Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a12854ff-c314-360b-a783-ed991e915d91.roa
File:                     a12854ff-c314-360b-a783-ed991e915d91.roa (raw, json)
Hash identifier:          qyX+5c98B53xvDBYvzLKv47nfg6zebI4kt0+DTpWDbQ=
Subject key identifier:   24:00:20:23:07:C6:FC:08:BE:B4:50:FE:06:5D:91:BB:D2:0A:78:BB
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D5884E494C51A69B4BBE62DA0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a12854ff-c314-360b-a783-ed991e915d91.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     35039
IP address blocks:        130.214.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:e4:94:c5:1a:69:b4:bb:e6:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=b325d7f4-c1bf-48ba-9029-d2b4702a216f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:5f:16:14:4d:3f:ae:11:95:2f:74:71:84:
                    89:a7:40:ad:7e:bb:3d:22:98:d1:a1:1f:22:46:4a:
                    46:33:ab:da:7b:46:fc:ee:31:dd:7b:9e:40:d5:f6:
                    f0:8e:91:ec:e1:63:44:f1:3b:7e:e5:18:41:62:f8:
                    2d:1a:57:ce:a8:9d:de:dd:52:72:89:14:46:13:60:
                    a5:eb:f1:10:db:91:81:49:94:15:a9:fa:86:fd:eb:
                    b8:0d:a7:ea:04:f0:56:88:ff:c7:b5:dd:30:f3:9d:
                    0e:3c:52:f5:b1:e6:1c:db:a8:a1:fa:99:16:51:d2:
                    51:50:90:2c:84:63:b4:d9:65:18:e3:96:13:85:13:
                    13:f4:3b:78:56:75:d6:84:0b:6b:0e:f3:b3:75:f9:
                    f2:c1:a0:d8:6d:77:61:b5:e6:de:4b:a1:71:b7:b1:
                    57:a0:37:29:b0:cf:ec:d0:19:a6:47:84:5e:be:57:
                    db:ab:b1:ce:c5:82:fe:19:40:db:ae:b2:c0:0b:8f:
                    89:88:58:19:2f:a9:b7:53:e5:95:07:a0:a6:a2:49:
                    1e:29:f4:6d:e2:2b:f1:37:da:e6:aa:5b:7b:88:70:
                    96:05:38:21:6c:7f:ed:12:25:41:fc:94:bf:35:49:
                    0d:ed:fd:4c:c7:8c:7f:c4:3a:6e:6b:99:bf:e2:6d:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:00:20:23:07:C6:FC:08:BE:B4:50:FE:06:5D:91:BB:D2:0A:78:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a12854ff-c314-360b-a783-ed991e915d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e5:4d:48:fa:48:68:d3:fa:ba:33:c2:d7:c7:1b:c7:98:af:
         9a:c3:ba:a4:cc:d7:ba:6a:01:6e:8e:b6:64:79:c0:b7:6f:09:
         c6:04:86:5f:c0:6d:02:77:ce:3a:c4:dd:a5:a3:a5:09:bd:02:
         7a:66:71:5d:e2:b1:56:3d:c0:c9:6b:3d:f7:08:c1:46:db:48:
         ee:38:82:19:57:40:6d:f6:79:d1:11:b1:b8:d7:73:08:18:5e:
         5e:96:d9:9b:43:12:d0:ce:e8:90:00:78:8f:0e:a1:a1:3d:ec:
         d4:83:5a:0e:54:b6:eb:0a:1c:e0:5a:49:42:dc:2b:c0:dd:9e:
         ea:ec:ba:4d:12:d0:96:bc:98:65:c1:c6:ed:d6:6a:47:05:9b:
         83:f4:55:6c:75:97:31:b1:d8:c4:17:cb:85:56:05:88:9a:67:
         c9:f8:45:e4:d9:f7:73:42:53:e1:1d:1d:90:61:df:8d:5b:fd:
         61:a8:6b:ee:5e:97:a2:88:64:15:de:71:d7:b4:b2:4e:65:fd:
         c3:dd:d1:ce:18:d1:0f:28:32:08:7a:df:0f:e4:fc:0c:b9:d6:
         cd:06:4b:61:a0:5d:65:3a:4b:01:15:dd:da:63:79:1c:72:58:
         95:a5:d2:7e:38:d6:46:b2:c3:29:57:6a:5e:b8:71:d2:09:7e:
         90:ab:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:23:45 2026 by rpki-client