Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6911e3b-14d9-4367-a886-dc4b52a57183/82450371-91c7-3637-b59b-0840e515d178.roa
File:                     82450371-91c7-3637-b59b-0840e515d178.roa (raw, json)
Hash identifier:          IqC7PZ0qxUDZ5Lfg5uYKK3iFvZ2rLA6WoMmuN9m7aoE=
Subject key identifier:   B1:A0:0C:8B:D4:F7:CD:86:AC:F0:6B:39:BA:9D:1A:7B:C6:73:CB:21
Certificate issuer:       /CN=b6911e3b-14d9-4367-a886-dc4b52a57183
Certificate serial:       010D0C9F4328584EF5B21449E19BEE6864DA4E80
Authority key identifier: 22:E7:9E:7A:A2:6B:AD:49:3F:92:CA:BE:F9:CE:C7:6E:69:47:2B:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6911e3b-14d9-4367-a886-dc4b52a57183.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6911e3b-14d9-4367-a886-dc4b52a57183/82450371-91c7-3637-b59b-0840e515d178.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     32283
IP address blocks:        130.12.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6911e3b-14d9-4367-a886-dc4b52a57183/b6911e3b-14d9-4367-a886-dc4b52a57183.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6911e3b-14d9-4367-a886-dc4b52a57183/b6911e3b-14d9-4367-a886-dc4b52a57183.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6911e3b-14d9-4367-a886-dc4b52a57183.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:14:49:e1:9b:ee:68:64:da:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6911e3b-14d9-4367-a886-dc4b52a57183
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=9aa5f263-523d-4581-a5d3-ddd1857875f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:84:90:54:9f:f3:ee:ba:a1:a8:b2:59:29:
                    1e:1c:93:8b:79:79:a9:c2:ac:a3:37:9f:33:4b:12:
                    ba:5a:bb:b6:bc:29:04:96:f5:3b:85:62:2c:99:29:
                    c9:42:35:14:33:58:51:06:aa:d5:d3:43:94:ce:9e:
                    b6:49:fd:51:da:f7:60:c3:c2:78:e7:28:71:73:73:
                    53:ec:6b:f1:be:32:0c:73:12:2a:64:22:e3:0a:33:
                    a5:4a:3c:93:e4:78:ae:56:d2:18:0e:74:b0:63:42:
                    71:d9:76:65:b3:ff:e9:f8:92:28:01:a0:35:2a:8b:
                    6f:97:6e:dc:d6:8f:3e:80:a7:a5:27:01:ec:85:f9:
                    22:ea:52:37:4a:b6:4b:b2:83:81:b7:53:6a:dd:d7:
                    c2:f4:54:e6:f8:f4:3c:4c:8b:6a:df:fa:9a:c4:cc:
                    d3:89:3a:0c:24:52:51:b7:72:84:f7:6a:54:e1:28:
                    b5:89:f0:1c:ff:e0:99:94:11:29:b1:42:49:e0:07:
                    15:e8:1b:4a:e5:f0:34:fb:12:de:71:63:59:53:a6:
                    6b:68:31:a1:9e:b3:4c:e0:86:ba:22:c1:b1:41:3e:
                    1a:29:fc:37:6d:26:3f:26:98:c1:47:df:16:8e:f4:
                    5a:5c:80:aa:93:18:66:6b:fc:41:72:cd:18:72:22:
                    af:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A0:0C:8B:D4:F7:CD:86:AC:F0:6B:39:BA:9D:1A:7B:C6:73:CB:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6911e3b-14d9-4367-a886-dc4b52a57183/82450371-91c7-3637-b59b-0840e515d178.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6911e3b-14d9-4367-a886-dc4b52a57183/b6911e3b-14d9-4367-a886-dc4b52a57183.crl

