Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dbbd8d62-bace-30a5-8023-8c03bb2d6a8f.roa
File:                     dbbd8d62-bace-30a5-8023-8c03bb2d6a8f.roa (raw, json)
Hash identifier:          vIRfj0ZFALJ/QjRY3GD7dDbCEmHNQ84p4U1fB2t5f9k=
Subject key identifier:   21:F5:AB:82:72:A8:DF:AF:63:1F:3E:9C:73:99:34:51:93:99:1A:EA
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D5884DFD3C57161B4FE188A80
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dbbd8d62-bace-30a5-8023-8c03bb2d6a8f.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     35039
IP address blocks:        130.214.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:df:d3:c5:71:61:b4:fe:18:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=7de05365-ee69-4172-b72a-1b0f27b86078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:75:f5:96:96:fb:74:ef:8d:23:43:04:9c:c9:
                    d2:60:cc:38:73:01:7d:cc:e0:c9:6d:42:66:22:e5:
                    64:12:4a:88:53:d9:bf:02:ec:c0:c5:5e:cf:b6:f4:
                    96:51:a2:15:ce:e3:e3:d9:40:6a:bf:32:b9:0f:33:
                    f0:91:89:df:b0:b7:9b:90:c0:d7:a1:51:5d:5e:13:
                    fe:38:c2:58:86:0b:3f:33:45:d8:10:b7:37:fb:79:
                    28:e1:e7:07:16:a5:04:55:09:fe:22:60:1f:23:6d:
                    6e:bb:5e:f7:d3:de:e5:aa:c1:d2:c3:c8:e0:c2:78:
                    0c:c6:e7:fe:2a:fd:ce:0a:66:05:79:75:92:67:f9:
                    d0:d3:a3:5f:cb:ff:ad:ee:bc:27:f3:f2:15:50:18:
                    54:59:72:1a:38:e7:cb:d1:3e:f4:a5:62:c9:69:9a:
                    36:a4:28:ca:ca:bc:09:3e:e8:58:27:bb:41:64:d5:
                    ef:20:db:1b:49:97:2e:f8:30:e4:85:1f:85:ba:fd:
                    11:a4:2d:4a:fe:80:62:aa:83:ea:4b:15:be:cd:76:
                    ff:04:0b:ab:35:5d:03:0a:af:7b:fc:52:85:dc:50:
                    fa:ec:03:6b:f9:b1:ee:9a:be:9b:dc:3d:af:2b:ae:
                    97:ba:2d:3b:d2:9e:7f:f8:7c:f7:19:7a:a0:74:63:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F5:AB:82:72:A8:DF:AF:63:1F:3E:9C:73:99:34:51:93:99:1A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dbbd8d62-bace-30a5-8023-8c03bb2d6a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:10:01:d8:53:78:f1:02:da:3d:3f:e8:7b:a6:c2:ed:cf:58:
         c5:19:09:a8:f1:88:51:92:6e:be:8b:26:76:bf:4a:ea:72:f5:
         59:64:b7:04:d0:8d:47:89:26:19:df:20:e2:78:f4:a4:21:b4:
         4e:f4:e4:11:a3:48:97:48:af:df:63:4d:0f:c7:45:b2:5a:6a:
         55:6a:3e:72:f6:c0:83:af:f5:28:08:19:48:91:c4:62:9a:0d:
         6f:43:17:d0:cc:c6:f6:f3:9a:e9:df:fb:a5:ee:cf:26:a2:e7:
         45:14:36:9e:78:3d:11:93:71:ae:02:e7:7c:95:9e:83:cb:75:
         ca:6e:0e:9b:04:c4:0d:5e:c6:b7:e5:9a:f6:36:72:fd:c1:e9:
         f9:d9:1e:43:a8:8a:78:bf:e2:b4:4c:f5:ae:7e:6a:13:48:37:
         ce:ab:25:77:a9:bd:11:0e:1f:be:e4:77:95:88:4a:df:80:da:
         b4:9e:f9:2a:bc:c1:6f:f1:45:b4:57:7a:42:98:fb:b7:bc:23:
         73:0d:85:7b:1e:fa:69:1f:b6:73:64:79:d8:73:40:e5:1d:ac:
         6b:64:ba:6d:d5:4c:27:75:10:c2:a2:35:1b:ad:fa:d0:3f:23:
         b7:53:ec:d7:36:fc:c0:ea:9f:0a:99:46:46:1c:04:7f:30:ae:
         19:4f:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:21:21 2026 by rpki-client