Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa
File:                     a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa (raw, json)
Hash identifier:          gn6MBvHxIHojMYctUK0AabKrpoqZzhn+0vukq/8N6nQ=
Subject key identifier:   F8:DF:86:4A:6F:37:F6:BA:27:C3:99:15:C2:32:9F:2B:CD:0D:EB:F7
Certificate issuer:       /CN=74448f2d-e70e-4042-9da0-e023ba682319
Certificate serial:       010D0C9F4328584DDD207A08BA8E9EE6CBCBA620
Authority key identifier: 63:21:A1:E6:9F:C4:E9:2F:C9:47:24:A5:3D:0B:45:50:E3:6F:BF:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     36111
IP address blocks:        130.250.220.0/22 maxlen: 22
                          130.250.220.0/24 maxlen: 24
                          130.250.221.0/24 maxlen: 24
                          130.250.222.0/24 maxlen: 24
                          130.250.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:7a:08:ba:8e:9e:e6:cb:cb:a6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74448f2d-e70e-4042-9da0-e023ba682319
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=aedebda0-1f2c-4f94-a1f9-93cdf52dd7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:d7:37:66:c6:ca:85:10:94:e8:1f:fd:fa:
                    5f:88:1f:de:af:3b:af:b3:50:5c:74:db:e8:ea:3c:
                    97:83:e6:40:48:da:fa:c2:53:2a:c4:94:f0:fc:8d:
                    d1:03:f2:aa:98:ff:07:f8:cd:5e:fa:47:58:9f:e0:
                    d4:5f:18:e0:dc:53:21:4a:d2:6a:b2:22:e3:d4:75:
                    d1:f1:f8:0a:a4:e1:56:24:c7:b2:41:d4:d1:b8:03:
                    cc:6a:7f:16:1f:3d:55:0c:0d:16:68:8a:6e:be:1d:
                    f9:df:e8:61:67:c3:08:47:74:71:c1:d6:7a:a6:25:
                    a0:cc:6b:4c:9a:37:6b:60:28:d7:65:d6:09:2b:83:
                    35:79:22:9e:21:8c:14:72:eb:86:78:66:56:46:94:
                    cf:2f:6b:08:29:30:76:e7:ff:c1:fb:4a:6f:81:ed:
                    30:57:25:89:d7:d1:3f:91:1e:ed:b4:d1:dc:ed:d2:
                    b0:aa:72:ce:dd:04:f5:59:e2:33:18:43:53:e0:2a:
                    76:05:44:b7:c6:8e:92:fc:d9:5c:f5:eb:5f:43:a5:
                    59:0a:e6:f6:04:d3:f3:85:66:08:60:dd:97:7d:97:
                    38:c4:13:ac:6b:63:91:a3:b5:bf:81:73:29:bf:57:
                    7d:36:7a:23:ae:04:a6:21:76:ef:aa:98:c5:03:f5:
                    87:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DF:86:4A:6F:37:F6:BA:27:C3:99:15:C2:32:9F:2B:CD:0D:EB:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.crl

            X509v3 Authority Key Identifier:
                keyid:63:21:A1:E6:9F:C4:E9:2F:C9:47:24:A5:3D:0B:45:50:E3:6F:BF:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:08:bd:b4:94:0d:c7:4b:31:9f:67:85:91:6a:03:2d:97:10:
         39:d5:a0:12:b2:ce:8a:d4:07:7b:1f:ed:99:6f:fd:b3:ed:17:
         33:d6:e5:42:c4:e4:dd:ec:f3:b4:e1:cf:a2:33:e8:18:38:b3:
         59:f4:9f:3a:e3:81:16:6e:31:86:7b:1f:13:d2:24:33:ce:ab:
         69:00:72:53:d0:1f:47:7f:dd:b5:5c:fc:9a:51:67:e6:e6:c6:
         08:e3:23:1e:21:c6:49:19:58:16:10:94:b2:39:c0:c6:b4:b0:
         f6:fc:ee:b0:e1:d2:80:96:fe:a9:fd:04:57:f6:d5:02:af:0a:
         c8:3f:99:d0:ec:e6:b7:68:2a:b7:5d:dd:9a:b6:66:16:8e:38:
         b7:0a:fd:36:d7:22:31:a2:72:47:eb:8d:d5:a9:10:d0:b8:cc:
         10:bc:b5:a1:e4:32:6f:ee:f1:53:00:f4:09:73:af:86:78:60:
         83:c8:da:ce:6e:1b:bc:29:be:03:0d:e2:31:81:65:80:38:60:
         f2:ac:61:67:02:bd:df:5c:33:70:26:97:eb:42:4f:bf:52:8d:
         5e:63:0d:bb:20:fc:d4:75:bf:1f:0d:b5:51:9a:55:6f:34:c7:
         94:70:81:88:e1:08:9b:bd:4e:78:87:4b:32:5b:5d:c5:85:61:
         df:d5:2a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:25:21 2026 by rpki-client