Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/f522dbcb-de74-3429-9403-fa9c5f552a1c.roa
File:                     f522dbcb-de74-3429-9403-fa9c5f552a1c.roa (raw, json)
Hash identifier:          m2yV62BqEWlcYiAdQgOEMONcfardTiZ3vADCoWyeB1g=
Subject key identifier:   EA:30:9C:39:C2:C2:77:63:6E:81:57:8D:12:47:47:69:97:64:73:40
Certificate issuer:       /CN=8a6412c9-a3f0-428f-87a2-63602f7bcc08
Certificate serial:       010D0C9F4328584EAF5AD5D2AB69F36F137CB000
Authority key identifier: DD:7E:3E:BE:EC:F1:5B:3A:5F:8A:6E:C8:92:18:21:C0:4F:DD:50:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/f522dbcb-de74-3429-9403-fa9c5f552a1c.roa
Signing time:             Fri 31 Jul 2026 20:18:00 +0000
ROA not before:           Fri 31 Jul 2026 20:18:00 +0000
ROA not after:            Thu 29 Oct 2026 20:18:00 +0000
asID:                     399468
IP address blocks:        130.12.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/8a6412c9-a3f0-428f-87a2-63602f7bcc08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/8a6412c9-a3f0-428f-87a2-63602f7bcc08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:5a:d5:d2:ab:69:f3:6f:13:7c:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6412c9-a3f0-428f-87a2-63602f7bcc08
        Validity
            Not Before: Jul 31 20:18:00 2026 GMT
            Not After : Oct 29 20:18:00 2026 GMT
        Subject: CN=faf74717-6e38-49bf-831e-56f4c2392f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8a:47:a4:ea:cc:31:72:e6:31:a8:b3:6f:cb:
                    76:7a:db:45:94:00:95:e8:4f:e0:00:ff:0f:af:6a:
                    06:34:90:6a:e6:97:a4:18:2d:6b:9a:7d:ed:d9:86:
                    0d:19:1e:d0:23:2a:88:ba:9b:c9:1e:7a:5a:72:f6:
                    e6:c1:96:e8:2d:d0:49:f8:39:f7:34:1d:0b:e6:f9:
                    7d:99:d1:01:77:bd:34:2a:f8:6e:2f:05:6e:ed:d3:
                    4e:ac:3b:c5:40:b8:9b:a0:2b:f2:0b:ce:81:26:40:
                    c3:8a:ad:36:d0:3d:6f:ae:7f:43:98:e2:4c:60:be:
                    98:9f:ac:9f:73:36:e1:51:20:38:72:0f:d4:b3:54:
                    39:d8:1e:33:ca:6e:d4:7a:a5:88:08:f1:da:52:3c:
                    60:16:06:da:e1:1a:51:e9:ce:af:8d:26:64:5d:54:
                    43:7a:91:86:a6:a2:a1:a6:32:a4:ff:b7:f2:64:70:
                    dd:8d:2e:68:1e:66:21:b2:bc:60:ae:df:89:34:95:
                    55:25:ce:bb:23:82:5a:68:d9:92:36:ad:b3:f6:1b:
                    73:5e:9e:8b:5c:06:e1:ed:54:ae:7a:93:f8:b4:22:
                    01:8a:48:4c:97:a0:27:5c:49:ce:5f:20:eb:d2:0b:
                    7e:ae:c4:34:a7:b2:b3:75:04:cc:48:b4:d2:8e:f9:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:30:9C:39:C2:C2:77:63:6E:81:57:8D:12:47:47:69:97:64:73:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/f522dbcb-de74-3429-9403-fa9c5f552a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08/8a6412c9-a3f0-428f-87a2-63602f7bcc08.crl

            X509v3 Authority Key Identifier:
                keyid:DD:7E:3E:BE:EC:F1:5B:3A:5F:8A:6E:C8:92:18:21:C0:4F:DD:50:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a6412c9-a3f0-428f-87a2-63602f7bcc08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a1:a4:e6:60:2c:50:39:43:4c:5a:e8:db:2c:2c:40:07:69:
         9c:c3:01:e4:3e:6d:39:e0:9a:58:f1:ed:43:19:16:cc:27:2d:
         5d:51:00:4d:92:a6:5c:50:1d:41:af:35:f3:35:9c:50:17:0b:
         d1:6a:00:36:57:1d:b3:c2:38:78:4b:af:bd:fe:27:1e:77:31:
         44:bc:0a:20:5e:82:21:03:ff:f0:9a:61:4c:37:84:8d:7f:cd:
         2b:f8:56:23:30:56:2c:bd:37:53:44:ad:3a:56:20:91:68:bf:
         01:8a:81:da:c4:d3:4c:a2:97:58:42:d9:29:22:67:f9:8c:00:
         ba:6f:4a:9f:49:fe:cb:fc:19:ed:e9:ec:25:13:f2:8a:6a:0c:
         c2:71:8a:aa:a7:a9:e6:62:32:fc:77:e0:3d:0b:66:9f:ca:e3:
         09:b5:16:dc:2c:1d:60:4f:da:64:75:e7:8c:c1:3f:eb:79:df:
         fd:c9:f0:aa:0b:68:0c:37:ea:cf:32:b1:e3:60:9d:c0:47:6a:
         c5:75:f7:b9:22:87:b8:05:fd:f5:32:55:96:7d:a0:37:13:0c:
         6c:07:1e:a0:8a:5a:54:ed:ee:af:12:61:02:a3:d7:ec:c4:e1:
         df:3d:bf:f0:98:0e:26:31:4f:87:2c:33:db:0d:84:ec:8d:d4:
         06:46:68:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:08 2026 by rpki-client