Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/a227ef4a-d27a-318b-ac66-3c488a075aec.roa
File:                     a227ef4a-d27a-318b-ac66-3c488a075aec.roa (raw, json)
Hash identifier:          IyGMjYMMEUcXkwVBU2NPPqURQfrSRt0FHEQ11uhzWPQ=
Subject key identifier:   80:FD:BD:72:54:52:08:83:21:A1:30:BA:0B:B1:29:9C:76:34:2D:14
Certificate issuer:       /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
Certificate serial:       010D0C9F4328584FA42DD306D33A75FA71B3A3B0
Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/a227ef4a-d27a-318b-ac66-3c488a075aec.roa
Signing time:             Tue 27 Oct 2026 13:00:13 +0000
ROA not before:           Tue 27 Oct 2026 13:00:13 +0000
ROA not after:            Mon 25 Jan 2027 14:00:13 +0000
asID:                     400303
IP address blocks:        130.250.140.0/22 maxlen: 24
                          130.250.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:2d:d3:06:d3:3a:75:fa:71:b3:a3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
        Validity
            Not Before: Oct 27 13:00:13 2026 GMT
            Not After : Jan 25 14:00:13 2027 GMT
        Subject: CN=7f4594c5-6618-4f93-a799-18b4bf0903c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:64:f0:50:7d:9d:2d:5a:62:99:93:c9:b8:1d:
                    11:b3:d8:26:6b:9b:9c:5a:e0:b5:f6:a7:2c:86:e1:
                    49:9c:6c:e2:19:28:41:f9:45:37:e5:30:29:3d:97:
                    86:07:65:e1:8e:a6:7b:76:1d:0d:1c:06:cf:a2:88:
                    86:fa:2a:d9:6a:86:cc:27:2c:0e:53:59:12:42:f4:
                    61:9d:2e:a7:a8:d7:eb:57:c1:5a:31:ad:8b:58:88:
                    c8:dd:01:e1:60:73:4e:b3:f2:e6:1e:e9:75:1b:2d:
                    c1:72:34:59:4d:59:40:4a:1d:f6:19:70:32:9b:5d:
                    49:23:87:2d:8e:42:88:b5:7c:f1:3b:27:f3:b2:f7:
                    62:09:11:a1:d8:f7:38:8c:4e:73:bb:34:e6:bf:09:
                    4a:17:71:dc:ed:24:37:82:ad:5b:53:e7:b7:9b:d6:
                    c0:94:31:65:13:dd:32:cd:8b:54:1f:b4:95:af:6d:
                    35:e3:b8:e6:b0:bf:4c:59:5a:c2:62:3c:f9:ea:6b:
                    a9:8a:ad:41:64:ca:e8:4f:8d:57:a1:f5:59:8a:1c:
                    53:ef:2a:03:36:10:da:a7:da:d0:f2:b4:30:75:6f:
                    c3:72:70:7f:38:01:7e:82:e1:59:1d:58:7c:fb:31:
                    af:18:7e:4e:c1:8b:13:88:47:3a:4c:2c:f9:10:81:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FD:BD:72:54:52:08:83:21:A1:30:BA:0B:B1:29:9C:76:34:2D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/a227ef4a-d27a-318b-ac66-3c488a075aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.140.0/22
                  130.250.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e1:cc:dc:c7:fe:62:b6:31:2d:d4:bc:90:b0:27:9b:75:de:
         e2:d0:5b:20:8b:8f:5d:19:1b:ce:ef:dc:1a:74:bc:1c:e5:ca:
         44:a6:6f:2a:8a:eb:51:e7:74:dc:05:57:a0:2b:14:19:94:2d:
         bb:f2:03:5a:c0:46:b7:d2:27:9d:4a:de:b9:cd:fa:64:ff:e9:
         c9:78:65:59:ae:cb:7e:f1:15:82:cf:e4:7e:57:56:b6:64:5f:
         74:0c:d0:0c:25:c3:82:a9:02:cb:79:b1:54:8a:71:c4:77:7c:
         10:cd:6e:ca:f7:70:bc:67:7a:73:0f:ad:16:c5:fd:ba:53:84:
         bb:21:38:1b:be:e2:c0:f3:e8:b4:b1:0f:b7:15:d4:92:34:b1:
         91:cd:34:72:e2:83:9e:1e:ca:7f:f3:2b:86:f7:31:b2:cf:ae:
         0f:41:ce:9c:9a:21:a9:27:59:4a:84:1f:59:a8:f4:73:e4:85:
         ef:c7:69:ed:55:0a:c3:f2:f4:e8:44:1f:4c:a2:98:f7:f4:fa:
         f3:9e:4a:a5:c1:26:32:90:60:1c:31:c3:b1:e3:bb:61:af:3d:
         41:4c:44:3e:31:36:4b:36:7f:7b:bd:44:a6:fe:55:d4:ed:2a:
         59:6d:d5:1d:07:c8:e3:7c:d4:70:04:e4:1a:8a:96:26:27:57:
         17:83:22:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:34:00 2026 by rpki-client