Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/ff77217b-f2ff-3766-b392-b4fd31895d99.roa
File:                     ff77217b-f2ff-3766-b392-b4fd31895d99.roa (raw, json)
Hash identifier:          bSuY+Q+FYx+NAAEj2lCDCBAaH2iR/DjxgSzG9PyJ9aw=
Subject key identifier:   BA:B3:EF:3F:5D:7F:73:1A:2E:50:42:E4:6F:09:E3:42:D1:25:88:D5
Certificate issuer:       /CN=7ae65634-ea60-4e81-b4f1-309c9aa6bc2a
Certificate serial:       010D0C9F4328584EAFE6F8AB353C00E2CA397D40
Authority key identifier: C1:29:7B:36:8E:A8:37:B2:9C:C0:02:2D:37:41:46:E4:A4:B6:07:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/ff77217b-f2ff-3766-b392-b4fd31895d99.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     40676
IP address blocks:        130.51.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f8:ab:35:3c:00:e2:ca:39:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae65634-ea60-4e81-b4f1-309c9aa6bc2a
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=b683c217-dfbd-4947-8c98-377594d6ddbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:57:76:7e:a5:7a:0d:92:19:92:9b:8f:84:
                    91:9a:78:00:46:25:a7:00:00:9a:dd:93:8e:25:9a:
                    ac:e9:9e:eb:24:81:f1:38:2f:3f:8e:d1:56:35:93:
                    c8:0a:38:03:7b:9c:6d:3b:e2:c2:98:ee:d3:f8:82:
                    13:90:49:c1:fb:e8:9b:6a:ca:f3:38:7d:19:7f:2d:
                    f5:64:71:3b:02:9d:c1:0c:4f:3c:5b:5a:fd:5c:d2:
                    22:0d:69:30:e4:46:de:04:7c:cb:b6:36:50:4e:33:
                    54:05:05:21:15:74:88:97:bb:18:33:a1:3c:b7:b4:
                    27:b1:1b:f7:f1:74:ec:51:47:4f:e2:6b:53:2c:7b:
                    5b:9d:1c:f6:07:98:4d:03:c7:05:60:70:14:be:43:
                    db:4b:4d:46:58:4c:bf:24:9b:41:ca:11:e7:40:34:
                    40:e4:11:df:c1:50:6b:5b:9b:78:de:45:3d:4e:98:
                    c4:a2:a8:85:82:a3:49:4c:f6:17:de:0b:1f:b9:2f:
                    59:86:48:ac:5f:35:ac:0f:2a:0c:9f:59:8f:0f:04:
                    82:25:e2:e3:cf:15:2a:5b:69:c0:4a:69:86:53:18:
                    1f:ff:ba:50:81:a4:d6:80:c6:d6:fc:6a:8a:20:c1:
                    88:7f:1b:9f:40:21:4b:7f:ec:dd:be:b2:62:1d:3d:
                    2c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B3:EF:3F:5D:7F:73:1A:2E:50:42:E4:6F:09:E3:42:D1:25:88:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/ff77217b-f2ff-3766-b392-b4fd31895d99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.crl

            X509v3 Authority Key Identifier:
                keyid:C1:29:7B:36:8E:A8:37:B2:9C:C0:02:2D:37:41:46:E4:A4:B6:07:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:28:b9:0b:9e:79:57:e0:2a:bf:c1:79:61:d6:3a:ed:0f:b8:
