Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/b1021e8e-0005-38a9-8e27-2080c1cdaabf.roa
File:                     b1021e8e-0005-38a9-8e27-2080c1cdaabf.roa (raw, json)
Hash identifier:          LShXT10JeFPny+c9vKO4UIl+x8HjTyR+Xk6aq4aoNfo=
Subject key identifier:   F1:DB:D0:A5:E6:E3:6D:A7:1E:95:79:52:3E:7D:DA:AC:29:34:84:E8
Certificate issuer:       /CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
Certificate serial:       010D0C9F4328584E5E79F2D5294BE9F5CDC76480
Authority key identifier: 31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/b1021e8e-0005-38a9-8e27-2080c1cdaabf.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     213607
IP address blocks:        130.12.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:f2:d5:29:4b:e9:f5:cd:c7:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=a5222f00-e33a-489c-b874-97cc927791bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:e0:23:13:92:92:17:a4:a5:f0:61:0b:8d:
                    9a:1f:33:2b:f5:fd:8f:53:e6:d3:ff:a7:24:de:af:
                    2e:f9:3c:15:d0:b3:b8:61:98:af:e2:1c:a3:e2:72:
                    96:8a:0d:87:35:a1:0c:d7:6b:0a:39:a2:84:fe:2b:
                    99:15:db:c5:98:03:0e:b2:ea:84:f8:92:2d:45:9d:
                    c0:57:21:89:e2:d7:49:1d:20:25:cb:ab:75:72:08:
                    42:57:ba:47:d7:9f:60:d7:e5:2d:a8:6e:62:df:b8:
                    3a:3d:c6:d5:91:7e:a0:3d:5f:98:46:9f:75:2d:bc:
                    fd:a0:ba:c8:52:0d:70:6c:29:1e:f2:1d:47:34:60:
                    7c:30:dc:32:f3:e9:72:d9:ae:6f:c9:90:9f:a1:c2:
                    56:03:58:85:6d:06:cb:cc:81:a7:36:1c:db:47:9e:
                    16:f6:3d:44:5e:00:c0:68:49:13:43:77:06:6b:fe:
                    28:bf:73:7e:ef:3a:a0:41:75:c3:1e:97:a9:11:d5:
                    d2:b1:fc:95:c6:64:87:66:65:8f:32:f6:13:90:b6:
                    42:11:ca:94:c0:91:38:3e:fd:b7:c8:f0:9b:23:ea:
                    46:13:8e:bd:97:97:a4:6e:13:29:6b:b4:e4:fc:60:
                    7e:db:88:64:22:18:59:8f:fa:af:1c:0e:0c:19:0d:
                    91:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DB:D0:A5:E6:E3:6D:A7:1E:95:79:52:3E:7D:DA:AC:29:34:84:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/b1021e8e-0005-38a9-8e27-2080c1cdaabf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:dd:df:01:f2:2a:c6:19:bb:49:90:26:8a:f6:ef:b5:39:01:
         12:76:ab:06:74:8d:77:3b:f1:81:9b:54:68:84:ea:06:6a:e2:
         21:d2:d9:a8:ac:03:6a:f7:25:31:1c:ea:c4:a8:b5:a8:9f:de:
         cf:71:c9:03:1f:b8:e6:46:f5:2b:55:3f:58:68:b8:ea:e5:51:
         c8:e0:a6:92:32:36:50:e0:14:f1:9f:af:b3:ed:c6:0a:62:af:
         3e:62:d5:60:16:a5:67:e6:85:ff:0a:e3:83:a8:e3:a3:f0:80:
         db:98:5c:4e:8e:3c:32:a7:5c:bf:8a:bb:0a:09:12:b6:bc:48:
         92:08:31:38:50:fc:fb:1e:b3:54:d7:58:51:61:f8:ee:7d:ae:
         4a:bf:f5:5c:4e:2e:09:3e:28:ab:64:a6:a3:77:32:a8:fc:72:
         5b:4c:57:9b:44:b0:ba:a9:1b:07:27:75:d5:82:02:89:e2:ee:
         7a:a9:b3:ce:2f:72:22:80:10:f6:43:a5:b9:f1:2e:4e:46:76:
         75:e9:df:c4:e2:3a:2e:9a:40:d7:20:07:41:d9:ef:8a:4e:18:
         48:ae:8f:f6:d2:be:fb:73:c2:a7:80:ff:ab:5c:b2:c0:6e:73:
         10:7c:b2:79:25:44:c6:01:b4:3d:da:1e:bb:42:b1:b0:0a:7a:
         79:2d:d3:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eefLVKUvp9c3HZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkNzBiMGQtZWUyMi00OWMyLWIzMWQtYTllMGRlNDM3
NGFhMB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk
YTUyMjJmMDAtZTMzYS00ODljLWI4NzQtOTdjYzkyNzc5MWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/XgIxOSkhekpfBhC42aHzMr9f2PU+bT/6ck
3q8u+TwV0LO4YZiv4hyj4nKWig2HNaEM12sKOaKE/iuZFdvFmAMOsuqE+JItRZ3A
VyGJ4tdJHSAly6t1cghCV7pH159g1+UtqG5i37g6PcbVkX6gPV+YRp91Lbz9oLrI
Ug1wbCke8h1HNGB8MNwy8+ly2a5vyZCfocJWA1iFbQbLzIGnNhzbR54W9j1EXgDA
aEkTQ3cGa/4ov3N+7zqgQXXDHpepEdXSsfyVxmSHZmWPMvYTkLZCEcqUwJE4Pv23
yPCbI+pGE469l5ekbhMpa7Tk/GB+24hkIhhZj/qvHA4MGQ2RZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPHb0KXm422nHpV5Uj592qwpNIToMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3
MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUwZGU0Mzc0YWEvYjEwMjFlOGUtMDAwNS0z
OGE5LThlMjctMjA4MGMxY2RhYWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJkNzBiMGQtZWUyMi00OWMyLWIz
MWQtYTllMGRlNDM3NGFhLzIyZDcwYjBkLWVlMjItNDljMi1iMzFkLWE5ZTBkZTQz
NzRhYS5jcmwwHwYDVR0jBBgwFoAUMZKqBz4fp9Q1AmGPEYcxAg86peEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUw
ZGU0Mzc0YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCggxQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbd3wHyKsYZu0mQJor277U5ARJ2qwZ0jXc78YGbVGiE6gZq4iHS2ais
A2r3JTEc6sSotaif3s9xyQMfuOZG9StVP1houOrlUcjgppIyNlDgFPGfr7Ptxgpi
rz5i1WAWpWfmhf8K44Oo46PwgNuYXE6OPDKnXL+KuwoJEra8SJIIMThQ/Pses1TX
WFFh+O59rkq/9VxOLgk+KKtkpqN3Mqj8cltMV5tEsLqpGwcnddWCAoni7nqps84v
ciKAEPZDpbnxLk5GdnXp38TiOi6aQNcgB0HZ74pOGEiuj/bSvvtzwqeA/6tcssBu
cxB8snklRMYBtD3aHrtCsbAKenkt0/o=
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:59:13 2026 by rpki-client