Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c582a8dd-222b-3903-9cce-0e84659b4edf.roa
File:                     c582a8dd-222b-3903-9cce-0e84659b4edf.roa (raw, json)
Hash identifier:          KRYQ3mVX/1a/h35LRWX28B71aqiqZEiszLe8aguRmnQ=
Subject key identifier:   E0:EA:E3:DB:52:B0:73:3F:B3:AA:AE:59:C1:44:25:47:A7:16:1C:09
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B980A21171E7431360D7C3F00
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c582a8dd-222b-3903-9cce-0e84659b4edf.roa
Signing time:             Tue 21 Oct 2025 09:30:59 +0000
ROA not before:           Tue 21 Oct 2025 09:30:59 +0000
ROA not after:            Mon 19 Jan 2026 10:30:59 +0000
asID:                     35039
IP address blocks:        130.214.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:0a:21:17:1e:74:31:36:0d:7c:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Oct 21 09:30:59 2025 GMT
            Not After : Jan 19 10:30:59 2026 GMT
        Subject: CN=3795d1fe-df29-47bf-af13-abd1d1fb7a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:5b:54:2a:1d:aa:fe:bd:13:75:2f:86:53:
                    03:7d:af:93:85:1a:af:ec:e7:4f:57:b7:89:55:8e:
                    1b:54:b2:b3:69:42:ad:c1:3b:03:05:8d:98:b6:33:
                    3e:12:2a:32:92:26:c2:f1:78:8b:27:88:6f:9c:23:
                    45:8b:74:78:7f:0c:d5:36:f1:c7:69:58:59:f3:7b:
                    31:88:2a:4c:68:52:a5:9c:d4:96:de:62:c8:dc:51:
                    3f:9a:85:1f:16:2b:d4:78:b2:18:be:ab:26:12:af:
                    70:c0:20:66:45:fe:32:47:76:82:f0:9f:5d:35:c5:
                    ad:ba:7d:2b:b6:89:4c:b3:8b:a2:05:f4:37:45:20:
                    bf:ec:cb:26:be:d4:45:3f:7a:e3:29:e9:1c:db:70:
                    f8:5c:54:0c:5f:21:59:6b:4e:f7:94:06:32:0e:fd:
                    7c:24:ef:d6:80:4b:a8:6a:69:a5:43:fe:f6:a7:6f:
                    3d:e5:22:46:4e:dc:ff:2a:db:d6:ad:9a:8d:fe:fd:
                    f2:ea:4d:b3:9a:c7:1f:c4:51:b1:a9:95:52:0c:e3:
                    cb:8f:bd:34:b0:3d:69:78:39:0b:d4:d0:38:98:0d:
                    2f:c0:f2:95:0f:fd:9b:18:67:80:4b:20:cc:6c:f6:
                    22:e1:75:d7:be:45:8b:f2:89:ec:66:da:2a:16:cc:
                    74:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EA:E3:DB:52:B0:73:3F:B3:AA:AE:59:C1:44:25:47:A7:16:1C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c582a8dd-222b-3903-9cce-0e84659b4edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d1:b4:6c:60:a8:10:0e:72:3a:18:74:f8:50:f1:de:44:8b:
         ab:08:0e:ca:fa:f2:79:12:dc:d6:92:da:04:0e:73:5b:20:42:
         43:0e:e0:f7:de:69:ba:20:74:58:0b:2e:33:bc:02:67:84:cd:
         eb:24:5b:2e:22:80:ed:ac:3f:6a:4c:d5:94:b8:f3:e9:48:64:
         5d:80:4d:8b:45:0e:18:60:8c:66:25:88:45:42:9b:25:2e:7b:
         42:d9:9c:cc:30:0b:b3:c2:6a:a8:68:d1:95:31:75:98:ef:f3:
         83:54:37:3a:93:68:51:5a:dd:13:99:4b:d7:9b:67:de:af:9b:
         5f:4b:a3:8e:20:f2:12:aa:a1:b0:66:49:0c:0c:4e:21:cf:8e:
         86:91:fa:0b:a2:d5:eb:6c:35:47:b3:24:ec:ce:27:dd:7c:84:
         e4:10:94:30:3c:fb:be:43:3c:3a:65:5d:b8:db:9d:c7:c0:03:
         84:81:c1:45:63:5e:7d:7e:17:8e:84:15:f6:3e:46:5e:15:6d:
         fc:51:89:b6:6e:7b:32:04:0b:d0:f9:c6:66:0d:3c:c1:24:a7:
         f2:a1:94:a4:c5:47:27:f2:44:5a:fc:e7:b3:04:2a:9a:d1:66:
         fa:f0:c0:ee:4a:b0:d2:61:57:dc:9b:29:42:2e:af:cd:99:32:
         98:ef:41:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:05:00 2025 by rpki-client