Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d4220f67-26ad-3349-88e8-6b0e0da83a86.roa
File:                     d4220f67-26ad-3349-88e8-6b0e0da83a86.roa (raw, json)
Hash identifier:          2K67+QGNJvpIn9W8dIUeMHA+SKk6Y56TVphStgQKTXA=
Subject key identifier:   72:EF:AB:F1:35:C6:49:3C:AB:A8:CA:28:80:98:1C:06:BE:01:C9:33
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584E38C9BB6F2A14A2E9D6B22200
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d4220f67-26ad-3349-88e8-6b0e0da83a86.roa
Signing time:             Fri 19 Jun 2026 09:00:12 +0000
ROA not before:           Fri 19 Jun 2026 09:00:12 +0000
ROA not after:            Thu 17 Sep 2026 09:00:12 +0000
asID:                     35039
IP address blocks:        130.214.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:c9:bb:6f:2a:14:a2:e9:d6:b2:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jun 19 09:00:12 2026 GMT
            Not After : Sep 17 09:00:12 2026 GMT
        Subject: CN=057c4688-b509-4f08-b411-03a601a172b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:37:80:39:13:84:18:7a:ac:1a:b4:db:93:
                    80:55:9f:12:3c:31:17:3a:13:ce:d5:13:e9:45:f1:
                    81:b5:bb:71:80:d2:3e:6d:ff:ff:b4:46:76:55:a2:
                    d6:f7:36:46:ba:b0:d1:66:c8:04:62:81:97:e0:d0:
                    53:bb:d6:36:bf:82:7a:ea:2a:78:ee:18:2b:82:f3:
                    77:dc:b2:6a:9b:74:22:07:4d:3e:5b:70:f3:16:83:
                    47:12:87:4e:12:95:af:81:58:a9:fb:d0:47:84:94:
                    93:b3:98:6e:9d:07:67:32:ac:4b:db:17:f6:3d:46:
                    c9:dd:eb:95:f4:76:3d:e6:5c:a1:9a:a1:a0:f3:3f:
                    46:69:09:ee:92:98:ce:47:28:4b:ed:5e:32:6e:2f:
                    ea:d7:c4:aa:78:6a:b3:d6:2b:53:a1:9d:24:d0:e7:
                    77:58:f3:e1:9e:a7:d1:4b:d4:b7:b3:a1:eb:6b:70:
                    2d:bf:fb:fd:14:b4:fd:77:c5:07:92:32:f9:67:5d:
                    37:df:93:bc:75:f5:d3:b5:43:fc:3d:fa:ea:64:48:
                    33:7d:3f:d6:5f:03:56:88:e6:24:bb:08:89:10:8c:
                    93:a9:e7:b0:b1:f9:1e:12:5e:ae:c8:18:c0:f0:29:
                    af:3b:9c:85:71:e8:20:f1:2e:f4:2e:d0:e6:1a:c7:
                    c6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EF:AB:F1:35:C6:49:3C:AB:A8:CA:28:80:98:1C:06:BE:01:C9:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d4220f67-26ad-3349-88e8-6b0e0da83a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:4e:28:79:96:a4:5a:64:5e:9b:94:83:41:fb:55:4d:96:
         30:f2:c8:35:78:eb:1f:35:7d:a3:8d:96:1c:d2:bc:b0:d2:75:
         67:44:ad:84:36:cb:1e:01:a1:bb:3e:79:ca:f3:cb:2a:86:e9:
         d9:89:33:f5:b1:9a:e5:66:54:9d:2e:bc:38:d1:cd:b8:dd:9e:
         37:49:37:25:25:37:f3:d8:f8:5d:5c:62:a1:62:ae:f0:24:56:
         28:ab:a7:95:91:b4:28:12:4f:af:dc:49:1d:f3:f4:86:d2:7f:
         16:fa:e1:31:85:f5:ca:95:48:6b:95:4c:21:be:09:62:95:06:
         81:45:a1:d2:e0:e3:8a:94:b5:b2:ed:10:7c:36:58:06:42:f0:
         36:93:e3:76:60:45:fa:d1:27:66:87:36:16:97:73:f5:af:66:
         c4:20:52:4c:ff:44:bb:5b:ff:98:fb:a0:2e:a9:35:fc:2a:70:
         66:6a:26:32:c7:64:3d:d3:72:a3:8c:67:c6:7f:1c:42:da:4b:
         ce:6b:60:0f:5e:18:80:4e:6f:a3:5d:d3:c8:d4:c4:04:47:e2:
         e6:26:41:b5:16:13:2a:ec:e0:2f:c0:92:c2:97:6d:ed:95:7c:
         df:56:8d:47:b9:b6:50:1b:fe:67:90:b0:6d:cf:5c:13:82:4a:
         0c:77:53:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:52:23 2026 by rpki-client