Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a/2c3400f3-428d-306a-a621-4e348aaf97ff.roa
File:                     2c3400f3-428d-306a-a621-4e348aaf97ff.roa (raw, json)
Hash identifier:          oXL0mD/ejVHKn5w6jon9bBtVEm89eP54Xy+0PNFqIM8=
Subject key identifier:   22:06:A7:62:9B:BF:43:4B:C8:52:2A:2A:38:76:32:B9:76:00:D9:ED
Certificate issuer:       /CN=1809326d-8c91-47b1-be9a-e8e2c68d488a
Certificate serial:       010D0C9F4328584EA798CA9D2BF9E826A2ABC190
Authority key identifier: 42:27:CA:97:E9:B8:5A:7D:79:9F:3A:27:26:88:D7:11:D7:9B:AB:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a/2c3400f3-428d-306a-a621-4e348aaf97ff.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401270
IP address blocks:        130.12.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a/1809326d-8c91-47b1-be9a-e8e2c68d488a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a/1809326d-8c91-47b1-be9a-e8e2c68d488a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:ca:9d:2b:f9:e8:26:a2:ab:c1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1809326d-8c91-47b1-be9a-e8e2c68d488a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=feba7dcc-54fc-4aba-b4f6-86a0d60c6005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:65:46:f2:a5:0c:b3:65:0c:cc:4f:8b:b4:0b:
                    cd:a1:c2:71:63:42:b2:fe:a0:8b:cb:04:de:d4:b9:
                    f4:18:3a:e9:9c:e8:3b:16:4c:4f:3b:58:f1:08:89:
                    27:2c:04:82:77:9c:cb:f1:d4:db:9b:35:a1:0d:4d:
                    06:6f:96:23:05:c8:cf:a8:07:c7:48:16:e2:03:a9:
                    a8:ff:6b:6e:ff:e6:fd:37:91:95:e6:06:0d:67:c4:
                    87:fd:a1:75:60:ff:f6:5b:6d:70:25:97:35:47:74:
                    9b:4b:e9:0d:11:ff:6a:a0:01:21:f8:02:43:1a:04:
                    a9:a2:e9:e4:b1:ca:0f:18:c4:a2:35:51:7a:58:69:
                    ec:1b:c0:1a:79:de:35:eb:ce:57:ab:b1:9e:f4:9b:
                    a4:db:c4:62:f0:b7:87:a4:93:95:a4:86:62:18:fe:
                    2b:82:52:3b:54:53:f6:2b:00:e2:f8:c4:77:d2:81:
                    53:a9:38:d4:4b:8e:9c:fc:c2:e2:54:de:26:9f:a8:
                    7b:85:d7:20:9e:17:ac:0a:a2:a1:9d:c6:6e:67:43:
                    59:15:ee:ab:a9:f1:07:e9:27:ca:4c:8e:64:81:05:
                    a5:43:b4:34:f8:52:fe:bf:75:ce:6e:4b:70:44:64:
                    27:73:a1:c2:dc:43:48:84:9c:51:ea:db:c7:f7:45:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:06:A7:62:9B:BF:43:4B:C8:52:2A:2A:38:76:32:B9:76:00:D9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a/2c3400f3-428d-306a-a621-4e348aaf97ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a/1809326d-8c91-47b1-be9a-e8e2c68d488a.crl

            X509v3 Authority Key Identifier:
                keyid:42:27:CA:97:E9:B8:5A:7D:79:9F:3A:27:26:88:D7:11:D7:9B:AB:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:5e:7a:d0:9f:dc:ef:8c:f9:53:a4:ed:c7:19:2b:c3:9b:
         2a:c0:09:4a:0c:b3:04:f5:bf:a5:e0:5b:e7:02:77:19:d3:e9:
         9f:30:6e:ac:92:d9:27:9e:dd:2b:c7:f8:33:8b:e9:db:2a:a4:
         3e:0b:45:34:98:f2:08:97:7a:bc:88:58:42:4b:07:e7:a0:73:
         4a:a8:22:64:de:e1:13:09:61:6e:9d:86:32:fa:6c:ad:ec:8c:
         d7:2f:76:4a:cc:a2:9b:86:1f:df:b2:0c:41:48:3a:22:4d:22:
         d2:27:16:c1:b7:f1:25:9a:6c:46:da:34:3c:37:fa:47:ae:87:
         3b:a4:5f:c7:89:2b:9e:50:f1:63:38:ab:78:0f:06:0e:78:63:
         9c:a2:a0:0f:39:0d:fb:29:b0:ab:60:62:4b:d8:49:56:11:29:
         ed:5f:b0:a1:c9:c7:40:ba:f5:b5:26:61:65:59:a8:4f:0f:88:
         04:44:66:cb:ce:85:9e:71:8a:86:83:00:fa:8e:8b:b5:47:73:
         94:25:4f:b4:b3:f3:8e:0c:e1:19:76:68:36:4d:b9:71:a7:78:
         2a:8d:8b:9a:6c:70:02:5f:c0:19:92:46:65:0a:97:2e:27:a1:
         bd:2d:c2:95:1b:96:0e:22:ba:bb:f7:23:6e:85:27:db:00:c4:
         bf:dd:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:10:46 2026 by rpki-client