Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/cdf434ec-10b6-316e-b725-113138fa2c0a.roa
File:                     cdf434ec-10b6-316e-b725-113138fa2c0a.roa (raw, json)
Hash identifier:          oXD5phsy+oCD/H5gqR2uOydmwf4eEBjcr2auc+uC6mI=
Subject key identifier:   84:4E:F3:91:DB:F4:72:27:81:02:46:B2:DF:01:43:40:46:06:75:03
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B980A85C5D231C744CEF7C440
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/cdf434ec-10b6-316e-b725-113138fa2c0a.roa
Signing time:             Tue 21 Oct 2025 09:31:46 +0000
ROA not before:           Tue 21 Oct 2025 09:31:46 +0000
ROA not after:            Mon 19 Jan 2026 10:31:46 +0000
asID:                     35039
IP address blocks:        130.214.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:0a:85:c5:d2:31:c7:44:ce:f7:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Oct 21 09:31:46 2025 GMT
            Not After : Jan 19 10:31:46 2026 GMT
        Subject: CN=88680560-9765-465b-ba02-94c920ed27a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9c:ab:de:cf:8c:51:82:16:8b:c1:6a:98:08:
                    02:b6:2b:e0:f4:55:6d:a8:30:a6:af:59:d1:96:63:
                    89:55:68:b2:79:2f:51:54:5b:40:b9:c5:4b:7b:b6:
                    76:23:f5:95:f3:fe:ec:46:a7:aa:26:10:1b:84:8b:
                    82:22:fa:f6:a4:06:dd:80:99:33:65:06:66:2d:c4:
                    27:f7:10:b5:4c:a6:66:b0:dc:0d:96:75:fe:22:b9:
                    f2:6c:90:67:1a:e9:0c:0d:ce:1f:46:57:9b:14:29:
                    38:87:e6:be:90:56:6b:0e:fc:30:63:8a:c5:3e:22:
                    7e:2b:e1:ff:92:ae:2f:84:94:a8:38:1e:03:32:a7:
                    e2:dc:52:cb:d5:e2:15:4a:29:45:d0:4d:c0:f4:c3:
                    dd:c1:36:be:3c:97:21:ec:da:6f:e8:33:cd:c1:57:
                    9c:3f:c0:41:46:07:e8:fc:98:3f:40:2e:04:b8:0b:
                    6b:d4:f5:5b:54:37:f0:b2:00:25:cb:e3:21:0a:09:
                    e6:af:b0:ae:68:79:4f:3e:ca:55:1f:19:63:b2:76:
                    eb:36:09:a3:46:fa:8b:2d:e7:4e:b5:37:2b:8c:49:
                    fb:b6:fa:6d:0f:20:06:c8:26:0f:ed:47:8d:18:4e:
                    20:43:bc:d6:aa:e3:be:cb:4a:dc:4a:00:fb:02:d8:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4E:F3:91:DB:F4:72:27:81:02:46:B2:DF:01:43:40:46:06:75:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/cdf434ec-10b6-316e-b725-113138fa2c0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5c:0a:ba:e9:0e:13:65:59:fe:52:7f:e5:50:b6:7a:cc:fd:
         ab:1d:54:c5:b2:fc:77:26:cd:30:55:b2:ed:95:c8:d3:b4:fe:
         aa:5f:58:b7:76:5b:1a:49:c5:7f:9c:fa:96:e2:e1:65:96:3e:
         c0:13:97:bc:3e:5e:22:54:50:98:8d:cd:4d:c8:24:8a:7d:59:
         d9:84:cf:5b:af:9b:98:57:a7:2c:37:4b:a1:c3:12:48:6e:48:
         9b:7f:b3:1a:6f:b2:64:b2:4e:f0:ac:89:14:79:94:c1:ce:37:
         85:f4:79:65:07:3b:08:dd:0e:5a:a5:50:00:d9:91:77:26:f3:
         12:bc:9e:d6:2e:cf:f0:a5:f1:4c:4c:78:de:8c:ed:e9:86:1f:
         27:c5:58:f5:e1:dd:2f:7d:fe:70:8b:f6:e1:00:83:fa:7b:7c:
         a3:98:30:8b:9d:d5:bf:44:a3:ba:a7:18:52:43:f6:2f:90:e9:
         bf:62:29:80:e9:bb:53:d4:8d:8b:f3:0b:81:69:4c:05:77:f5:
         ec:95:52:ed:21:5e:43:e6:99:9f:1e:f6:57:a4:37:87:35:9d:
         ec:eb:ab:58:0d:73:0d:d5:8f:49:c4:87:65:53:61:8c:4d:80:
         cf:30:e2:56:b1:fd:3d:b7:57:eb:ce:44:fe:69:3b:9a:a4:fc:
         ef:9b:5e:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCoXF0jHHRM73xEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI1MTAyMTA5MzE0NloXDTI2MDExOTEwMzE0NlowLzEtMCsGA1UEAxMk
ODg2ODA1NjAtOTc2NS00NjViLWJhMDItOTRjOTIwZWQyN2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJyr3s+MUYIWi8FqmAgCtivg9FVtqDCmr1nR
lmOJVWiyeS9RVFtAucVLe7Z2I/WV8/7sRqeqJhAbhIuCIvr2pAbdgJkzZQZmLcQn
9xC1TKZmsNwNlnX+IrnybJBnGukMDc4fRlebFCk4h+a+kFZrDvwwY4rFPiJ+K+H/
kq4vhJSoOB4DMqfi3FLL1eIVSilF0E3A9MPdwTa+PJch7Npv6DPNwVecP8BBRgfo
/Jg/QC4EuAtr1PVbVDfwsgAly+MhCgnmr7CuaHlPPspVHxljsnbrNgmjRvqLLedO
tTcrjEn7tvptDyAGyCYP7UeNGE4gQ7zWquO+y0rcSgD7AtjcvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRO85Hb9HIngQJGst8BQ0BGBnUDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvY2RmNDM0ZWMtMTBiNi0z
MTZlLWI3MjUtMTEzMTM4ZmEyYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgta2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxcCrrpDhNlWf5Sf+VQtnrM/asdVMWy/HcmzTBVsu2VyNO0/qpfWLd2
WxpJxX+c+pbi4WWWPsATl7w+XiJUUJiNzU3IJIp9WdmEz1uvm5hXpyw3S6HDEkhu
SJt/sxpvsmSyTvCsiRR5lMHON4X0eWUHOwjdDlqlUADZkXcm8xK8ntYuz/Cl8UxM
eN6M7emGHyfFWPXh3S99/nCL9uEAg/p7fKOYMIud1b9Eo7qnGFJD9i+Q6b9iKYDp
u1PUjYvzC4FpTAV39eyVUu0hXkPmmZ8e9lekN4c1nezrq1gNcw3Vj0nEh2VTYYxN
gM8w4lax/T23V+vORP5pO5qk/O+bXhc=
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:04:50 2025 by rpki-client