Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d4220f67-26ad-3349-88e8-6b0e0da83a86.roa
File:                     d4220f67-26ad-3349-88e8-6b0e0da83a86.roa (raw, json)
Hash identifier:          9Q7EwGD/MWIUQStzYtclqNe92KtKzbm4f8t6fVXm1tE=
Subject key identifier:   08:ED:60:98:FA:B5:3D:0F:43:4F:15:31:E9:92:AA:E7:AD:A3:31:9D
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B980AA5C0ABB3E6B79840A100
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d4220f67-26ad-3349-88e8-6b0e0da83a86.roa
Signing time:             Tue 21 Oct 2025 09:32:01 +0000
ROA not before:           Tue 21 Oct 2025 09:32:01 +0000
ROA not after:            Mon 19 Jan 2026 10:32:01 +0000
asID:                     35039
IP address blocks:        130.214.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:0a:a5:c0:ab:b3:e6:b7:98:40:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Oct 21 09:32:01 2025 GMT
            Not After : Jan 19 10:32:01 2026 GMT
        Subject: CN=2466c093-51c0-47a8-892c-7db81a57aa70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:39:9e:61:65:9f:55:75:b1:f2:9c:0a:b0:60:
                    bd:73:c2:4f:6d:b0:25:1f:50:78:bc:7f:34:95:d3:
                    7c:68:c2:b1:f3:83:f1:64:0b:7d:65:e1:b7:f8:9f:
                    c7:28:43:7c:4b:81:d6:d7:50:67:a9:5a:3b:65:9e:
                    5a:32:8a:d0:76:6d:32:39:dd:88:1d:52:95:18:cf:
                    e6:23:46:fb:fb:53:1f:c8:8a:d8:be:31:04:db:66:
                    02:6f:bc:e1:5a:bf:11:7b:d3:3e:8b:5b:bd:33:47:
                    4c:a2:ea:e5:93:4d:a9:1c:ca:ae:9f:8e:24:e2:31:
                    60:23:e6:6f:fc:a6:aa:4a:28:00:9d:6a:6f:ed:7c:
                    f7:89:a0:9f:62:b0:e6:3b:4e:fc:bb:93:b9:3a:a3:
                    18:24:b5:0c:d7:51:df:12:03:6f:bb:e5:01:51:c3:
                    47:42:4c:c2:fc:30:17:25:a5:8c:fd:fb:cf:b6:57:
                    5c:12:f5:4a:5d:b6:bf:b6:ac:3c:ff:88:67:7d:88:
                    d3:1f:9a:af:24:b1:3d:a6:86:03:a2:39:14:ab:37:
                    2c:18:b5:2a:a2:6f:b1:e9:67:51:fd:87:95:84:67:
                    a7:32:e8:c6:48:1e:e7:61:54:e7:1e:1f:44:85:76:
                    82:ab:86:3a:65:d1:27:34:86:3a:09:dc:00:9a:40:
                    9b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:ED:60:98:FA:B5:3D:0F:43:4F:15:31:E9:92:AA:E7:AD:A3:31:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d4220f67-26ad-3349-88e8-6b0e0da83a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fd:9b:81:c4:44:91:17:02:01:78:20:58:9d:dc:e9:1d:b2:
         5b:c1:f1:21:a7:24:04:48:44:b7:05:7d:22:a7:c4:e7:e3:11:
         bd:3c:56:5c:f9:ec:fc:7b:38:b8:e9:89:ca:00:13:6b:2b:78:
         8c:d5:67:94:c9:4e:d9:0f:2c:e5:f8:43:22:a6:1b:8e:b7:e1:
         06:32:11:12:29:bc:b2:f9:64:ca:04:39:d0:7d:9b:35:8b:eb:
         43:35:d8:9f:54:77:45:55:ef:63:fc:18:27:6e:30:5f:25:cf:
         f4:67:df:9b:fc:82:3d:6e:5b:95:b3:44:4d:c9:82:c0:2e:43:
         3c:68:b0:d2:a6:27:b5:19:05:5d:fa:79:40:6f:09:14:81:30:
         dd:95:d6:c2:56:30:55:30:37:d5:e0:75:e3:f6:0a:e8:10:40:
         e9:fe:9e:7b:39:42:80:9e:ef:40:42:ab:62:2c:b2:11:d8:1f:
         5b:49:1b:f0:01:0f:fd:e7:22:08:e9:78:c3:37:7a:b8:16:8c:
         6b:11:b1:ac:6b:9f:d5:e2:4a:aa:14:ae:7e:1c:b7:9f:a2:27:
         ca:b3:24:7d:e9:42:15:25:bb:20:16:06:9f:85:68:c5:9f:7d:
         17:31:ba:12:13:04:c4:8c:83:97:36:1b:f2:07:45:6e:b8:96:
         f7:eb:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:04:56 2025 by rpki-client