Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/fb897adc-564b-3bc0-938c-2d6e1ad5cbbe.roa
File:                     fb897adc-564b-3bc0-938c-2d6e1ad5cbbe.roa (raw, json)
Hash identifier:          AGSym0WcQPdIw0m0mYZ3aj9qka/x8wGFz98PmIO2AZs=
Subject key identifier:   3A:C1:CB:71:06:9E:A4:01:53:40:03:40:CC:35:D9:3B:96:97:F6:2F
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B980A40BCC88D6E5EA699F560
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/fb897adc-564b-3bc0-938c-2d6e1ad5cbbe.roa
Signing time:             Tue 21 Oct 2025 09:31:14 +0000
ROA not before:           Tue 21 Oct 2025 09:31:14 +0000
ROA not after:            Mon 19 Jan 2026 10:31:14 +0000
asID:                     35039
IP address blocks:        130.214.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:0a:40:bc:c8:8d:6e:5e:a6:99:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Oct 21 09:31:14 2025 GMT
            Not After : Jan 19 10:31:14 2026 GMT
        Subject: CN=5d42434a-5732-404e-9427-6519480a73c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:94:1e:30:00:de:f2:51:4a:ee:65:ed:e4:68:
                    d0:cf:63:f1:b3:3f:10:f0:4d:92:f9:de:ea:14:8a:
                    77:0e:fc:7f:ee:ca:93:0e:db:81:0b:88:db:bc:44:
                    e6:42:ee:b5:18:0a:11:e9:fc:f8:aa:89:3a:e4:f3:
                    8f:bb:df:00:17:6b:bc:df:0f:ac:c7:57:67:94:57:
                    46:dc:8e:e5:9e:d0:94:e8:db:a9:2b:14:42:02:d8:
                    cd:7f:14:ff:f7:27:ff:79:d8:41:af:27:67:2d:f1:
                    66:e4:18:e4:f5:e1:70:52:13:14:b6:9c:f3:88:3e:
                    72:d5:8d:ac:58:99:64:2d:ab:41:fd:b3:2c:79:0e:
                    a0:70:78:63:1b:68:58:4e:cd:52:6c:f3:6f:4a:9c:
                    53:f7:9f:04:18:1e:3b:19:e4:09:f6:88:6f:a2:15:
                    8d:0e:e2:72:9f:58:34:7b:64:e4:e9:2f:a0:c6:9b:
                    a4:77:52:da:a9:25:ba:c2:72:d8:d9:6c:05:0f:ed:
                    63:94:2a:43:48:04:05:b1:a4:ee:29:4d:49:4a:84:
                    75:ce:bd:f4:d1:ee:c6:cb:2a:7b:eb:bd:fd:ed:70:
                    bc:fb:b3:74:4e:96:51:0d:c3:cc:73:94:c8:49:d8:
                    a9:ae:dc:af:2f:1c:de:21:7e:fc:e7:df:15:42:e3:
                    99:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C1:CB:71:06:9E:A4:01:53:40:03:40:CC:35:D9:3B:96:97:F6:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/fb897adc-564b-3bc0-938c-2d6e1ad5cbbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b6:ab:70:f8:95:8b:13:27:25:0e:6f:52:fd:44:dc:d9:38:
         5d:bf:87:2e:1c:0a:08:bf:27:6f:18:36:82:04:9a:10:94:cd:
         1a:3b:e9:b6:9e:e3:f5:3e:bd:27:72:5a:c4:99:d2:53:bb:88:
         08:f1:66:f6:11:3b:1a:7d:10:65:72:62:4c:cc:e9:fd:a1:c4:
         13:67:7e:d3:1b:b3:ab:2d:9c:b1:11:9d:a4:e9:fe:46:57:af:
         70:b9:9c:cb:fc:ee:3f:58:1c:54:29:fb:c2:a9:7f:97:75:9f:
         95:c0:ae:c3:bd:0b:c4:42:97:e7:c1:53:84:ec:49:e6:45:78:
         9d:47:f7:c1:e4:d1:c5:bc:8b:5f:f6:4f:56:e2:93:9b:dd:42:
         5e:34:4b:b8:ee:12:8e:91:c4:af:b2:8c:f2:f4:bc:2e:c7:ec:
         93:e4:91:1e:99:d1:19:6f:cd:d6:40:23:3a:5f:1c:18:03:40:
         fd:46:b0:72:d1:ee:19:04:d5:d3:61:0f:53:62:92:c2:d1:64:
         00:b6:46:c9:33:07:a9:f7:64:60:1d:71:43:c7:32:81:20:4b:
         45:65:f2:bc:b7:bf:c1:7b:89:ce:32:f7:10:62:13:27:a5:f8:
         cd:34:76:75:5c:af:8b:ae:f9:3b:da:fa:b3:db:f8:49:78:10:
         2d:06:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:05:01 2025 by rpki-client