Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ac710d64-e5f6-36cf-a213-06b50a2096e5.roa
File:                     ac710d64-e5f6-36cf-a213-06b50a2096e5.roa (raw, json)
Hash identifier:          dIPeaJ31ArHc0iGrWwEhR+bMHa+Fy70RKByjGF6W7ms=
Subject key identifier:   45:DB:88:B4:98:3D:FD:68:28:89:ED:7B:27:B2:CC:CF:2B:36:51:2A
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584E38C9C35E65C4B61927B7CD80
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ac710d64-e5f6-36cf-a213-06b50a2096e5.roa
Signing time:             Fri 19 Jun 2026 09:00:12 +0000
ROA not before:           Fri 19 Jun 2026 09:00:12 +0000
ROA not after:            Thu 17 Sep 2026 09:00:12 +0000
asID:                     35039
IP address blocks:        130.214.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:c9:c3:5e:65:c4:b6:19:27:b7:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jun 19 09:00:12 2026 GMT
            Not After : Sep 17 09:00:12 2026 GMT
        Subject: CN=13e35108-0247-4550-af2f-99de29e6b4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:cd:e7:93:c2:49:ee:91:28:e8:7a:91:ae:
                    45:4d:f6:19:4a:79:e8:af:5c:56:53:44:3d:4b:f8:
                    53:14:a8:4d:c0:4b:73:fc:56:ce:b1:a4:97:8d:b8:
                    30:47:55:31:9c:ec:58:45:b6:8a:a6:2a:be:99:c0:
                    ab:69:c7:22:b4:ac:30:5e:8d:ab:55:4d:72:c7:36:
                    ef:25:af:01:6d:74:93:3a:78:61:04:50:66:ed:a9:
                    d4:54:42:79:a0:2c:2a:fa:1c:4a:1e:f3:e8:44:51:
                    d3:53:32:89:5e:24:75:1c:00:4f:30:f0:39:74:55:
                    db:42:1f:bc:8e:7e:ad:ec:49:a5:d8:b2:18:34:08:
                    15:98:c4:07:14:79:00:97:6f:0a:88:33:95:b6:a4:
                    ac:6b:d5:58:d8:2a:4e:9b:91:48:20:76:56:fd:eb:
                    4a:79:22:ea:6b:26:53:2f:eb:2c:20:b2:1f:b3:11:
                    d5:93:69:39:2f:1f:f5:60:77:bf:fa:45:f7:f0:b2:
                    1b:6f:fe:54:80:91:3f:21:42:e3:62:49:65:35:71:
                    7f:ac:d0:f2:6e:ab:b1:1e:51:0f:0e:56:25:84:5a:
                    95:61:ed:1f:a9:fa:0e:8e:6f:ad:b6:34:96:fa:68:
                    e0:ff:74:03:33:fe:f9:79:66:05:a9:ef:b3:00:e5:
                    f2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DB:88:B4:98:3D:FD:68:28:89:ED:7B:27:B2:CC:CF:2B:36:51:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ac710d64-e5f6-36cf-a213-06b50a2096e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7d:56:a5:ef:0e:35:e0:30:79:46:64:8c:33:1a:a1:ed:99:
         b4:e4:e3:6b:1c:c5:9b:06:53:47:d1:8c:37:e2:90:ff:95:63:
         e1:b9:8d:c0:34:a4:3d:5e:6c:c8:ca:9a:93:ea:23:89:b8:2d:
         d7:5b:d0:76:a4:41:6c:b3:a6:a9:62:b2:4c:16:22:47:83:28:
         3d:6c:66:63:30:04:a5:15:ce:1c:54:53:bb:f0:92:bd:a4:e3:
         b8:31:7e:b9:ab:aa:ae:9d:b3:09:e7:84:a7:7b:fb:80:7b:72:
         bc:8f:15:59:be:dc:8b:9f:d1:9b:07:1b:4d:1d:b1:a2:7f:6a:
         5d:85:23:c5:cf:0d:7d:df:1b:8a:7e:9d:be:43:a0:72:2b:97:
         86:bd:bf:1d:48:9a:87:a5:9b:d6:76:17:c0:a4:1b:8d:04:03:
         bb:21:92:08:69:a7:60:41:b6:08:50:d1:07:46:4e:ff:1c:93:
         7d:53:08:fd:75:55:e0:d6:21:fc:c7:91:4e:f0:e0:14:47:54:
         92:10:78:d8:bd:73:ba:ab:92:0d:13:5a:b5:26:4a:62:0c:c7:
         58:3e:c5:f8:4e:75:02:9d:3e:00:f5:dc:1f:a2:e3:29:90:0b:
         0d:ee:f9:f6:a1:f2:65:79:45:6b:cb:3b:9c:c8:73:ba:90:3a:
         1e:1b:93:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE44ycNeZcS2GSe3zYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI2MDYxOTA5MDAxMloXDTI2MDkxNzA5MDAxMlowLzEtMCsGA1UEAxMk
MTNlMzUxMDgtMDI0Ny00NTUwLWFmMmYtOTlkZTI5ZTZiNGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCrN55PCSe6RKOh6ka5FTfYZSnnor1xWU0Q9
S/hTFKhNwEtz/FbOsaSXjbgwR1UxnOxYRbaKpiq+mcCraccitKwwXo2rVU1yxzbv
Ja8BbXSTOnhhBFBm7anUVEJ5oCwq+hxKHvPoRFHTUzKJXiR1HABPMPA5dFXbQh+8
jn6t7Eml2LIYNAgVmMQHFHkAl28KiDOVtqSsa9VY2CpOm5FIIHZW/etKeSLqayZT
L+ssILIfsxHVk2k5Lx/1YHe/+kX38LIbb/5UgJE/IULjYkllNXF/rNDybquxHlEP
DlYlhFqVYe0fqfoOjm+ttjSW+mjg/3QDM/75eWYFqe+zAOXyJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXbiLSYPf1oKInteyeyzM8rNlEqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYWM3MTBkNjQtZTVmNi0z
NmNmLWEyMTMtMDZiNTBhMjA5NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtaCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHt9VqXvDjXgMHlGZIwzGqHtmbTk42scxZsGU0fRjDfikP+VY+G5jcA0
pD1ebMjKmpPqI4m4Lddb0HakQWyzpqliskwWIkeDKD1sZmMwBKUVzhxUU7vwkr2k
47gxfrmrqq6dswnnhKd7+4B7cryPFVm+3Iuf0ZsHG00dsaJ/al2FI8XPDX3fG4p+
nb5DoHIrl4a9vx1Imoelm9Z2F8CkG40EA7shkghpp2BBtghQ0QdGTv8ck31TCP11
VeDWIfzHkU7w4BRHVJIQeNi9c7qrkg0TWrUmSmIMx1g+xfhOdQKdPgD13B+i4ymQ
Cw3u+fah8mV5RWvLO5zIc7qQOh4bkyU=
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:51:20 2026 by rpki-client