Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/b6814169-6fdf-3918-889f-02c1d1b531e6.roa
File:                     b6814169-6fdf-3918-889f-02c1d1b531e6.roa (raw, json)
Hash identifier:          DuB5+3GdIsn7DCk/eOD5OXvj1tgUgCn0qHVAMIojyFg=
Subject key identifier:   A1:08:1B:0B:BB:EC:C1:B3:89:25:74:7D:C7:B3:D2:EB:72:F8:B4:0F
Certificate issuer:       /CN=d445edaf-9a6f-4523-9772-3e1b997c1a4b
Certificate serial:       010D0C9F4328584E3B94690D32C694CB61AE0280
Authority key identifier: DD:1D:3C:4F:CD:FF:BF:00:E2:C7:88:65:3C:E8:64:20:46:E1:C1:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/b6814169-6fdf-3918-889f-02c1d1b531e6.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     151612
IP address blocks:        130.12.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/d445edaf-9a6f-4523-9772-3e1b997c1a4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/d445edaf-9a6f-4523-9772-3e1b997c1a4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:69:0d:32:c6:94:cb:61:ae:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d445edaf-9a6f-4523-9772-3e1b997c1a4b
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=66295c0e-2927-4994-ac95-e08741285be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:31:26:52:34:ac:45:3b:bd:b9:62:3e:31:a4:
                    fa:da:22:bd:7c:f7:8a:29:79:8f:f1:e0:e4:c6:ea:
                    25:b6:8d:43:db:45:15:a6:e4:55:dc:99:7a:a5:de:
                    19:0c:7b:14:35:30:b6:ed:80:64:43:9e:82:45:4d:
                    70:01:5a:ff:32:74:8e:8b:68:41:8f:de:c2:42:da:
                    9b:46:fa:9e:22:ec:6b:e8:38:8b:5f:e8:9e:e4:68:
                    13:f3:d8:40:91:8e:5b:2f:72:ae:89:98:16:93:0b:
                    e8:01:76:b6:5a:e2:8f:23:04:f1:6f:b8:e6:b6:d7:
                    18:aa:f8:f8:21:12:e2:1e:66:4f:7d:af:33:84:d8:
                    16:48:b1:f6:7d:b8:79:b1:8b:2a:72:51:44:42:78:
                    1d:f0:93:f6:a8:08:6b:da:cc:36:99:1b:07:f0:0a:
                    01:de:d5:1a:fd:08:9d:7c:25:5e:3d:88:b0:74:5d:
                    27:22:0f:84:bc:c9:10:05:8d:64:aa:b8:a0:32:8a:
                    40:fa:52:9f:4e:fa:8f:49:69:0f:86:18:05:68:b9:
                    15:45:17:d9:c7:67:2f:b3:8e:c0:6b:59:0b:90:57:
                    f9:1b:b9:fe:9a:c6:e4:c2:50:bc:a7:02:56:d6:07:
                    b4:00:b3:5e:6a:71:ab:20:2b:8f:02:89:7e:a2:d8:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:08:1B:0B:BB:EC:C1:B3:89:25:74:7D:C7:B3:D2:EB:72:F8:B4:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/b6814169-6fdf-3918-889f-02c1d1b531e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b/d445edaf-9a6f-4523-9772-3e1b997c1a4b.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1D:3C:4F:CD:FF:BF:00:E2:C7:88:65:3C:E8:64:20:46:E1:C1:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d445edaf-9a6f-4523-9772-3e1b997c1a4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b5:ed:f4:c8:0c:a1:37:54:78:c0:f1:9d:fa:eb:a6:a6:da:
         8d:33:6b:03:54:6b:e8:44:ef:05:37:af:34:8f:9e:16:54:9d:
         3d:0f:e9:19:fe:a0:f5:b1:2a:4b:67:4e:75:04:71:9f:44:c3:
         54:0b:20:80:15:f5:5a:e1:47:db:f0:22:0f:48:ec:49:a3:17:
         b8:ac:b7:13:60:ff:9b:69:c4:0f:00:ee:ca:56:05:1e:fb:33:
         6d:26:65:ed:8f:cb:7a:91:81:2e:12:fe:21:46:8c:35:e1:1f:
         ce:3d:21:bf:d0:15:fb:39:56:0a:52:be:1c:89:ed:27:d5:c8:
         03:3a:08:a6:78:35:47:1b:f1:45:13:eb:43:bb:7a:97:ea:1f:
         8e:ba:ac:ae:44:0e:d3:0c:03:1e:87:ce:ec:7a:49:11:ef:a5:
         42:cb:a9:15:82:a2:51:ff:fe:29:0b:e0:de:45:04:1d:79:6c:
         3b:dd:42:4e:a7:42:52:a1:ec:cb:91:45:7c:15:59:91:7f:2b:
         54:d1:f9:10:91:8a:e2:ef:ef:ce:c1:2e:79:b2:22:1f:c8:01:
         13:54:9c:fb:10:80:50:81:4f:7f:8a:2f:14:d9:48:f0:c5:43:
         3e:43:d5:db:35:3a:a5:b9:8b:a3:86:6a:fd:97:22:48:07:fc:
         13:d7:d3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:25:29 2026 by rpki-client