         08:b7:bb:44:e2:9e:52:cd:f7:89:68:e3:48:6a:67:e7:7c:9f:
         0d:39:d8:2d:fc:79:72:22:f6:08:9b:18:2e:16:d4:d1:3e:1b:
         48:e4:84:cb:eb:2b:da:68:c8:05:1f:4f:ce:53:d4:83:a6:7e:
         99:f2:44:fc:34:c6:0c:7a:d7:d0:d2:8d:24:c3:b3:1e:31:02:
         9b:90:44:4a:df:8b:06:8a:75:f7:5b:25:de:77:8f:91:67:70:
         84:64:a3:f4:6a:57:c9:72:ad:3d:1d:ac:ca:e0:9f:1c:ad:fd:
         a2:5d:3f:23:0a:25:81:9e:69:13:80:60:05:42:55:27:f5:44:
         01:75:b6:be:d7:32:6a:f8:cf:89:64:9a:b0:82:5f:14:53:24:
         2c:06:9d:83:23:86:2e:52:7b:21:79:df:8a:be:8d:ab:4d:a7:
         8c:18:0c:82:ad:82:e0:e2:d7:ef:bf:39:b5:c2:b5:c9:e6:0b:
         2b:6b:54:08:b5:e4:a6:74:70:a5:f7:76:3d:a8:7b:1b:97:0d:
         fa:f1:74:5e:0d:aa:a8:b5:89:df:d5:99:3f:a8:1e:18:81:a2:
         89:50:47:ff:4c:99:92:55:a4:5c:3f:77:7c:d6:e7:7f:2b:f5:
         7c:87:6d:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5virNTwA4so5fUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FlNjU2MzQtZWE2MC00ZTgxLWI0ZjEtMzA5YzlhYTZi
YzJhMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk
YjY4M2MyMTctZGZiZC00OTQ3LThjOTgtMzc3NTk0ZDZkZGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykRXdn6leg2SGZKbj4SRmngARiWnAACa3ZOO
JZqs6Z7rJIHxOC8/jtFWNZPICjgDe5xtO+LCmO7T+IITkEnB++ibasrzOH0Zfy31
ZHE7Ap3BDE88W1r9XNIiDWkw5EbeBHzLtjZQTjNUBQUhFXSIl7sYM6E8t7QnsRv3
8XTsUUdP4mtTLHtbnRz2B5hNA8cFYHAUvkPbS01GWEy/JJtByhHnQDRA5BHfwVBr
W5t43kU9TpjEoqiFgqNJTPYX3gsfuS9ZhkisXzWsDyoMn1mPDwSCJeLjzxUqW2nA
SmmGUxgf/7pQgaTWgMbW/GqKIMGIfxufQCFLf+zdvrJiHT0shQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqz7z9df3MaLlBC5G8J40LRJYjVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83YWU2
NTYzNC1lYTYwLTRlODEtYjRmMS0zMDljOWFhNmJjMmEvZmY3NzIxN2ItZjJmZi0z
NzY2LWIzOTItYjRmZDMxODk1ZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvN2FlNjU2MzQtZWE2MC00ZTgxLWI0
ZjEtMzA5YzlhYTZiYzJhLzdhZTY1NjM0LWVhNjAtNGU4MS1iNGYxLTMwOWM5YWE2
YmMyYS5jcmwwHwYDVR0jBBgwFoAUwSl7No6oN7KcwAItN0FG5KS2BxswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83YWU2NTYzNC1lYTYwLTRlODEtYjRmMS0zMDlj
OWFhNmJjMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjN4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQouQueeVfgKr/BeWHWOu0PuAi3u0TinlLN94lo40hqZ+d8nw052C38
eXIi9gibGC4W1NE+G0jkhMvrK9poyAUfT85T1IOmfpnyRPw0xgx619DSjSTDsx4x
ApuQRErfiwaKdfdbJd53j5FncIRko/RqV8lyrT0drMrgnxyt/aJdPyMKJYGeaROA
YAVCVSf1RAF1tr7XMmr4z4lkmrCCXxRTJCwGnYMjhi5SeyF534q+jatNp4wYDIKt
guDi1++/ObXCtcnmCytrVAi15KZ0cKX3dj2oexuXDfrxdF4Nqqi1id/VmT+oHhiB
oolQR/9MmZJVpFw/d3zW538r9XyHbfw=
-----END CERTIFICATE-----
Generated at Thu Aug 20 00:06:55 2026 by rpki-client