            X509v3 Authority Key Identifier:
                keyid:22:E7:9E:7A:A2:6B:AD:49:3F:92:CA:BE:F9:CE:C7:6E:69:47:2B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b6911e3b-14d9-4367-a886-dc4b52a57183.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:46:2e:8b:b6:49:87:e4:fc:1a:78:75:48:56:cd:f2:45:64:
         21:ee:17:ad:8c:45:83:03:c0:3f:33:38:9f:06:75:22:9a:b4:
         21:dc:4e:2e:50:cd:c5:91:32:e8:67:ad:59:70:27:42:55:8d:
         4e:42:03:32:7e:a4:21:eb:02:ca:b4:5a:1c:29:7a:d3:f7:30:
         30:00:7d:56:f2:dd:f0:a2:3a:37:da:39:4a:8a:db:ed:ac:e3:
         8f:4c:8b:46:03:0b:53:f6:81:ca:6f:e2:7a:9c:53:89:02:91:
         41:2a:79:ee:2f:85:2e:94:b9:0a:91:bf:80:a7:fd:76:a0:21:
         b2:9d:75:ee:33:f3:0c:47:e7:8a:5e:c4:69:1f:9d:c5:86:b0:
         51:2d:13:eb:40:54:5a:32:67:11:74:1b:dd:84:73:b9:29:01:
         3f:56:fe:0f:54:15:24:d9:37:cd:95:4b:d8:ca:f3:10:20:87:
         15:76:a0:b5:a2:1b:03:dd:91:01:fc:d0:5d:14:72:3c:da:c7:
         6c:8c:63:22:55:83:5b:3a:2f:c2:35:31:1d:cd:af:eb:ba:9c:
         6c:40:3b:6e:08:e8:85:7d:dd:9b:09:8b:9a:0a:5a:a3:91:0a:
         3c:d7:ab:cf:3a:1c:35:7c:17:22:a4:ef:ce:1a:29:c4:9e:b8:
         06:c9:56:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71shRJ4ZvuaGTaToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjY5MTFlM2ItMTRkOS00MzY3LWE4ODYtZGM0YjUyYTU3
MTgzMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWFhNWYyNjMtNTIzZC00NTgxLWE1ZDMtZGRkMTg1Nzg3NWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV+EkFSf8+66oaiyWSkeHJOLeXmpwqyjN58z
SxK6Wru2vCkElvU7hWIsmSnJQjUUM1hRBqrV00OUzp62Sf1R2vdgw8J45yhxc3NT
7GvxvjIMcxIqZCLjCjOlSjyT5HiuVtIYDnSwY0Jx2XZls//p+JIoAaA1Kotvl27c
1o8+gKelJwHshfki6lI3SrZLsoOBt1Nq3dfC9FTm+PQ8TItq3/qaxMzTiToMJFJR
t3KE92pU4Si1ifAc/+CZlBEpsUJJ4AcV6BtK5fA0+xLecWNZU6ZraDGhnrNM4Ia6
IsGxQT4aKfw3bSY/JpjBR98WjvRaXICqkxhma/xBcs0YciKvGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGgDIvU982GrPBrObqdGnvGc8shMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNjkx
MWUzYi0xNGQ5LTQzNjctYTg4Ni1kYzRiNTJhNTcxODMvODI0NTAzNzEtOTFjNy0z
NjM3LWI1OWItMDg0MGU1MTVkMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjY5MTFlM2ItMTRkOS00MzY3LWE4
ODYtZGM0YjUyYTU3MTgzL2I2OTExZTNiLTE0ZDktNDM2Ny1hODg2LWRjNGI1MmE1
NzE4My5jcmwwHwYDVR0jBBgwFoAUIueeeqJrrUk/ksq++c7HbmlHK/owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNjkxMWUzYi0xNGQ5LTQzNjctYTg4Ni1kYzRi
NTJhNTcxODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggyvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVGLou2SYfk/Bp4dUhWzfJFZCHuF62MRYMDwD8zOJ8GdSKatCHcTi5Q
zcWRMuhnrVlwJ0JVjU5CAzJ+pCHrAsq0WhwpetP3MDAAfVby3fCiOjfaOUqK2+2s
449Mi0YDC1P2gcpv4nqcU4kCkUEqee4vhS6UuQqRv4Cn/XagIbKdde4z8wxH54pe
xGkfncWGsFEtE+tAVFoyZxF0G92Ec7kpAT9W/g9UFSTZN82VS9jK8xAghxV2oLWi
GwPdkQH80F0Ucjzax2yMYyJVg1s6L8I1MR3Nr+u6nGxAO24I6IV93ZsJi5oKWqOR
CjzXq886HDV8FyKk784aKcSeuAbJVgg=
-----END CERTIFICATE-----
Generated at Thu Aug 27 08:53:06 2026 by rpki-client