Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/83a95b3b-b608-366e-aef0-2f73ad880fcb.roa
File:                     83a95b3b-b608-366e-aef0-2f73ad880fcb.roa (raw, json)
Hash identifier:          +AVmIKowKq14p3ToeaBlHWrAr4sRAecLJUnAWkLlQyw=
Subject key identifier:   4E:0B:B8:41:55:30:1D:C2:2B:A5:15:7F:4C:DE:F2:CD:33:AB:0C:1C
Certificate issuer:       /CN=b9fac4f6-e4ac-4623-b29e-def6eb599d08
Certificate serial:       010D0C9F4328584F58F7E596660D4A8D37B1EF80
Authority key identifier: 35:3C:B8:E4:9F:44:C9:C9:BD:56:B2:1F:0B:DC:81:55:48:DD:01:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/83a95b3b-b608-366e-aef0-2f73ad880fcb.roa
Signing time:             Wed 30 Sep 2026 14:26:04 +0000
ROA not before:           Wed 30 Sep 2026 14:26:04 +0000
ROA not after:            Tue 29 Dec 2026 15:26:04 +0000
asID:                     2914
IP address blocks:        130.12.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/b9fac4f6-e4ac-4623-b29e-def6eb599d08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/b9fac4f6-e4ac-4623-b29e-def6eb599d08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:f7:e5:96:66:0d:4a:8d:37:b1:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9fac4f6-e4ac-4623-b29e-def6eb599d08
        Validity
            Not Before: Sep 30 14:26:04 2026 GMT
            Not After : Dec 29 15:26:04 2026 GMT
        Subject: CN=53e1400a-db0a-4389-9379-992a7bda1b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:eb:84:12:12:43:66:44:8b:ef:1e:cf:3d:
                    0d:2b:cc:70:ed:ac:1d:a9:8c:a2:0c:f5:2c:ea:8f:
                    82:ac:17:c2:82:ed:1a:bf:6c:b3:cd:50:99:7e:b8:
                    72:c7:f6:5a:eb:df:2e:7c:5f:ee:09:52:a9:87:0c:
                    ae:9f:0b:cc:26:30:de:40:eb:2f:67:8a:33:83:3d:
                    6e:27:ce:c6:9a:4f:f5:89:a3:d4:8b:27:db:d6:35:
                    7b:26:c1:cf:5a:65:e6:72:fc:75:68:ce:dc:7c:cc:
                    cf:73:3a:f4:d7:86:99:80:b5:2d:32:39:93:18:5b:
                    9f:e2:66:d3:b3:ae:e2:5c:7a:a0:d8:1e:16:3c:fb:
                    94:58:7f:67:63:09:e0:d9:53:c9:19:c5:e4:63:6b:
                    41:be:0a:d1:59:03:ef:16:c2:b8:65:30:26:57:fa:
                    b9:61:c3:09:f3:7a:b9:bf:fa:6c:58:2f:73:ce:ff:
                    9a:2e:11:a4:55:c1:51:09:19:82:1c:0b:25:f1:f1:
                    37:27:2f:3a:3a:4c:15:7e:c1:4d:eb:49:8a:e5:98:
                    94:ee:4f:9f:4f:52:7d:88:10:c9:d1:4a:de:ff:aa:
                    51:c0:a8:0f:aa:f4:df:4e:ed:26:0e:70:53:3c:d4:
                    8b:7e:e0:55:25:79:70:71:33:48:b6:37:f2:0f:9b:
                    22:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0B:B8:41:55:30:1D:C2:2B:A5:15:7F:4C:DE:F2:CD:33:AB:0C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/83a95b3b-b608-366e-aef0-2f73ad880fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08/b9fac4f6-e4ac-4623-b29e-def6eb599d08.crl

            X509v3 Authority Key Identifier:
                keyid:35:3C:B8:E4:9F:44:C9:C9:BD:56:B2:1F:0B:DC:81:55:48:DD:01:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9fac4f6-e4ac-4623-b29e-def6eb599d08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7c:b0:45:b2:f2:06:52:64:a4:94:7b:e1:96:d7:14:95:ed:
         57:50:9a:7a:92:d5:26:2a:46:80:80:13:52:47:84:77:24:89:
         40:ed:45:f4:bc:42:9a:cc:ad:48:95:d8:b6:d8:f0:f8:0b:3b:
         c6:67:44:8c:62:71:7d:1e:e6:f0:a6:e0:e1:72:a0:a4:6a:91:
         08:a2:49:ad:c5:bd:fe:fc:ea:1a:a5:52:fc:1d:2c:d5:b5:f2:
         00:49:07:c1:e7:f9:4c:d2:5a:c6:53:bf:6b:2d:c2:df:a9:5e:
         10:41:bd:47:95:02:fa:a3:1f:ec:02:00:b8:89:70:82:60:a7:
         a3:f6:a3:b7:79:5d:5f:48:8d:f8:23:85:49:a0:3a:86:38:14:
         51:b4:af:84:63:9e:84:e3:2c:fa:5e:98:17:82:19:8f:c8:57:
         26:04:2a:95:2d:ff:c7:bc:7c:f6:bd:bd:eb:57:a8:a4:9b:ae:
         00:81:22:79:02:b9:93:63:26:6c:80:85:fc:d8:08:c2:e4:79:
         d5:7f:07:46:c2:08:9d:66:72:14:d3:60:45:1a:b9:a3:9a:d8:
         a0:4e:0e:9b:fa:20:43:e6:c2:ae:00:b3:e7:b0:ef:4a:27:77:
         78:01:20:e1:47:25:bf:0c:5a:1c:74:8a:1b:1a:6f:cf:28:58:
         ae:df:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:38 2026 by rpki-client