Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8bf352d6-96a5-34f2-9605-c8efe62b98f9.roa
File:                     8bf352d6-96a5-34f2-9605-c8efe62b98f9.roa (raw, json)
Hash identifier:          AGOPsd7TD1UFmddtod+SpZxhkCoig2mgNfJGi6l2E2c=
Subject key identifier:   09:2C:AB:4C:40:65:7B:10:7F:9F:C1:6C:17:E5:D2:CF:45:C3:79:89
Certificate issuer:       /CN=8af9792c-adf8-459e-a0ad-6c60ded9e25d
Certificate serial:       010D0C9F4328584DEB15DCA51BC1A6B0D7A8F280
Authority key identifier: FA:99:54:4D:78:B2:74:D3:1B:7F:3B:EA:28:15:7A:BE:3B:C3:64:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8bf352d6-96a5-34f2-9605-c8efe62b98f9.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     54740
IP address blocks:        130.12.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:dc:a5:1b:c1:a6:b0:d7:a8:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8af9792c-adf8-459e-a0ad-6c60ded9e25d
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=c3c48a85-04b2-479a-a958-1c9be7120f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:18:3f:4f:fe:87:55:09:6e:0f:9c:a5:84:
                    e5:e2:62:49:e9:70:d1:18:0d:c8:c0:04:2a:5a:78:
                    6f:7d:0d:66:c8:12:c8:ae:3c:7f:4a:1b:26:63:a4:
                    a1:9b:49:b9:f1:56:01:50:6a:f1:c9:68:57:67:2e:
                    b5:25:54:bc:3d:91:c1:a1:33:bd:45:16:72:8d:30:
                    4c:0f:6f:ad:80:bb:3b:ac:4f:ac:de:d5:a5:57:da:
                    43:76:58:60:f0:d6:22:dc:f5:9f:e1:b1:46:db:94:
                    aa:d4:b2:0c:61:5a:e7:c7:af:e1:2a:53:b5:32:d5:
                    58:e2:e8:77:f4:6c:34:4f:6b:65:6c:b9:d7:34:09:
                    4e:71:66:41:48:6e:89:c3:26:af:38:c2:40:86:dd:
                    db:a9:f2:b5:f4:af:b2:7e:c1:4f:09:5c:3b:70:2a:
                    6a:cb:63:18:75:b5:00:fb:05:43:0d:c9:89:f7:60:
                    6e:0e:43:d9:22:66:55:97:41:46:e6:6c:25:d2:d9:
                    5a:c8:e3:60:4e:4d:51:4a:48:81:50:22:fa:d9:78:
                    56:18:9c:16:30:a3:d8:98:e4:04:25:0d:44:de:da:
                    e4:4d:3c:c1:95:f0:cd:d6:1c:b2:bb:c2:6b:dc:fa:
                    7f:9c:a9:d9:de:d1:12:12:17:bc:c8:f4:81:22:54:
                    56:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2C:AB:4C:40:65:7B:10:7F:9F:C1:6C:17:E5:D2:CF:45:C3:79:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8bf352d6-96a5-34f2-9605-c8efe62b98f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:99:54:4D:78:B2:74:D3:1B:7F:3B:EA:28:15:7A:BE:3B:C3:64:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:49:ea:12:99:30:2f:22:48:98:fb:6c:16:1f:4f:16:4a:8d:
         de:41:67:6b:ae:37:16:6b:f2:aa:2e:03:21:5c:bd:db:5b:a0:
         7f:1d:1d:e1:c0:2c:cb:fe:26:05:51:02:22:39:da:26:cd:bb:
         e0:62:47:a7:ca:e5:72:da:d8:e0:79:50:a0:0e:12:2f:03:77:
         d5:0d:ec:4c:5b:8f:2a:37:f5:09:5d:ae:02:28:dd:e6:73:c2:
         38:84:01:15:53:5b:de:b2:1b:15:f8:83:26:2d:30:5e:5d:fe:
         18:e1:79:54:3f:9b:14:3f:51:33:4c:cf:7d:6c:86:39:eb:4b:
         3d:a6:8b:6d:6e:bf:01:92:17:1b:3d:4e:aa:16:2f:c3:34:77:
         a1:58:e7:45:08:19:87:af:30:ee:ba:68:e2:ea:99:7a:fe:ff:
         f4:fc:7d:ed:26:fb:5c:f1:dd:fe:89:12:3d:56:84:61:e5:f6:
         5a:40:7e:dd:aa:92:56:fe:0b:b1:a5:f6:66:a6:a6:62:1c:7e:
         7f:97:65:f5:f7:e8:a7:4c:eb:a4:a9:65:39:06:19:82:e2:3b:
         8e:de:1b:d1:82:f3:c9:5c:ba:f1:60:20:89:cd:c8:98:9b:f8:
         24:64:4e:e5:b3:fd:80:b4:a1:b8:51:16:e4:fd:c1:e8:f0:b1:
         73:ec:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 06:44:19 2026 by rpki-client