Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/77afa340-538a-3b40-8980-a17a9a1851bc.roa
File:                     77afa340-538a-3b40-8980-a17a9a1851bc.roa (raw, json)
Hash identifier:          13G9jj8kjsjU8oDD6kfDgEnVpn5oimc3pItf4c22sG0=
Subject key identifier:   A3:73:B7:61:2D:F6:49:03:E0:69:AC:EE:ED:62:D0:BA:BC:76:69:D5
Certificate issuer:       /CN=53047e29-2570-4585-9e69-b23797196c26
Certificate serial:       010D0C9F4328584E58E4954C62F8EE9779348D80
Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/77afa340-538a-3b40-8980-a17a9a1851bc.roa
Signing time:             Tue 30 Jun 2026 21:00:12 +0000
ROA not before:           Tue 30 Jun 2026 21:00:12 +0000
ROA not after:            Mon 28 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        158.116.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:58:e4:95:4c:62:f8:ee:97:79:34:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53047e29-2570-4585-9e69-b23797196c26
        Validity
            Not Before: Jun 30 21:00:12 2026 GMT
            Not After : Sep 28 21:00:12 2026 GMT
        Subject: CN=11e24f08-25a5-4888-bddc-c998203135e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:20:14:e1:04:6d:d2:fe:0d:b9:cf:78:bf:d3:
                    d9:42:55:f1:fb:42:ef:a5:81:fb:bd:8f:b7:79:95:
                    9a:1b:22:ba:cf:3b:8f:06:6e:10:8a:e2:b9:29:1d:
                    a1:d4:3a:2a:d9:cd:16:81:88:c9:8f:e7:18:90:e7:
                    0b:8c:41:d9:a6:27:f7:2f:31:8f:f6:b4:e5:1f:00:
                    57:ff:2e:5d:24:12:10:f7:ad:71:76:d0:56:b6:3a:
                    99:68:bb:a4:e2:cd:7d:6e:d6:05:cf:91:5b:c7:dc:
                    14:6c:32:0f:19:a0:43:0c:50:b3:12:3c:87:79:17:
                    f5:e1:85:2c:6d:c9:cd:e3:cc:4d:f1:96:93:0b:25:
                    4a:9b:41:6f:e1:90:8b:1c:ca:87:a3:3b:5d:90:25:
                    83:b6:8e:f0:76:87:15:97:e2:af:2d:e5:fb:a6:44:
                    df:38:a2:2c:96:e5:90:bd:72:28:57:43:e2:dc:e1:
                    06:84:d9:96:33:86:6b:e8:9c:5c:2c:29:01:f8:2c:
                    33:f4:01:4c:75:ec:ea:59:de:01:8c:c9:f1:66:3f:
                    66:e4:e5:d9:9c:e2:ed:31:9e:6f:eb:30:7e:93:c3:
                    df:02:be:2c:70:c7:fa:15:1c:f8:24:f6:7e:a3:24:
                    5a:48:a6:20:1c:1f:16:a8:e7:b6:e7:25:52:af:12:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:73:B7:61:2D:F6:49:03:E0:69:AC:EE:ED:62:D0:BA:BC:76:69:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/77afa340-538a-3b40-8980-a17a9a1851bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl

            X509v3 Authority Key Identifier:
                keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.116.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:76:d3:8e:7f:96:bf:92:b1:8f:b8:86:6f:fa:a6:64:2c:05:
         0f:f0:46:66:bf:5b:2d:0b:0a:02:d2:cf:24:36:93:91:74:d3:
         a2:5e:8f:15:81:5c:c1:70:b4:54:7a:23:08:69:18:ae:3f:a2:
         fc:ab:9b:5b:67:1c:66:47:b6:33:dc:03:b6:33:00:21:53:81:
         4c:e3:1d:61:e5:26:c8:c7:2b:f3:46:5b:70:79:4c:f6:9d:10:
         5b:36:ce:50:79:f6:32:8f:13:0f:6b:9a:5e:40:60:f2:1d:ca:
         0b:d7:6d:3c:c2:ef:a2:35:b2:c5:c2:06:df:83:b3:5c:8b:d0:
         2c:9e:a9:bc:0b:d1:4f:57:b7:6f:a4:ba:29:a3:69:e2:6a:13:
         bb:53:fb:f4:91:fe:11:c6:74:a5:b8:53:f3:79:f2:5b:bb:ad:
         a8:55:dd:03:c5:23:b2:10:d1:3e:a3:ec:13:b6:61:bf:47:2e:
         68:e1:01:23:b8:b9:b1:62:f9:49:f1:8c:21:87:86:83:64:58:
         6e:b4:e2:8e:cf:22:0e:fe:f9:71:f9:c0:8e:4c:50:59:72:18:
         89:56:07:d7:d7:c6:30:6d:1c:c9:6f:38:32:2c:13:32:b1:86:
         23:a6:d3:d0:83:1f:30:a3:17:57:09:cb:ee:74:95:9c:b9:05:
         03:4f:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:23:49 2026 by rpki-client