Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/937fd178-0b8a-3769-9298-894f02ce73e2.roa
File:                     937fd178-0b8a-3769-9298-894f02ce73e2.roa (raw, json)
Hash identifier:          pij7k0FjDRzXXbA+YogPYInPPN0fM5+cr4aJVAxLHC0=
Subject key identifier:   59:8E:E3:DC:7B:0E:A0:57:60:81:2C:1B:13:E0:40:00:3E:2F:2A:1A
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D5884E455E4C20F7CD1180420
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/937fd178-0b8a-3769-9298-894f02ce73e2.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     35039
IP address blocks:        130.214.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:e4:55:e4:c2:0f:7c:d1:18:04:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=7c31ff71-c4dd-462a-8a98-f00f2b328a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1c:56:be:87:fd:58:5d:0e:8c:cc:7f:a5:bd:
                    e1:c4:15:6f:53:da:30:55:be:15:87:ec:3e:e7:12:
                    3d:e9:16:19:59:67:cb:7d:22:87:b0:c1:60:fa:65:
                    71:ec:f0:8c:9e:07:be:fe:f0:64:ec:28:29:28:cb:
                    39:73:21:fd:ae:58:f4:5e:71:7a:e9:e0:c6:af:df:
                    47:ea:81:72:f7:0d:25:7f:fb:5d:7e:ca:9c:4d:b9:
                    b3:83:8d:e2:3b:35:f4:d7:06:8a:1c:1b:9b:20:e4:
                    05:21:66:55:bf:d3:62:df:14:a1:dd:74:59:7b:94:
                    2d:7c:93:ba:c4:ea:29:3a:ab:b2:3c:e1:95:6e:50:
                    ff:6c:49:cb:61:67:c4:05:fc:72:19:b4:4e:fa:0e:
                    ce:7e:d9:9a:e7:b1:c5:b2:18:db:cd:45:65:51:c0:
                    97:40:08:da:fb:5b:3c:45:77:3e:5a:56:5e:ec:bf:
                    b1:4a:94:00:45:da:8e:c6:4f:39:d3:a4:85:5a:cc:
                    c9:18:1d:5e:69:e9:4d:27:ee:7a:81:a4:c5:a6:be:
                    76:21:fe:96:a4:f7:54:ea:12:d2:d9:d1:31:a9:f7:
                    d3:20:5a:48:0b:73:39:72:05:39:67:59:7f:c9:54:
                    88:49:b6:6a:de:f2:97:94:a2:0f:69:64:8f:48:27:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:E3:DC:7B:0E:A0:57:60:81:2C:1B:13:E0:40:00:3E:2F:2A:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/937fd178-0b8a-3769-9298-894f02ce73e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:32:9d:f3:36:bf:68:09:20:d4:c3:1a:2d:f0:a5:b6:97:04:
         a9:29:bb:8e:60:e7:ff:45:69:dd:4e:88:22:a5:31:34:88:36:
         da:07:8c:66:50:f6:07:35:e0:39:0b:8a:b4:19:20:92:0c:db:
         af:a7:66:f9:11:2b:63:34:96:36:78:cd:0b:a3:54:73:10:97:
         bb:9a:ee:e0:24:ae:e0:11:c7:cf:04:6e:87:5d:20:36:d3:93:
         57:94:29:2f:eb:16:37:83:61:00:b5:b8:18:c3:fb:91:79:ae:
         c1:72:3b:8b:10:97:cc:6e:63:df:1f:bb:9f:8e:f1:21:5c:92:
         7a:43:47:f8:15:91:0c:10:a0:62:c6:4f:cb:03:77:51:1a:ea:
         08:92:b8:72:6d:44:2a:2b:71:7b:0e:88:b1:dd:5a:be:3e:90:
         a2:5b:a9:cf:f0:8b:f6:73:c9:0e:01:8d:39:14:33:15:f0:35:
         c0:10:7c:f8:c9:17:0a:0b:bd:0d:8e:ec:76:ac:42:7b:3b:d3:
         53:96:cf:67:88:bf:59:68:72:06:77:aa:84:34:a7:d4:b1:33:
         07:43:b9:1c:cb:e3:b3:57:35:b9:c0:1e:9e:2a:c7:9f:06:7a:
         7d:bf:11:40:cb:4a:3e:da:5a:8f:3c:72:68:5e:71:1f:f1:b7:
         ef:59:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:22:59 2026 by rpki-client