGjEJE7dyd1pgM3Dr
NGOYGR3cKRjSx29qgIvTmbZJsQN+Hkr4bZAd6VJ9TrMktR2vdO6IweVDL5HDe59H
JRGHHjsBMasz2pkNHvc0DpOcBnauM7t6voJxZ8Sc2rAYP/+vp3+YOPImCe/1BnAP
EdqTR6lHaS7GJUjVhP4WzO0W11js0uDZbGxaiUlh6sGFWr4YrSnR76VpZ48vWbz9
5D1lrwwF4SMFaGSdKx2wECekcJd5Adir3GhMV029Dp/GDI6hekHvYsanWFem92oq
yvzo3+GG/tDhDUg8lzvl5xMVuQymKTOIU06WNSDVL1JaiyL/owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOup/HcCpYJyBb0RIgdsFdbLBScMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvOGQ2YjhkZDUtZGQzNC0z
MjI0LWJjY2ItMzZkYzZlYWFmNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtY+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWrz5n6iLPPXsMaokhpLHxNdhUuIBlrv+0ddepPotK//n8Ug5FJE5tG
j596+Qx8kzq6yyEKgV0LSdzsWOuBG7nNbM9Cl5hrSfcF8nKGnFHdn4VGkHFRcoH1
HJGox2TaMXxX+Lb3gBFLEwm6tMBKOgAfT47H2w52jL5QDvZgMoC20vELTwAuIJDr
i8nOtY/2eYq231zKvO0AJ5B/IWwiD+AdmO2aH/GdYJ/0txaXHTQ1kW1QT5i2doa+
n4bWQJk4M9LhGoEm5b1NQ49hEduK6fiODtbyEMwTEle+d4Na0FZjGOQogFoiaLgx
axxwLQATzjcAPXpEJL0SKsac7ZgbGvg=
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:05:00 2025 by rpki-client