Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d6665da0-e7cb-33a0-a03d-866f804378f8.roa
File:                     d6665da0-e7cb-33a0-a03d-866f804378f8.roa (raw, json)
Hash identifier:          hYhQZayAJ9Iorx+ncBw1qJGTik9o8ixcCW7ZhV6Zvfs=
Subject key identifier:   0C:96:C4:45:CE:3B:7D:0C:E0:AC:57:79:E9:C9:FC:2F:A9:37:08:AB
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584EDB2C923971A6773C6DB2B460
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d6665da0-e7cb-33a0-a03d-866f804378f8.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     35039
IP address blocks:        130.214.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:92:39:71:a6:77:3c:6d:b2:b4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=5e32ff0b-a77d-4b1f-b1e2-d6ce9a158a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ad:72:ab:ac:10:ac:0f:5c:7c:9d:2b:1a:5a:
                    6f:c0:e5:82:93:a4:da:de:b8:7d:38:7a:7f:76:ed:
                    ec:3e:46:26:c7:92:48:03:4f:c8:89:dc:62:67:10:
                    f2:e3:87:db:8a:71:a7:f3:98:5d:bc:72:48:bf:8f:
                    24:5a:f6:cc:bf:04:84:45:4b:94:fe:98:91:d6:27:
                    a6:14:c5:1c:5b:31:2d:dd:99:1d:43:fb:e2:fc:16:
                    e4:db:ba:5d:83:61:4e:4a:8f:7b:0e:44:46:06:8c:
                    1d:12:e1:47:32:c0:97:35:51:81:57:4f:fb:e2:b5:
                    9a:db:99:b2:39:b7:b9:ca:46:4c:e0:66:cf:ef:41:
                    1c:3c:e6:d2:01:0f:d5:14:4c:51:64:ea:90:da:4b:
                    9a:8e:25:ad:4a:9b:c0:ba:3b:3a:38:cb:c8:ea:1f:
                    e0:36:dd:b4:21:ca:dc:dd:d4:2e:33:1e:fb:14:38:
                    29:84:b0:85:b4:27:95:c6:65:97:06:1d:43:85:6b:
                    9a:9a:7d:e9:f0:cd:e5:1e:80:2f:94:01:a7:81:99:
                    55:08:b9:1e:ea:96:69:0d:41:cd:73:75:95:3d:02:
                    14:1f:10:bb:68:d2:5a:21:a3:07:7c:45:4e:d6:fc:
                    35:06:f4:d1:f1:0a:41:08:71:9d:f2:b7:bb:40:bd:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:96:C4:45:CE:3B:7D:0C:E0:AC:57:79:E9:C9:FC:2F:A9:37:08:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d6665da0-e7cb-33a0-a03d-866f804378f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ad:35:c0:14:7d:fd:80:ef:dd:1b:f4:20:eb:af:36:11:2c:
         2f:9f:76:47:c7:7e:3e:5c:8c:23:7e:f7:2e:a3:8d:57:06:09:
         93:ae:1d:4e:a5:79:6c:01:8e:38:f1:2a:5b:d8:36:93:e4:17:
         9c:8d:23:fa:10:bb:19:23:1f:14:35:22:64:25:d4:83:6a:7a:
         d8:a0:0c:d1:8f:76:53:6c:ba:c1:a2:5d:1f:ee:47:61:86:7c:
         31:68:45:f0:79:85:e0:80:3b:67:d6:62:e9:06:74:48:32:c5:
         33:41:14:82:ef:1d:ec:60:8a:c2:0b:3a:25:ba:31:a5:6d:1e:
         d3:b2:5c:c5:82:fa:04:80:ca:2f:15:73:2e:73:b5:26:35:b8:
         db:fb:a9:15:49:2e:33:89:3e:b9:c8:82:90:ca:40:35:d1:92:
         2c:64:99:42:78:e1:2c:f4:8d:74:bc:f1:bb:41:fb:ce:9c:93:
         1e:d4:3a:d7:3e:ae:17:10:87:27:43:ef:a5:fa:93:dc:c9:42:
         46:bf:57:90:01:c2:54:43:b8:19:f4:32:33:f4:42:d7:a5:28:
         13:ef:b7:c2:f8:d3:69:30:98:2e:02:88:f9:c0:e0:6d:7c:a1:
         0f:96:26:08:99:20:af:48:52:f4:90:cc:15:c0:65:e8:c7:d8:
         58:bb:4c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:45:25 2026 by rpki-client