Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa
File:                     c370e212-a1ea-3215-a2ef-5220722c0d21.roa (raw, json)
Hash identifier:          8VGjwe4C12la0XIENKopcNa+JsqsW+ObmUNYFO2QeHU=
Subject key identifier:   9E:65:61:7D:68:BE:3C:A9:9B:55:E8:AF:6F:ED:46:5B:A0:A7:07:D3
Certificate issuer:       /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Certificate serial:       010D0C9F4328584A5FC5E144B96412346DB95280
Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     7922
IP address blocks:        130.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:e1:44:b9:64:12:34:6d:b9:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=3d0c9b27-ab73-4a41-ba18-5b7c9b84e57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:05:5e:3e:e0:b7:38:18:f7:cd:ee:f9:94:
                    3d:3c:e9:52:9f:de:03:d6:8d:83:b5:fc:c4:fa:af:
                    40:e5:29:ed:50:d6:d6:d7:5a:71:64:d4:c7:cf:9f:
                    3b:73:6f:a0:74:aa:fe:f1:b8:bf:f4:fd:86:de:7b:
                    f8:24:f3:3f:b1:e8:b1:86:95:61:cd:95:b5:72:1e:
                    f4:3a:06:26:94:d9:66:a4:25:01:18:1b:e7:e3:67:
                    f5:0c:b2:8a:71:79:7c:f9:1f:8f:df:f6:68:fd:c8:
                    a9:f9:d6:7f:55:ce:0c:06:af:c6:fe:18:e4:70:d5:
                    71:c6:3c:a6:5b:df:68:25:f7:be:9e:a1:d1:22:94:
                    06:ef:2c:82:30:5b:5b:e5:1a:c3:24:c5:25:74:f6:
                    87:1f:c0:03:a9:79:0f:0b:94:88:18:22:19:1b:72:
                    6d:a7:ef:e2:4a:a9:e8:43:e5:68:1e:f8:f9:60:44:
                    93:09:97:0f:e3:e1:cd:e4:4f:1d:5f:99:1d:85:09:
                    73:44:13:e6:3c:51:ab:ba:e0:03:a4:e5:e2:ed:4a:
                    65:39:06:d0:70:1b:c8:8c:6c:47:0e:d9:1a:40:bd:
                    c3:4d:c1:d8:a4:c6:34:fe:6f:dc:88:c3:44:5f:c2:
                    32:58:81:d2:92:7e:26:4c:f3:33:7e:86:ac:e8:8f:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:65:61:7D:68:BE:3C:A9:9B:55:E8:AF:6F:ED:46:5B:A0:A7:07:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl

            X509v3 Authority Key Identifier:
                keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:72:7c:61:55:35:f3:75:2a:53:ff:d6:68:1f:9a:63:ff:46:
         07:c7:e5:ac:e5:f7:cb:fb:55:11:46:bb:05:4a:a8:4c:c6:c6:
         ba:93:43:22:d8:16:f5:01:b1:42:e4:81:58:3c:df:d1:32:7c:
         a1:4c:74:21:82:ca:7c:58:d2:a6:df:94:38:67:f0:39:51:f9:
         86:6c:4d:b9:5a:6b:29:22:c9:5c:88:0f:ba:70:4a:95:a0:fe:
         7c:8b:7f:dd:81:fb:8d:2b:52:37:38:6f:6c:e4:a1:fb:39:9a:
         d2:c3:82:5e:1f:3c:64:30:e6:b7:46:94:0f:f5:07:fa:1e:4f:
         2f:c7:3b:f2:ca:b5:a0:2b:33:62:7f:93:f2:a2:72:a2:92:f9:
         12:a2:e6:17:f0:c5:55:be:e1:3a:a1:a0:b3:d5:84:61:23:c4:
         c1:1b:72:3b:bf:ec:05:d4:e7:c7:e3:36:f8:5f:5b:de:41:af:
         97:88:d6:1e:19:fc:18:c0:d8:67:f8:07:f5:e4:26:1e:01:30:
         03:71:a8:ff:2d:1b:5a:79:3c:a8:8e:c9:9b:0a:06:3c:76:18:
         0a:9e:a8:e0:01:e2:09:6a:3f:74:ff:96:02:1b:09:dd:22:39:
         25:58:9f:8f:d4:e6:b5:76:5f:bb:a9:0b:8d:a2:81:90:aa:0f:
         8d:da:41:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:39:42 2025 by rpki-client