Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b16530d7-85c6-38b7-bdc7-25b983b0d580.roa
File:                     b16530d7-85c6-38b7-bdc7-25b983b0d580.roa (raw, json)
Hash identifier:          nh2ZHvm7NcHvoBZmp7utq8yFuJEf5butFHgBFo/cT4k=
Subject key identifier:   C0:D7:0C:AD:89:0C:29:F8:26:AF:46:0E:7B:66:EE:CD:CB:E4:C2:86
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584EDB2C8FD4564C8735DF002FE0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b16530d7-85c6-38b7-bdc7-25b983b0d580.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     35039
IP address blocks:        130.214.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:8f:d4:56:4c:87:35:df:00:2f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=b4ae954c-1e29-4cd5-aef6-b79d38631688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b0:8f:12:b9:4e:53:45:e4:62:7e:ed:13:47:
                    cb:c3:da:25:34:7d:b7:33:0c:5d:0c:ed:bb:97:4d:
                    ff:ea:79:25:e3:ed:f8:89:6b:73:d3:83:29:f7:fd:
                    4a:35:06:fa:f8:88:78:88:6f:de:8f:ec:f2:4f:64:
                    8e:42:91:d3:53:cf:ec:77:27:b3:14:c1:7e:ff:d8:
                    bc:8a:6b:02:c7:ad:16:7c:4d:70:d3:1a:f5:e6:85:
                    ed:0f:ce:e0:58:53:58:64:9d:98:97:80:a0:79:0c:
                    26:8b:91:e0:a1:01:5b:d1:31:82:4b:4f:27:15:6e:
                    d8:5b:72:21:e8:5b:ff:1b:bb:78:e9:05:b9:52:40:
                    4a:7f:91:32:98:4a:07:f3:b1:d1:fd:45:5a:e1:a8:
                    77:55:b3:d3:b0:ec:ea:4f:be:0e:4e:8f:72:11:c9:
                    d1:b6:67:47:bb:c2:c0:b4:dc:4e:b2:b3:dc:06:2a:
                    92:fd:64:fa:b6:ea:29:25:0a:82:80:e4:6f:9d:29:
                    18:93:c5:88:80:f9:bc:52:d3:65:a9:59:3f:b4:9c:
                    f0:f4:01:63:b8:2b:41:41:95:39:d2:da:44:cd:ae:
                    c1:cf:a6:0b:a7:36:ea:3f:7e:75:7f:42:88:14:1b:
                    88:96:51:d4:e6:44:9e:8b:60:67:d2:7b:d8:22:5d:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D7:0C:AD:89:0C:29:F8:26:AF:46:0E:7B:66:EE:CD:CB:E4:C2:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b16530d7-85c6-38b7-bdc7-25b983b0d580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:0c:44:e8:29:ce:48:4b:b0:df:ab:98:b6:11:44:b0:ac:07:
         a8:47:3c:23:75:b9:02:2b:f4:51:18:36:74:9a:8f:82:2e:0a:
         b6:2d:08:7f:10:9b:95:ba:c7:ec:9e:de:06:64:07:4e:fd:44:
         53:1a:07:a1:00:9b:7f:fd:f9:4f:75:3c:18:3f:8a:11:c8:64:
         0d:08:ed:98:b6:9e:e4:7b:ba:a1:9d:4a:d0:b5:f8:18:f8:30:
         83:10:25:aa:f1:a7:b3:0c:10:f4:50:05:4b:50:76:b5:6c:8f:
         e9:de:d3:dd:f1:44:29:28:e6:ff:0e:03:c3:29:4b:46:bb:ec:
         64:ba:2b:15:57:cc:8f:0d:0f:a3:59:97:16:ae:7d:a1:64:09:
         c4:f5:68:4f:f6:6a:3c:94:83:a7:c2:55:af:80:46:19:f6:33:
         fd:5b:bc:41:67:a3:15:e8:39:6f:24:ad:78:66:89:11:0f:d4:
         ee:49:e5:73:8d:bd:4f:8c:57:72:4e:af:6b:d3:ef:8a:92:09:
         4a:f0:f0:f5:19:53:58:06:13:7f:c5:1e:43:12:4c:aa:40:b2:
         85:e6:0d:0a:4b:74:7d:eb:4c:d5:c4:6d:f3:13:f4:f7:35:3a:
         fb:b9:50:22:41:98:61:57:e9:51:e5:78:85:6a:94:e9:13:1d:
         02:ea:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 03:37:55 2026 by rpki-client