Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/fb150df4-2613-33cd-9b99-77493f700639.roa
File:                     fb150df4-2613-33cd-9b99-77493f700639.roa (raw, json)
Hash identifier:          t2k45gAF+VwtX4hgAHBMwMksrm4Ua5ZGyNRbNKoEd50=
Subject key identifier:   65:F9:E9:6E:7D:94:25:01:DB:06:2A:00:98:9B:4E:47:7C:CE:74:DE
Certificate issuer:       /CN=cfd19080-dcb6-4ec7-82bd-8ac83510c492
Certificate serial:       010D0C9F4328584F86DD9D38A595E85EC1396200
Authority key identifier: 81:20:02:8B:31:FF:8B:40:BF:2D:78:2D:9F:E4:29:63:8E:CC:F8:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/fb150df4-2613-33cd-9b99-77493f700639.roa
Signing time:             Sat 17 Oct 2026 01:00:13 +0000
ROA not before:           Sat 17 Oct 2026 01:00:13 +0000
ROA not after:            Fri 15 Jan 2027 02:00:13 +0000
asID:                     401294
IP address blocks:        130.12.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/cfd19080-dcb6-4ec7-82bd-8ac83510c492.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/cfd19080-dcb6-4ec7-82bd-8ac83510c492.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:dd:9d:38:a5:95:e8:5e:c1:39:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd19080-dcb6-4ec7-82bd-8ac83510c492
        Validity
            Not Before: Oct 17 01:00:13 2026 GMT
            Not After : Jan 15 02:00:13 2027 GMT
        Subject: CN=639c7f70-26a3-42bf-8445-227fdbc2e104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:71:78:fb:b6:70:26:42:ec:a4:30:d7:81:
                    c5:5f:72:e1:56:a6:e8:ac:5f:4f:a1:eb:80:81:38:
                    85:19:6b:36:cd:65:1c:ee:cd:9f:cb:9f:ea:2a:e1:
                    1f:be:cf:54:b3:68:7a:cc:70:7b:a8:f2:71:1c:77:
                    09:4f:16:e3:e6:58:ad:8d:ad:0b:5f:da:8f:56:16:
                    c4:3a:78:a5:01:d9:70:cb:72:e2:da:2b:7c:14:d2:
                    55:6e:10:77:5e:5e:d7:9f:ac:17:3f:c9:53:13:64:
                    48:3e:a9:fd:6c:db:38:cb:ed:b6:e6:29:47:ec:c1:
                    6b:47:af:82:77:dc:dd:21:85:8b:bb:06:31:b3:72:
                    de:cb:28:27:d6:82:7d:76:3b:72:e7:07:cd:14:20:
                    bc:6f:59:6c:73:0e:1e:9a:a9:8d:7a:0f:52:86:13:
                    97:d2:64:4f:ce:c8:83:36:54:85:be:37:14:08:97:
                    94:82:ba:c2:53:a2:90:4c:14:57:1c:99:07:28:ca:
                    7d:ca:bf:28:00:88:b9:fb:1b:22:f3:f4:4d:e5:5c:
                    ac:50:e4:68:42:7b:12:9f:1b:e0:f9:7e:5d:0d:f0:
                    16:dd:f4:0a:16:c9:29:03:79:f8:39:45:a1:4e:02:
                    91:46:4a:e1:be:e8:81:c9:d6:c5:23:a9:28:96:a9:
                    81:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F9:E9:6E:7D:94:25:01:DB:06:2A:00:98:9B:4E:47:7C:CE:74:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/fb150df4-2613-33cd-9b99-77493f700639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/cfd19080-dcb6-4ec7-82bd-8ac83510c492.crl

            X509v3 Authority Key Identifier:
                keyid:81:20:02:8B:31:FF:8B:40:BF:2D:78:2D:9F:E4:29:63:8E:CC:F8:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:fc:c0:b5:4a:15:ee:85:2c:63:8a:d8:db:36:e9:05:ba:1a:
         d7:7a:11:58:ab:c6:d7:ba:8b:26:eb:1f:c0:0b:df:73:5c:99:
         6e:17:f0:c2:9e:e6:7d:de:86:62:77:6b:08:7b:25:ee:0e:20:
         f7:ac:41:6f:ce:6e:07:0c:fd:29:76:73:ff:35:40:21:74:5b:
         94:f4:57:ae:a2:69:d8:3e:d9:67:d0:0f:f9:b8:46:5d:18:f2:
         ad:d7:01:90:b5:b6:91:c7:d1:8d:32:43:48:4c:11:7b:d0:6c:
         4f:19:a9:1e:02:57:01:fd:80:53:3b:d2:5c:df:cb:3f:09:46:
         3d:84:3a:4c:62:56:0b:df:8c:e9:92:e5:98:53:20:45:be:e7:
         6d:73:8f:d7:4b:db:09:28:40:d9:2d:6a:3d:be:e5:65:06:e2:
         c2:94:98:9a:cb:64:1d:b2:53:c7:87:be:63:70:8f:80:c6:69:
         a7:48:da:50:fe:e4:75:b4:5d:7e:4f:31:06:e8:e6:3c:36:22:
         83:e3:f7:36:01:cf:e1:12:55:32:ca:64:3b:6e:bd:7a:75:43:
         03:a0:f1:c8:49:03:c2:67:3c:02:32:f8:a1:b0:da:86:27:cc:
         73:9b:89:d2:cb:25:37:d4:ff:14:6a:62:9f:40:3a:62:61:4a:
         08:6d:af:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:25:30 2026 by rpki-client