Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ccb5cd3c-0e39-3366-aaec-9b1129d06a51.roa
File:                     ccb5cd3c-0e39-3366-aaec-9b1129d06a51.roa (raw, json)
Hash identifier:          VrF8k+bQZKhBoThaiwtgaMttk0IwG09vhV/IZZpw+z4=
Subject key identifier:   94:87:FA:9A:42:93:E9:C3:91:04:56:98:79:43:AA:E1:69:E8:72:BA
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584E38C9BA4EB909A6FF693E7ED0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ccb5cd3c-0e39-3366-aaec-9b1129d06a51.roa
Signing time:             Fri 19 Jun 2026 09:00:12 +0000
ROA not before:           Fri 19 Jun 2026 09:00:12 +0000
ROA not after:            Thu 17 Sep 2026 09:00:12 +0000
asID:                     35039
IP address blocks:        130.214.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:c9:ba:4e:b9:09:a6:ff:69:3e:7e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jun 19 09:00:12 2026 GMT
            Not After : Sep 17 09:00:12 2026 GMT
        Subject: CN=5320bfad-59f8-4dc2-8d79-107b8fbbc6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:c1:cc:55:0b:df:7c:76:49:b0:f3:e9:f9:
                    1d:f0:6c:cd:55:70:61:15:a1:08:1e:54:92:da:b4:
                    f8:fc:3c:bb:f2:d5:1e:7f:6d:33:73:fd:17:e5:e8:
                    e0:c5:e3:63:b2:6c:2f:c7:d2:3a:bc:ad:53:12:e5:
                    94:05:76:8f:98:bc:76:cf:15:fd:45:03:47:e9:18:
                    e8:80:08:4d:23:0d:05:0d:40:94:c3:02:05:1e:1a:
                    14:47:cd:c8:e5:4f:c5:c0:af:b3:67:27:e0:b5:af:
                    fe:2e:ea:8f:2e:9c:a0:0f:03:26:b1:52:77:2f:d7:
                    66:fe:a4:89:48:34:0e:0b:b3:26:1f:42:59:f1:cb:
                    d4:e9:84:c2:a1:b4:fb:80:b7:77:77:b7:d1:a2:56:
                    d3:8b:90:e4:54:9f:c9:98:a4:0b:54:7e:50:43:4f:
                    21:55:6e:9b:cb:aa:1b:6a:cf:b4:24:94:3f:98:ca:
                    1c:d4:9a:c4:0d:0d:90:41:73:e3:6d:58:e4:27:c7:
                    86:df:2d:21:82:f3:06:f4:c9:95:2d:2a:de:56:45:
                    82:8d:89:25:b0:8a:d3:b4:72:01:88:51:01:b2:19:
                    e8:f8:a0:48:d0:85:30:62:a6:bd:5a:25:64:89:08:
                    d5:ad:36:e7:63:56:be:d0:3c:78:1b:52:91:9f:ee:
                    c8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:87:FA:9A:42:93:E9:C3:91:04:56:98:79:43:AA:E1:69:E8:72:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ccb5cd3c-0e39-3366-aaec-9b1129d06a51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:de:13:c3:af:38:4c:c9:2d:06:1f:2e:66:d9:99:fe:ad:34:
         13:aa:02:ad:f4:97:62:6c:1b:3e:14:6f:5f:d4:50:cf:4a:f2:
         3e:f6:18:1f:5c:ad:d1:2e:36:7d:fd:a4:0b:61:4b:ce:d7:d3:
         91:28:35:92:57:09:ce:79:a1:b3:6f:0b:30:44:95:ac:15:aa:
         b6:c4:5b:38:92:a4:a1:69:a4:1c:75:24:d6:4e:e9:a3:37:96:
         fc:46:ec:67:5a:01:03:01:63:21:f3:03:8e:12:e5:94:f1:06:
         de:9d:08:36:a9:37:48:a1:91:50:62:b9:69:29:f6:64:4f:b1:
         f4:2b:bb:57:87:17:8c:b1:24:8f:57:55:85:2e:a3:8e:f6:88:
         06:0d:ba:b7:2f:02:c7:28:eb:24:87:cc:b5:c3:8c:8e:81:19:
         99:68:c3:72:65:02:48:76:00:9e:51:1b:04:07:e7:60:54:3e:
         3e:e3:bb:56:e7:ad:e2:29:cd:72:1d:8d:ed:ba:e1:8e:13:53:
         67:1b:de:df:7c:59:4b:fa:1e:a5:37:1b:ff:62:ac:83:c6:b3:
         86:17:7f:f3:c2:95:21:1c:fc:6b:fc:85:fd:91:cf:d7:3a:c5:
         8c:e7:10:23:9c:81:3f:24:c7:a4:f4:02:a1:8e:16:d3:32:b1:
         47:49:42:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:52:10 2026 by rpki-client