Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/b1f9516f-a7c0-3fed-9947-ad133c893da7.roa
File:                     b1f9516f-a7c0-3fed-9947-ad133c893da7.roa (raw, json)
Hash identifier:          GF0ycAv0EfQLpM5Tvx5OLnsPVEQy4T1VSBhQpM/XoUM=
Subject key identifier:   8E:2E:D6:F9:01:8B:A3:D7:42:E8:08:AF:81:50:D9:40:E5:1E:BF:4A
Certificate issuer:       /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
Certificate serial:       010D0C9F4328584F8DD896BE5EB122E965F46980
Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/b1f9516f-a7c0-3fed-9947-ad133c893da7.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     21898
IP address blocks:        130.250.153.0/24 maxlen: 24
                          130.250.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:96:be:5e:b1:22:e9:65:f4:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=be99ec9b-9bc9-41aa-b370-9baae8e02766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d4:fb:4a:c3:e1:c9:75:55:c5:df:a8:46:da:
                    7c:bb:52:c2:5d:73:22:e5:16:27:e8:06:fb:8f:e3:
                    1b:c4:5e:a5:a5:ae:7e:9c:82:09:e3:8a:89:71:91:
                    f5:ae:8e:23:29:0a:cf:55:6b:10:30:63:01:55:47:
                    34:78:06:1d:c1:f0:ac:57:8b:49:72:1a:4c:25:b5:
                    9a:1d:58:d9:fa:2a:7c:3c:2f:6d:a8:13:79:e5:0f:
                    f0:4d:63:d3:22:97:30:29:e7:f4:03:49:49:bc:bb:
                    c4:8d:73:dc:c9:95:5c:f5:97:3f:49:d2:54:2f:20:
                    dc:25:2f:39:0f:0a:a3:35:85:7b:ab:4b:2a:11:cd:
                    ec:bd:7b:4e:c4:8b:f8:3a:20:b2:da:da:f1:98:ab:
                    6e:95:6b:d9:bf:b9:07:25:6b:78:8e:58:52:f1:34:
                    8f:00:43:4a:ef:f5:b6:58:c0:8a:c5:52:b7:91:f6:
                    c6:81:49:89:ac:78:86:c2:be:4f:48:3f:d4:df:a2:
                    be:cb:2e:95:36:2e:a4:a3:3f:a0:05:4a:8d:92:9e:
                    7c:29:96:35:43:11:2b:b6:d2:1d:9c:8f:50:42:a1:
                    24:1a:4d:20:d7:c0:a5:12:1f:2c:63:7b:ff:87:fa:
                    d5:c4:cc:e8:bf:ee:08:ee:74:89:14:49:07:47:18:
                    a7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2E:D6:F9:01:8B:A3:D7:42:E8:08:AF:81:50:D9:40:E5:1E:BF:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/b1f9516f-a7c0-3fed-9947-ad133c893da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.153.0-130.250.155.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:64:db:68:c5:cc:71:6d:90:dd:9b:2e:56:db:57:6e:1b:25:
         a8:cf:27:01:75:d3:c3:a0:94:42:8a:38:0c:92:bd:ac:00:88:
         c0:10:c3:88:53:c5:7d:5e:fe:fc:18:51:e0:65:18:79:92:92:
         6a:c4:e4:1d:29:ce:18:b9:4d:50:5a:c1:0e:ad:40:0b:79:57:
         83:2e:74:7e:2e:e3:ad:4d:76:2f:f3:9e:f3:99:85:11:4d:0b:
         08:7f:75:2f:83:85:4a:4e:63:9f:c8:eb:46:b2:54:e9:dc:20:
         0f:9b:00:7e:d2:dc:4f:d9:50:80:4f:69:aa:39:01:a9:c1:a2:
         d5:61:af:a3:1e:fa:fd:02:0f:3c:55:3f:ee:1e:03:64:27:7b:
         9c:a8:67:33:95:df:0c:b5:a1:20:aa:ec:af:d0:22:97:25:84:
         8e:24:bf:d4:25:41:9e:09:7e:4a:cb:81:7e:dc:85:fd:08:8e:
         87:e0:60:98:19:52:41:ea:66:17:c3:84:95:5e:76:a3:4e:5b:
         2f:89:b1:83:a7:ab:1b:1a:27:ae:05:96:81:39:92:c4:c3:13:
         25:60:ee:e6:93:82:2c:c5:66:0e:fa:c2:02:cf:38:33:8a:71:
         f1:d4:5e:37:18:af:f0:40:0d:d0:a1:56:30:e1:20:2c:2e:5d:
         49:c3:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:00:11 2026 by rpki-client