Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/fb7aa4a1-08f0-3c97-b349-f983f13c9061.roa
File:                     fb7aa4a1-08f0-3c97-b349-f983f13c9061.roa (raw, json)
Hash identifier:          7Sdc84UNXFVszOXn3b9mK3vdvMV4qsaZvaTMBOWCYWU=
Subject key identifier:   71:F9:8A:4A:F0:0C:62:F1:CB:A9:39:6B:AD:A2:13:BA:AB:AC:A5:49
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D5884E1423DCB375702422A80
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/fb7aa4a1-08f0-3c97-b349-f983f13c9061.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     35039
IP address blocks:        130.214.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:e1:42:3d:cb:37:57:02:42:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=176ac43f-b6a1-4a98-8f34-aa77635542ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ea:37:dd:07:f7:fd:f5:31:39:55:7a:69:3e:
                    45:f2:a7:42:b3:3f:87:e7:24:ee:c0:9c:90:e9:f7:
                    2c:fb:c8:a3:06:e9:7d:d5:f5:9e:3d:af:3b:a9:bb:
                    c8:e0:1e:35:d8:00:eb:23:50:b6:c9:30:29:c2:67:
                    a6:f3:32:82:a5:57:7f:ea:91:44:58:49:74:3f:76:
                    93:80:50:71:cb:b5:91:ba:21:ee:1b:41:35:79:77:
                    57:1d:12:e7:ed:16:36:2b:76:03:58:20:c9:06:8b:
                    74:a7:fc:ba:c2:53:f8:2e:04:17:44:1d:b4:1e:17:
                    10:d7:b5:fe:7f:b5:d6:af:94:8e:23:1b:34:4a:28:
                    53:4d:bb:aa:d6:81:2f:66:d3:cb:1d:46:49:72:6e:
                    21:ae:40:70:00:22:2f:e8:f5:24:32:40:16:dc:d9:
                    fb:8f:ea:25:6a:06:3e:b4:d0:8e:d9:77:28:9d:2d:
                    5c:68:c7:70:ce:0d:bb:f3:30:a4:70:90:d1:5b:4d:
                    a3:af:0a:b7:c8:f0:38:3a:46:34:26:72:76:ca:82:
                    31:1d:23:43:f0:6a:64:d9:a6:28:0a:35:8f:c7:6b:
                    2d:92:d1:08:7d:d4:31:7b:7e:f7:24:45:92:7c:60:
                    d6:2e:33:ff:88:61:c8:9e:95:31:6d:3b:62:2d:da:
                    07:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F9:8A:4A:F0:0C:62:F1:CB:A9:39:6B:AD:A2:13:BA:AB:AC:A5:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/fb7aa4a1-08f0-3c97-b349-f983f13c9061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:20:82:15:09:77:02:14:6a:14:6e:ce:a1:a4:ae:5b:ee:1d:
         d0:f7:d0:66:2b:76:29:80:6e:1b:2c:82:ff:b0:9c:a3:10:39:
         19:a9:24:9b:2e:9d:2b:82:bf:e7:61:74:a1:54:a8:f1:01:0f:
         d6:fa:8c:7c:58:03:e2:14:f5:94:2b:d9:52:2d:7f:45:01:cb:
         c7:b1:cc:df:4d:d8:a8:45:01:6f:f5:26:6a:3f:0c:fa:64:c3:
         08:50:94:c1:95:7a:a4:85:62:63:90:d6:06:af:6f:7b:01:8c:
         ac:10:2c:17:c7:cd:dc:e8:27:fb:49:ea:aa:a5:80:4e:75:32:
         54:47:ff:d9:b0:3a:10:dc:b4:61:5c:68:2d:2c:2b:71:4b:b1:
         16:ce:d5:67:bb:6c:f2:e7:b5:71:6c:d1:0a:14:f9:7b:6e:12:
         bb:e8:7a:f2:86:9f:d2:03:35:38:47:43:37:10:9d:ed:44:1e:
         1d:e7:52:1e:3d:fc:1a:a6:aa:09:1d:07:6b:e8:8a:1a:4a:67:
         a8:12:d8:e8:32:60:60:ba:44:ec:ef:43:f3:47:89:4c:55:b0:
         1f:bc:d9:a7:02:27:31:27:14:a5:30:3d:c1:f5:c2:b2:fa:ad:
         7e:63:dd:64:08:04:78:a1:b2:1e:04:2d:41:dd:10:67:4a:c6:
         62:1d:5d:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOFCPcs3VwJCKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk
MTc2YWM0M2YtYjZhMS00YTk4LThmMzQtYWE3NzYzNTU0MmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eo33Qf3/fUxOVV6aT5F8qdCsz+H5yTuwJyQ
6fcs+8ijBul91fWePa87qbvI4B412ADrI1C2yTApwmem8zKCpVd/6pFEWEl0P3aT
gFBxy7WRuiHuG0E1eXdXHRLn7RY2K3YDWCDJBot0p/y6wlP4LgQXRB20HhcQ17X+
f7XWr5SOIxs0SihTTbuq1oEvZtPLHUZJcm4hrkBwACIv6PUkMkAW3Nn7j+olagY+
tNCO2XconS1caMdwzg278zCkcJDRW02jrwq3yPA4OkY0JnJ2yoIxHSND8Gpk2aYo
CjWPx2stktEIfdQxe373JEWSfGDWLjP/iGHInpUxbTtiLdoHfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHH5ikrwDGLxy6k5a62iE7qrrKVJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZmI3YWE0YTEtMDhmMC0z
Yzk3LWIzNDktZjk4M2YxM2M5MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtb6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQgghUJdwIUahRuzqGkrlvuHdD30GYrdimAbhssgv+wnKMQORmpJJsu
nSuCv+dhdKFUqPEBD9b6jHxYA+IU9ZQr2VItf0UBy8exzN9N2KhFAW/1Jmo/DPpk
wwhQlMGVeqSFYmOQ1gavb3sBjKwQLBfHzdzoJ/tJ6qqlgE51MlRH/9mwOhDctGFc
aC0sK3FLsRbO1We7bPLntXFs0QoU+XtuErvoevKGn9IDNThHQzcQne1EHh3nUh49
/BqmqgkdB2voihpKZ6gS2OgyYGC6ROzvQ/NHiUxVsB+82acCJzEnFKUwPcH1wrL6
rX5j3WQIBHihsh4ELUHdEGdKxmIdXas=
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:24:14 2026 by rpki-client