Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa
File:                     c370e212-a1ea-3215-a2ef-5220722c0d21.roa (raw, json)
Hash identifier:          El86E8GGEuCwbykhRqoGWrzvojPYOZQRGfXyCfTkQMk=
Subject key identifier:   A2:A2:7B:F9:BC:4A:17:2E:FC:6C:50:4C:5E:74:24:41:ED:5F:06:B7
Certificate issuer:       /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Certificate serial:       010D0C9F4328584F49740C442E99E1CDABA8A140
Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7922
IP address blocks:        130.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:0c:44:2e:99:e1:cd:ab:a8:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=144ffa9c-3e30-4bc8-b29e-551fa0f37e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:70:32:e8:db:1e:b0:98:41:39:5b:32:a5:22:
                    20:92:91:53:de:28:21:5b:19:88:dd:17:aa:42:b5:
                    f9:71:a7:fb:f5:ce:61:6d:a2:b2:80:5b:57:e7:78:
                    b4:44:4e:f0:cd:db:8a:1e:32:ec:b5:25:77:e3:3b:
                    c1:2e:68:50:8f:b7:e5:37:41:cb:a4:df:5e:4d:e7:
                    3d:4c:99:be:16:99:cb:00:46:8c:a8:a8:66:71:8a:
                    b8:6c:a1:4a:42:0b:58:99:be:8a:26:c0:4f:4f:83:
                    7b:6e:58:8b:9c:47:c1:5c:d5:d0:1b:a7:3b:52:3c:
                    f5:7e:7b:c8:5f:b4:c8:9f:1e:ed:5d:dd:1f:03:d5:
                    58:c7:ea:8a:5e:a7:58:92:06:4d:4b:ff:87:27:52:
                    f4:9c:64:06:68:78:c1:80:a9:78:37:49:03:87:e7:
                    49:22:a3:99:fe:6e:cf:f6:90:be:ab:f0:1c:db:18:
                    a8:1c:03:2e:80:b6:84:40:8b:71:62:6f:74:d0:8e:
                    20:ee:ee:a8:0c:52:a8:00:92:a6:bf:5d:21:d9:1e:
                    4c:86:66:94:dd:73:07:d0:39:8f:08:78:d9:54:20:
                    9a:ba:da:6d:15:fa:c8:ef:82:2f:7b:c6:c6:61:a2:
                    9a:9b:e8:71:07:57:7c:3a:ad:6d:82:eb:d7:99:0d:
                    b6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A2:7B:F9:BC:4A:17:2E:FC:6C:50:4C:5E:74:24:41:ED:5F:06:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl

            X509v3 Authority Key Identifier:
                keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e1:cc:cf:dc:63:b7:7a:c3:ed:30:47:7c:49:21:e2:ae:fa:
         aa:8c:1d:73:4d:15:f0:f4:03:a2:55:1e:12:39:49:ec:a5:9c:
         ad:2a:44:ba:b5:09:f5:50:fb:8e:48:fb:1d:55:f7:3d:c6:a9:
         8d:f6:b8:43:7e:b0:f0:d5:25:41:22:18:3e:71:4a:6b:28:68:
         34:88:b1:70:d2:37:3b:91:5d:5b:f6:d4:2f:e1:d4:82:4f:5e:
         c6:6b:ac:ee:8d:a3:ce:6e:57:47:cf:48:be:04:44:ce:1f:6d:
         fd:1d:cd:cc:8d:de:26:93:f3:52:06:1a:59:8d:c7:fa:70:39:
         6c:ef:bf:15:8c:63:eb:98:a0:02:35:c7:bb:c9:05:66:88:44:
         15:d1:af:30:79:eb:07:ee:79:db:62:22:aa:cc:bd:d9:ac:4e:
         d3:3c:f8:2c:2a:ae:15:32:d8:6f:a9:ab:05:c0:57:5b:2b:ff:
         8c:28:92:33:63:d8:23:e6:bc:fc:28:4d:a9:71:9e:1d:ed:5a:
         73:4c:2b:55:8c:09:c9:a4:92:63:84:9b:10:d1:2c:04:01:46:
         97:36:6f:ae:a2:73:a5:65:70:82:5a:f9:dc:3a:dc:98:99:ea:
         b9:8e:8f:99:13:36:f1:02:6b:36:6a:95:40:af:4a:30:46:1a:
         83:f8:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:22:20 2026 by rpki-client