Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa
File:                     6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa (raw, json)
Hash identifier:          fPDPRoo9FABAjg8EhK/qVDyezibyHqval2K2jvHAD8g=
Subject key identifier:   5C:5A:D0:85:34:E4:3F:89:11:68:3D:84:8A:6C:B0:05:47:C7:69:F8
Certificate issuer:       /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Certificate serial:       010D0C9F4328584DE15077137EC1D73078788140
Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     6859
IP address blocks:        130.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:77:13:7e:c1:d7:30:78:78:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=fef5b8cc-101b-4afd-818d-3af96a8682ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d7:9a:ca:b5:b8:12:df:32:2e:f6:cb:39:69:
                    b9:32:c9:79:6e:d3:46:55:54:0a:c8:a9:19:63:35:
                    37:51:e3:37:e4:03:fb:78:bc:f2:e2:88:79:6c:58:
                    7d:3a:5e:46:40:1a:6e:9b:27:52:e3:be:b6:10:92:
                    bb:61:37:ac:61:b1:98:35:4b:99:89:57:6e:25:7a:
                    5f:94:82:fa:96:e0:74:68:e3:9e:fd:4f:d8:af:4d:
                    8f:f4:e2:16:de:59:6f:83:85:c5:d0:07:6a:54:18:
                    d0:b4:74:da:fd:a9:51:e7:e2:60:b4:e7:43:cc:56:
                    90:e7:eb:4e:f2:03:0f:43:be:aa:cc:d1:fe:26:f3:
                    34:1d:a3:df:55:0f:5b:de:c6:0f:ce:95:84:89:33:
                    a7:0d:03:07:9f:ce:4b:16:3e:c5:d3:c0:84:70:11:
                    88:be:9d:b4:c2:17:22:86:70:92:8f:e6:ab:c0:a4:
                    bf:1d:0c:de:2a:ff:97:a9:34:69:8f:57:58:9e:ba:
                    57:f3:02:92:17:0f:87:9e:70:d3:67:04:de:55:de:
                    c6:6f:a1:2a:14:13:9d:dc:2c:20:e0:d2:66:0c:1d:
                    52:b2:5c:67:90:b2:fa:e6:70:10:8e:04:3f:fc:28:
                    85:30:12:44:ab:67:98:82:52:4f:0d:20:37:a1:6e:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5A:D0:85:34:E4:3F:89:11:68:3D:84:8A:6C:B0:05:47:C7:69:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl

            X509v3 Authority Key Identifier:
                keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:fe:48:2b:2c:ad:7d:5c:d7:30:ca:b9:e2:af:28:f7:17:
         45:fd:dd:b9:0d:32:31:69:1d:5b:d3:c0:38:5d:03:ac:8f:86:
         99:3d:28:4a:75:b9:56:8d:25:24:a1:b2:ee:5c:3a:f6:9b:e1:
         2b:1c:19:31:2c:c4:f2:04:a8:e1:e2:35:9f:9a:20:fc:53:6e:
         a4:ab:41:af:01:94:24:f3:40:05:d9:bd:fc:c8:0b:6a:b6:c4:
         52:c1:6a:44:ab:b4:15:7b:c1:91:d9:ca:5d:19:81:b5:14:26:
         3d:23:7c:75:f8:fc:20:df:58:a3:75:6a:ee:66:1a:7a:c4:1a:
         df:d2:5a:0c:88:16:cc:18:ba:f1:fe:da:8e:6a:cf:e2:4e:08:
         a2:5c:31:26:e6:1e:f5:01:07:99:1c:40:c7:d7:a6:c4:08:fd:
         63:69:ad:e0:88:71:af:9f:dd:d6:a0:ea:ba:25:5d:af:5a:b2:
         c5:f1:5a:e3:65:25:a5:1f:0b:84:23:02:23:01:5e:ed:b4:33:
         c3:ee:ca:35:df:95:09:b4:d0:a1:19:22:44:4c:60:0d:1a:fc:
         9a:99:11:b8:de:f0:a2:e3:a1:26:3f:0e:02:61:a2:b3:e1:0e:
         22:ce:7d:8e:15:6f:df:f5:9f:45:a5:e1:6a:d6:0e:26:56:ae:
         1e:9f:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 19:36:45 2026 by rpki-client