Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6420c580-fa73-384a-87f8-f301e863e9de.roa
File:                     6420c580-fa73-384a-87f8-f301e863e9de.roa (raw, json)
Hash identifier:          fuDzWiWJR61q3U9lI4EWQpgLPSs4YQxQ7D0KpxJn/QY=
Subject key identifier:   2C:99:8E:DA:9D:D5:60:F7:2E:9E:8B:06:33:FF:43:27:8F:3D:91:D8
Certificate issuer:       /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
Certificate serial:       010D0C9F4328584E4F1F37956DC47B61335C5200
Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6420c580-fa73-384a-87f8-f301e863e9de.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     198949
IP address blocks:        130.132.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:37:95:6d:c4:7b:61:33:5c:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=ff30b68b-dc6f-489f-81e8-a7435a9970a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:99:d1:5c:9e:69:e7:40:06:8f:e1:09:3b:
                    47:a5:aa:55:d5:cd:d5:c9:80:56:3f:18:62:6a:53:
                    08:be:c7:27:10:bc:52:ce:d4:d2:92:a2:d6:12:01:
                    5c:8b:47:f1:56:17:b0:cf:9f:2f:16:7b:4b:a8:59:
                    03:fe:5c:81:8e:a3:7c:a8:5e:8c:60:45:27:52:ae:
                    4e:54:c7:4e:26:e2:ee:25:ad:f8:a3:b0:d6:cd:e2:
                    76:3c:cd:ec:cf:e3:31:e4:8e:33:ca:93:08:1d:f4:
                    24:a3:fb:e7:2b:fb:b2:19:91:90:b2:70:31:32:c9:
                    05:c3:33:31:bf:75:4e:23:16:af:15:43:a9:f0:29:
                    2c:b4:43:33:74:9b:fa:7f:57:97:f8:a9:1e:b7:40:
                    27:d7:d6:98:09:71:28:2a:0b:33:ab:07:ef:ea:5a:
                    02:98:bd:2d:8f:2b:1d:45:cc:88:aa:9c:3c:b7:b2:
                    7b:c0:59:5b:ef:04:7e:9a:89:db:f1:dc:83:4b:7a:
                    10:80:bd:d8:14:35:b6:d1:f2:65:d5:89:00:01:61:
                    a1:d9:0b:1d:5d:65:bb:0a:0b:fa:45:11:79:c1:8c:
                    8f:ea:cf:ed:e6:ff:5f:59:53:bf:19:e0:19:19:93:
                    dd:27:7e:72:6a:f4:d4:73:34:02:b0:03:a6:68:eb:
                    a2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:99:8E:DA:9D:D5:60:F7:2E:9E:8B:06:33:FF:43:27:8F:3D:91:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6420c580-fa73-384a-87f8-f301e863e9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl

            X509v3 Authority Key Identifier:
                keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.132.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:6c:de:aa:f4:92:79:0f:76:93:e4:50:7a:56:f5:38:1a:65:
         85:8f:51:91:e1:df:81:98:95:ea:10:2a:e9:f7:74:be:e4:dc:
         5d:cd:ae:f1:53:dc:10:a3:07:7c:af:bd:36:dc:28:b5:7a:e5:
         a1:bd:73:77:2e:e3:33:11:04:9d:6f:76:53:b5:43:da:ef:8d:
         b4:59:34:83:39:97:77:6e:56:98:60:ef:97:18:f1:aa:c7:5b:
         2f:a9:e2:51:22:08:8c:e4:2f:3a:ff:f6:ce:58:6e:fd:db:dd:
         ff:aa:7d:ce:ce:28:75:a0:46:f4:eb:c5:4e:22:15:a1:83:24:
         71:34:3a:b6:83:61:60:b5:cf:be:a1:72:9f:8b:99:27:8f:81:
         67:a2:39:25:b5:4f:84:6a:c5:f0:68:34:16:d7:f7:4a:52:6b:
         58:e6:3b:07:70:1f:a8:b0:56:90:f8:48:71:69:f9:22:ca:be:
         23:79:a8:ee:81:61:a9:a3:be:dd:c9:91:31:5a:41:08:37:63:
         60:83:24:fe:1c:6c:94:32:3d:ef:48:41:ca:dd:79:37:85:8e:
         f7:84:e6:45:1f:ca:07:8e:fe:87:63:4d:7e:20:1f:b2:a5:b4:
         4d:96:21:ae:4a:f0:7c:aa:24:05:01:ac:c4:eb:09:99:11:fa:
         4a:6a:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:00:11 2026 by rpki-client