Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c399f9dd-ce65-3bcf-8584-eb498869fd18.roa
File:                     c399f9dd-ce65-3bcf-8584-eb498869fd18.roa (raw, json)
Hash identifier:          IvO/RlZS634HHLjGfejjuCFHMvdiOhycVE8kavFWfDg=
Subject key identifier:   DA:4C:E0:8D:6C:11:FA:4D:5A:2B:DD:17:8C:40:05:5F:E3:96:0E:5E
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584EDB2C8A16B30033F62763EE60
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c399f9dd-ce65-3bcf-8584-eb498869fd18.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     35039
IP address blocks:        130.214.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:8a:16:b3:00:33:f6:27:63:ee:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=544e122d-e857-486c-a8ba-851224ef0476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e2:be:fa:b5:d2:45:7c:8b:cb:2a:52:81:e3:
                    d1:7f:0b:f5:55:57:28:6a:71:d6:ad:9c:5c:2f:aa:
                    71:9b:80:92:ca:5e:54:57:79:a6:d7:86:f8:63:24:
                    24:ee:9b:84:2f:f4:6a:5a:d2:1e:40:c9:d6:f9:aa:
                    8a:c6:01:75:70:e9:d7:01:58:75:c9:ee:ea:c1:b1:
                    fb:b5:78:73:12:12:bc:a8:79:3e:fe:25:20:9e:28:
                    8f:f0:55:e6:e5:01:42:e1:31:e3:6c:fe:9c:23:2f:
                    25:80:20:2a:95:56:d2:ff:9c:dd:22:41:2d:2f:c7:
                    48:85:da:1f:3f:92:74:0d:64:03:c8:28:b1:81:87:
                    ad:27:20:08:99:cc:8f:d8:5b:4d:33:03:b0:d7:d0:
                    60:24:30:00:26:da:da:c5:f4:bf:56:aa:5d:4e:b7:
                    dd:c1:84:5c:56:bd:27:04:ec:90:74:c2:65:27:14:
                    a9:67:e9:12:c2:3f:6d:84:91:4c:40:3e:25:ef:73:
                    64:ef:63:35:93:d9:be:2e:d4:4d:99:8c:4c:4b:d9:
                    9c:55:e9:99:0d:6f:21:8f:21:7f:2a:d3:76:b8:ef:
                    7e:7d:fe:dc:9c:43:8f:f0:9c:5c:f8:26:dc:a7:e9:
                    9f:08:a9:05:9a:9a:fd:34:10:56:81:30:ab:2f:4a:
                    19:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4C:E0:8D:6C:11:FA:4D:5A:2B:DD:17:8C:40:05:5F:E3:96:0E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c399f9dd-ce65-3bcf-8584-eb498869fd18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:98:a6:2f:9b:11:f8:4d:49:76:34:a5:cc:07:db:d1:59:23:
         83:b6:fd:ef:1e:25:a0:67:6a:73:f9:90:be:d6:cd:1c:33:f0:
         b4:4d:0d:3b:12:7c:87:08:14:6c:37:39:e0:22:37:eb:b9:07:
         72:fb:1e:f9:e6:ea:7b:01:3e:cd:be:4e:65:c3:90:d7:30:94:
         ab:2f:2e:b7:b0:9a:b2:35:ab:dc:5a:7e:a9:8c:5e:da:e2:15:
         3e:16:37:52:30:62:04:e0:54:a7:25:fa:00:b3:ae:57:6e:9b:
         ef:43:83:48:6e:3c:04:3b:89:d4:56:95:64:57:06:cf:37:a7:
         ac:29:cc:fe:80:48:e4:54:0c:44:a6:7c:2b:ab:39:06:0a:34:
         6d:6a:b6:59:fd:d1:36:40:78:a8:30:3f:e2:50:4d:59:68:d3:
         a1:84:b3:0c:6d:c6:a1:d0:02:d0:2c:b1:46:09:50:c8:93:99:
         3f:fc:60:e7:f0:cf:1a:e5:02:8d:d6:86:26:30:0b:7a:2b:88:
         5f:28:31:db:f8:71:a4:15:f0:f6:98:8b:33:ee:fc:5d:b5:5f:
         fc:22:9b:60:f2:1b:92:80:ff:48:8e:b0:5e:a8:36:97:9a:4d:
         c3:3d:32:9f:31:69:e7:c2:4a:db:cd:5d:07:13:bb:53:96:e6:
         de:69:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:44:33 2026 by rpki-client