Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db505517-ff1a-3d94-985f-ec1062654978.roa
File:                     db505517-ff1a-3d94-985f-ec1062654978.roa (raw, json)
Hash identifier:          zUyEuubmRKmnQNsGNxEvl5Pqjo/qFp3r3UBLBzrFCks=
Subject key identifier:   C2:52:0A:03:56:5F:DE:7A:08:C3:68:0D:A5:9C:7B:86:80:97:A2:AD
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D5884E229BAB871795BBF2C00
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db505517-ff1a-3d94-985f-ec1062654978.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     35039
IP address blocks:        130.214.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:e2:29:ba:b8:71:79:5b:bf:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=ad6c904a-db56-46f7-a5bb-9dff8f17a66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:42:4a:db:0f:bf:4b:bc:41:c3:02:5b:2d:5e:
                    04:49:3d:85:9e:2e:cd:1c:bf:bd:5c:00:1e:ba:f8:
                    5c:5a:6e:b1:df:a0:3b:ee:69:ea:f5:37:55:b0:4a:
                    7d:aa:2e:a6:39:f6:33:96:49:5f:c6:aa:84:16:23:
                    af:cc:3e:24:59:2e:2c:55:7a:56:02:c6:d6:3a:f1:
                    7e:98:17:e2:4c:b5:b8:b1:90:c8:73:5a:8e:b3:d5:
                    6b:a9:8d:ee:de:b8:a0:3d:bc:07:7f:a6:f3:9a:ee:
                    cf:8b:62:a8:43:fc:8e:66:ba:b6:90:c5:a8:17:1e:
                    bd:f8:38:59:ed:c9:7a:47:46:e9:c7:6f:f5:da:d9:
                    c2:fd:a9:29:04:fd:8e:fa:6c:19:b4:86:b9:c8:da:
                    c6:a7:11:de:42:5e:e2:6e:9d:0c:7f:dd:d3:9a:b8:
                    41:a6:68:e4:63:0e:b3:ee:f3:6b:05:f4:5d:41:01:
                    c1:5d:34:53:32:37:24:00:1a:ba:a9:70:03:d2:f9:
                    b3:f8:37:0e:96:46:ed:a5:78:b8:82:f5:33:de:83:
                    af:eb:46:ce:5e:49:80:16:ab:5f:1e:9e:3f:df:bc:
                    e2:e1:bf:c1:bd:b9:73:76:6d:c8:05:e0:fb:d0:66:
                    d2:bc:b0:cd:b8:ce:c1:6d:52:4e:05:77:45:4b:4b:
                    b3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:52:0A:03:56:5F:DE:7A:08:C3:68:0D:A5:9C:7B:86:80:97:A2:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db505517-ff1a-3d94-985f-ec1062654978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:63:61:1b:04:ba:43:a2:1d:cc:a6:b4:d6:49:06:e4:cb:b6:
         16:3a:46:1d:13:d5:92:e5:56:64:3b:65:e6:ae:5f:13:2d:43:
         7b:90:b8:41:1b:8e:27:14:9f:5e:f3:cf:74:41:8f:41:32:29:
         50:39:7d:69:a1:98:7a:63:e1:ca:b5:79:28:5b:da:43:5d:bb:
         b0:ee:71:b8:87:d2:c4:e4:9e:f3:b3:e2:d1:6c:ec:cb:90:83:
         e6:b1:32:60:9e:11:a0:3f:fa:ec:6c:37:2f:ce:34:91:55:10:
         6c:5f:bd:9d:8f:23:55:e1:fe:2b:a9:64:49:6c:06:85:28:5d:
         ca:c5:3b:aa:56:97:64:bc:87:87:b2:fa:37:ce:a5:fb:e8:11:
         92:86:b7:6b:32:ae:99:90:ea:f8:43:b2:16:c8:30:99:d6:c1:
         09:e2:f0:c2:e9:c4:f4:8b:d3:84:75:b6:21:2e:26:49:31:47:
         e0:67:3a:e3:af:54:16:67:88:12:fd:5f:d5:48:29:b2:5c:f7:
         e8:88:b7:2d:de:93:bf:b4:4e:26:4c:2d:06:2d:84:19:16:0e:
         b9:c9:08:ad:16:0e:dc:84:06:27:b9:cb:a4:3b:8b:29:c9:de:
         77:0b:e0:3e:9e:b0:be:e2:04:06:ca:97:c9:c7:4e:1d:ae:bb:
         50:b0:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:24:15 2026 by rpki-client