Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/516b5279-58c6-3a56-ba9a-5b48408dca64.roa
File:                     516b5279-58c6-3a56-ba9a-5b48408dca64.roa (raw, json)
Hash identifier:          lEFrPj43UWs7cyTnMSKToW7d5atkXUopUElrvmmuq+Q=
Subject key identifier:   AA:BB:5F:8A:3B:DA:56:DD:10:29:3F:F3:22:82:83:24:01:E8:15:FE
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584EB6E1B6989D8F0FF093E0BE80
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/516b5279-58c6-3a56-ba9a-5b48408dca64.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     397041
IP address blocks:        130.12.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:b6:98:9d:8f:0f:f0:93:e0:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=53353ad8-55b3-46e0-801e-4d3a453fefc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:42:37:63:c7:72:c8:63:0b:48:76:a4:8f:73:
                    36:21:0d:6b:fa:92:18:8e:5a:7b:72:f8:a0:1b:86:
                    ed:4a:a6:ad:3a:f0:34:cc:c8:5b:3d:65:0a:5a:c6:
                    a1:43:78:a6:25:5d:d5:57:28:a1:22:17:c9:10:62:
                    b0:46:c0:56:7c:c0:42:27:69:4b:6c:69:85:35:8c:
                    91:54:29:a5:2f:fb:4d:07:9d:51:82:ab:53:18:56:
                    5e:b9:36:69:9b:23:7a:3c:15:cc:4b:44:5f:7c:2f:
                    ba:d7:11:bb:98:bd:f0:0b:9d:9b:00:41:1f:6b:db:
                    ba:04:17:b0:bb:0b:6f:42:4e:5c:ce:89:7b:44:f3:
                    18:0f:ad:7a:18:35:fc:8b:d2:a3:04:26:e6:36:11:
                    e4:05:d3:29:8a:a6:ab:64:3d:ca:04:db:af:75:bd:
                    af:e8:dd:4a:50:2f:67:f4:19:94:b6:7a:a0:33:17:
                    69:2d:9c:98:c5:ed:99:70:c9:96:49:a9:c7:25:d3:
                    20:7e:05:0d:24:19:47:a7:fb:6c:aa:0f:b7:0a:38:
                    22:0e:8b:5e:46:18:de:c0:44:c0:b2:8b:85:6f:f3:
                    8d:53:61:cd:3e:f0:ab:b5:46:da:89:0f:bf:f7:72:
                    e9:a1:de:1a:59:fe:e6:1b:8c:7b:7e:42:e7:e8:ad:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BB:5F:8A:3B:DA:56:DD:10:29:3F:F3:22:82:83:24:01:E8:15:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/516b5279-58c6-3a56-ba9a-5b48408dca64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:37:6e:f8:94:1d:fb:54:69:d0:1f:bc:af:01:fc:86:5f:69:
         64:96:e0:ae:60:63:22:f5:4c:d5:89:79:c2:2c:a3:c2:89:e3:
         92:36:4c:12:4f:2b:9c:d9:de:66:b5:f0:2b:07:1b:37:ce:d2:
         10:6b:1f:39:f8:c2:ba:49:9c:e3:63:3e:e6:7c:06:d0:b3:47:
         48:10:3a:f3:69:58:f8:ca:85:b0:89:45:8f:22:79:fc:12:36:
         da:4a:28:c0:86:07:09:81:46:10:a6:74:5b:47:f3:65:05:42:
         de:a6:74:7f:83:43:03:11:93:50:e0:20:a7:59:f8:8b:1b:47:
         e0:19:e3:3d:4c:aa:e5:1a:d1:ce:e1:dd:64:95:2d:12:b4:80:
         f2:74:ca:45:e0:04:30:68:8e:a5:af:ca:0a:8a:eb:67:63:0c:
         0f:9a:d0:9e:98:8a:4c:2d:a5:ed:56:ea:59:c8:c0:a4:f1:85:
         16:51:d1:17:7e:85:e6:a3:56:7f:44:98:8a:c0:04:60:b5:42:
         52:02:e5:f6:2e:61:7c:af:d4:0a:f5:0a:bb:a3:05:aa:50:fc:
         87:a3:24:b8:2c:7e:5d:ef:51:17:a8:a0:42:a0:d2:a3:74:b9:
         c8:07:25:6a:25:ba:cd:2e:48:d0:d5:ed:4c:ad:b6:75:00:54:
         5b:ff:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:19:24 2026 by rpki-client