Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b6852be6-b816-3c7d-8609-a9081e875696.roa
File:                     b6852be6-b816-3c7d-8609-a9081e875696.roa (raw, json)
Hash identifier:          mQT3hl5USHgfd2c2DmAOPiWI/hLRinPsBafGZeNcS/M=
Subject key identifier:   7D:58:8F:54:14:E7:DF:4B:D6:5F:BC:61:1F:89:17:91:7E:07:C7:58
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584E38C9C483AA5CEEBA93BF9200
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b6852be6-b816-3c7d-8609-a9081e875696.roa
Signing time:             Fri 19 Jun 2026 09:00:12 +0000
ROA not before:           Fri 19 Jun 2026 09:00:12 +0000
ROA not after:            Thu 17 Sep 2026 09:00:12 +0000
asID:                     35039
IP address blocks:        130.214.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:c9:c4:83:aa:5c:ee:ba:93:bf:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jun 19 09:00:12 2026 GMT
            Not After : Sep 17 09:00:12 2026 GMT
        Subject: CN=35d7ce71-1834-4129-96a0-d528a8ac9aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:56:20:fa:d8:5b:5a:5f:3a:a3:3c:58:ed:
                    f8:59:0b:64:c1:9d:4d:36:50:fd:23:82:43:7c:ef:
                    4a:a9:a6:a2:16:60:7b:7a:cd:db:de:22:80:75:41:
                    6d:e9:b6:7c:f5:f5:d1:3d:7c:84:61:f8:00:43:68:
                    59:77:2a:a7:96:5b:ff:c3:ef:43:08:b8:9e:9d:cc:
                    c5:8a:0d:37:32:c9:df:e3:9f:24:ef:70:5f:23:3b:
                    7a:f8:28:1a:44:f4:16:70:46:5c:67:04:19:9e:d8:
                    e7:89:ad:40:11:c7:bf:bc:4a:b5:22:57:d9:c8:9e:
                    ad:a0:e4:0f:a9:26:2e:9b:16:81:23:08:52:af:b3:
                    3b:e6:32:14:61:b5:32:2e:f2:0a:25:34:fe:24:b2:
                    21:8b:4f:b3:91:bb:b6:e7:f9:bf:e0:55:3c:e7:01:
                    31:2c:12:0b:a9:fa:f6:f9:f0:9e:80:40:63:5f:a1:
                    ee:23:72:c3:f4:c5:b8:4c:c1:d5:d8:47:cb:07:49:
                    f3:b2:a0:58:83:66:18:31:50:fc:9a:01:97:15:63:
                    59:80:ba:95:f1:5d:33:b8:0d:5c:a4:0c:bc:b6:f9:
                    14:9b:16:ae:bc:8a:06:0f:ea:23:e8:9e:49:e5:44:
                    21:d2:e8:df:43:24:eb:b2:46:c9:7b:d1:c3:d5:0d:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:58:8F:54:14:E7:DF:4B:D6:5F:BC:61:1F:89:17:91:7E:07:C7:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b6852be6-b816-3c7d-8609-a9081e875696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:59:61:c0:77:b8:2a:6f:2b:ec:f7:5d:42:eb:47:4e:80:a0:
         18:7b:67:09:11:01:c4:15:4c:bc:fb:8e:ae:9d:69:68:3b:41:
         73:e6:e0:78:b5:fb:7b:52:58:cd:0c:02:7e:9d:65:ba:c8:5e:
         ec:48:f9:45:6c:7e:16:c1:66:85:f1:19:34:1f:86:6b:be:e2:
         49:3f:f9:c4:bf:f5:b7:fa:51:c2:11:df:ca:6a:38:e7:44:f6:
         4d:0b:7f:5d:4e:c5:7d:f8:65:9f:40:9f:82:78:e4:d5:7d:36:
         e7:4f:c0:c4:20:92:14:00:ee:99:8f:d1:22:f2:ba:00:39:46:
         21:fd:9c:71:6e:e3:f0:2f:e6:e8:8a:a1:40:eb:c7:b0:f7:4a:
         92:df:72:6b:4d:13:15:53:0f:32:97:0e:fd:dd:1e:bb:8e:4c:
         3f:af:2e:7c:52:d2:be:e4:2c:7d:9f:b6:c2:d8:2c:aa:d2:97:
         2f:a4:a5:b0:8d:b1:f5:16:d6:bf:26:82:cf:41:d2:1d:bd:46:
         1f:ac:83:9c:6d:86:42:9e:3b:fa:81:f9:7b:93:67:0f:6b:98:
         47:cd:63:cb:38:29:5d:87:f7:f0:30:89:42:9e:13:a3:e7:7b:
         ed:3f:50:c2:43:b1:36:19:fb:c7:7d:f5:52:5a:bc:bd:27:a4:
         20:83:4f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:52:34 2026 by rpki-client