Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4/220f1223-9c12-35fd-b88d-18363c3bc559.roa
File:                     220f1223-9c12-35fd-b88d-18363c3bc559.roa (raw, json)
Hash identifier:          cZTfuAd5QFMJq+f49uxhEnJs6WPp+OIlj2hebyZpjLA=
Subject key identifier:   AB:F0:02:23:03:B1:90:62:4F:D3:1C:74:24:EC:55:63:F5:75:F7:67
Certificate issuer:       /CN=0f8ed543-19ca-48fe-a0cf-79f7a10432d4
Certificate serial:       010D0C9F4328584F67C4EBC21215A03189101D00
Authority key identifier: 80:2C:46:AE:48:E6:70:28:2F:6A:93:56:EB:2F:EB:C8:D7:E1:61:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4/220f1223-9c12-35fd-b88d-18363c3bc559.roa
Signing time:             Mon 05 Oct 2026 21:40:29 +0000
ROA not before:           Mon 05 Oct 2026 21:40:29 +0000
ROA not after:            Sun 03 Jan 2027 22:37:29 +0000
asID:                     40676
IP address blocks:        130.12.73.0/24 maxlen: 24
                          130.12.74.0/24 maxlen: 24
                          130.12.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4/0f8ed543-19ca-48fe-a0cf-79f7a10432d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4/0f8ed543-19ca-48fe-a0cf-79f7a10432d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:67:c4:eb:c2:12:15:a0:31:89:10:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f8ed543-19ca-48fe-a0cf-79f7a10432d4
        Validity
            Not Before: Oct  5 21:40:29 2026 GMT
            Not After : Jan  3 22:37:29 2027 GMT
        Subject: CN=a21b19b1-4477-4804-8e48-f23abf8252c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:16:90:f7:20:fe:45:bb:8e:33:2e:22:e5:de:
                    22:ab:e6:b8:22:a5:51:f9:2e:55:f3:2b:88:f6:72:
                    65:56:a5:7a:23:d0:6d:42:6d:06:cb:18:af:c8:0a:
                    66:4a:00:06:47:7e:0f:a7:52:8b:a1:ff:6a:18:92:
                    79:ba:50:88:27:d6:ee:6e:58:77:79:3f:d4:fe:70:
                    a0:19:fb:a8:5f:29:c6:4e:3d:1f:99:a3:37:02:3a:
                    5a:b0:f6:cc:76:91:6a:b9:ce:c9:30:95:47:e3:af:
                    54:df:8f:15:32:8c:88:51:4c:b2:ea:20:f5:00:d2:
                    f5:00:59:72:41:23:e4:3c:ae:5c:21:61:57:9d:3c:
                    a9:91:48:ae:eb:1d:ff:5d:ce:6e:41:30:25:e9:50:
                    49:fb:8b:24:3d:36:01:af:68:6d:b2:e7:cb:29:1f:
                    98:d7:ac:51:ff:64:77:50:f0:19:e3:e4:82:cd:d0:
                    20:a2:20:6f:9d:83:f0:30:c7:5e:bf:fd:ca:9e:a9:
                    57:d7:d6:64:ac:b3:15:6a:51:11:32:89:1a:a6:55:
                    1b:b6:b9:4b:50:7c:d0:f6:4d:b2:59:c2:05:1b:47:
                    e8:0e:a6:5e:cd:61:c4:37:c2:b7:23:2d:63:ac:cd:
                    9b:45:5b:c7:34:d5:d6:e0:07:1e:53:0d:43:00:e9:
                    52:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F0:02:23:03:B1:90:62:4F:D3:1C:74:24:EC:55:63:F5:75:F7:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4/220f1223-9c12-35fd-b88d-18363c3bc559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4/0f8ed543-19ca-48fe-a0cf-79f7a10432d4.crl

            X509v3 Authority Key Identifier:
                keyid:80:2C:46:AE:48:E6:70:28:2F:6A:93:56:EB:2F:EB:C8:D7:E1:61:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0f8ed543-19ca-48fe-a0cf-79f7a10432d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.73.0-130.12.75.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:09:be:40:89:55:4f:02:1c:da:b6:ed:bf:d2:7d:20:0d:9f:
         10:53:8f:f3:4a:e0:fd:54:d9:b3:5d:2b:84:34:bb:63:e2:9c:
         d9:76:e3:d1:41:0e:3e:9b:69:19:78:f3:af:df:82:21:1a:7f:
         43:63:eb:3a:1b:5a:a9:8a:0c:8b:9a:fb:54:fb:7a:33:08:28:
         6a:d0:65:5d:01:94:9f:ef:76:a2:dc:aa:8e:94:22:5d:3f:6c:
         31:3c:cf:78:80:3e:c4:45:86:4f:dd:69:3e:ca:df:c8:e5:2e:
         92:af:78:32:78:87:97:99:39:b7:9e:b8:37:f2:1a:b7:74:46:
         9c:48:ee:e6:c6:98:65:34:2d:27:9c:03:3d:94:c2:92:1f:3b:
         83:4c:cd:ca:ee:7e:0c:66:b2:7e:8a:88:94:1d:ff:d3:4d:08:
         0e:1a:ee:3f:ec:11:ee:0d:65:f3:cd:40:bb:fc:d8:b2:3c:6b:
         cb:87:fc:61:44:29:94:f5:ab:43:11:92:22:43:85:46:b0:6e:
         a4:7d:f1:86:49:cb:5f:95:44:a5:e5:24:4c:b5:c0:da:89:d4:
         76:b8:f9:b2:34:e9:22:00:29:51:d9:28:9f:a9:79:4e:77:4a:
         5c:f1:50:f6:fe:b1:9d:5b:59:36:db:ea:e8:d1:d3:fd:60:8b:
         c1:75:24:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:49 2026 by rpki-client