Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/ccfd860c-6f61-331e-8322-b7c4f3977acd.roa
File:                     ccfd860c-6f61-331e-8322-b7c4f3977acd.roa (raw, json)
Hash identifier:          u1nZ6pvxrfIXWNAnvF/MUJMj91FQaMpL0MwxePAhrlA=
Subject key identifier:   92:8E:B1:EC:7A:FC:6D:83:BA:DD:62:CF:7C:6F:AC:E9:56:99:57:AA
Certificate issuer:       /CN=8af9792c-adf8-459e-a0ad-6c60ded9e25d
Certificate serial:       010D0C9F4328584DEB15FD769E30904A86680B00
Authority key identifier: FA:99:54:4D:78:B2:74:D3:1B:7F:3B:EA:28:15:7A:BE:3B:C3:64:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/ccfd860c-6f61-331e-8322-b7c4f3977acd.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     54740
IP address blocks:        130.12.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:fd:76:9e:30:90:4a:86:68:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8af9792c-adf8-459e-a0ad-6c60ded9e25d
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=8f66a16b-bfc0-4662-9df9-0bdaf7d92a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:13:ae:b4:60:8b:60:57:6c:94:8c:86:4c:
                    cf:ea:c2:f3:21:2b:00:b5:fb:f6:bf:61:f3:ed:6a:
                    21:a0:95:b6:58:01:f1:a8:f5:91:8e:09:45:06:a5:
                    34:b2:c6:da:5b:8c:ec:d0:21:37:b0:42:15:a7:43:
                    91:69:08:ee:fe:d9:2c:8d:8f:70:ad:af:e0:5d:0f:
                    54:5a:40:3a:2b:d7:ea:d4:fb:c6:8a:a7:6e:c9:cb:
                    47:b3:3f:f2:a1:28:87:90:bd:d0:bd:da:51:6c:53:
                    1f:65:a9:5e:0a:45:88:ab:3e:26:0c:ae:2a:10:e3:
                    57:9e:fd:5e:78:6d:4c:27:6b:61:c7:45:67:30:21:
                    67:2d:2d:a9:38:c6:b8:6a:52:6b:19:fc:89:ba:24:
                    49:88:53:ff:63:16:3b:de:9b:4f:a0:92:6a:1f:94:
                    b2:e5:88:63:40:59:8f:fe:cb:49:6a:5b:cb:3e:38:
                    82:da:16:b4:50:80:64:b4:c2:24:1d:21:92:a7:10:
                    03:ff:c9:b0:84:6d:5b:38:52:63:95:51:cf:49:fe:
                    6b:8d:65:dd:1d:66:35:1d:aa:d5:c4:11:34:d6:96:
                    d5:71:ab:9c:2c:18:a3:37:25:bd:6e:85:ef:d5:f8:
                    a9:fe:f5:84:f0:77:b5:0e:13:89:c4:2b:b6:fd:cc:
                    60:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8E:B1:EC:7A:FC:6D:83:BA:DD:62:CF:7C:6F:AC:E9:56:99:57:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/ccfd860c-6f61-331e-8322-b7c4f3977acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:99:54:4D:78:B2:74:D3:1B:7F:3B:EA:28:15:7A:BE:3B:C3:64:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4a:46:e7:b8:86:78:19:45:ab:61:fc:2b:87:f4:85:15:0c:
         10:69:ac:c1:53:4f:b3:e1:85:b3:15:e6:91:81:42:02:33:98:
         06:3c:28:5b:2a:ec:19:08:56:cf:2c:fb:cd:9b:48:1a:7a:41:
         8d:70:97:d1:a0:28:93:9b:ca:05:12:0d:d4:a6:56:11:14:f9:
         04:4a:c1:d5:e6:5c:68:78:cd:4c:e2:3e:93:d6:59:10:08:59:
         2f:3e:c4:18:f9:25:cf:60:74:ff:c0:f4:cb:6b:02:19:e0:32:
         83:3f:01:5d:b2:a5:65:33:f8:aa:85:a9:84:ba:9c:7d:a6:70:
         36:c3:2a:9e:bd:4e:e9:36:3c:bc:e9:c4:bc:8e:da:71:db:7d:
         89:1e:86:13:99:29:f4:2c:23:6b:7c:29:50:5a:ac:de:22:8e:
         61:37:00:52:a9:d9:44:35:00:11:10:56:25:37:47:9f:fa:0e:
         d1:09:e1:52:98:c7:15:db:f9:32:76:43:3a:4a:8e:98:53:e3:
         2b:95:0c:b2:95:0c:01:41:d4:66:27:70:08:51:a4:c8:c0:6e:
         95:ef:b1:33:d2:22:d0:04:9f:68:80:dd:69:3d:c6:f9:92:a5:
         7f:77:19:94:8b:bd:ed:35:90:34:36:4e:d3:1c:64:2f:11:00:
         22:6f:7d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 06:44:17 2026 by rpki-client