Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98891c30-b614-4d00-9fd2-9c071a21424e/bbc9a260-7f73-3b1e-b99b-a9c4059e444f.roa
File:                     bbc9a260-7f73-3b1e-b99b-a9c4059e444f.roa (raw, json)
Hash identifier:          pGNrmfxEqZ2NlPrzbTUHIbkPZnNHkUyXBTWuBpbu+Hw=
Subject key identifier:   E1:D6:81:78:F4:A6:2E:33:98:13:E0:C8:B8:9C:5A:F0:04:22:1F:DD
Certificate issuer:       /CN=98891c30-b614-4d00-9fd2-9c071a21424e
Certificate serial:       010D0C9F4328584F85785AC896ADD3405D485198
Authority key identifier: CE:7B:95:B0:CE:4D:66:5B:14:04:9B:CA:1A:F2:EC:43:39:86:BD:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98891c30-b614-4d00-9fd2-9c071a21424e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98891c30-b614-4d00-9fd2-9c071a21424e/bbc9a260-7f73-3b1e-b99b-a9c4059e444f.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     401250
IP address blocks:        130.12.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98891c30-b614-4d00-9fd2-9c071a21424e/98891c30-b614-4d00-9fd2-9c071a21424e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98891c30-b614-4d00-9fd2-9c071a21424e/98891c30-b614-4d00-9fd2-9c071a21424e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98891c30-b614-4d00-9fd2-9c071a21424e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:5a:c8:96:ad:d3:40:5d:48:51:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98891c30-b614-4d00-9fd2-9c071a21424e
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=66480181-19f7-4432-8301-02f4d3011836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2d:40:d2:d1:6e:05:74:9e:88:01:0a:f3:92:
                    89:2c:72:6a:90:76:c9:b5:9a:50:f5:d8:04:f8:1a:
                    cc:9e:1d:c4:37:05:6b:f4:61:04:b2:0c:86:5a:2a:
                    7d:3a:98:3d:70:a7:71:91:47:15:d8:9c:70:f7:02:
                    88:8a:4a:07:63:d7:f2:37:7a:01:dc:91:9e:67:a8:
                    00:e0:b8:75:b8:bb:2c:fa:aa:1a:99:f3:4b:64:09:
                    c9:18:89:5e:06:2b:02:4a:9c:86:23:75:d8:4e:39:
                    d2:58:9d:b8:5e:ec:c7:d2:a2:51:71:8d:c2:fd:6a:
                    fd:4f:89:a2:48:e7:f1:49:ab:39:e9:3e:61:e2:78:
                    21:f3:65:12:44:c9:a2:7f:56:83:8d:1d:ed:11:39:
                    47:a6:6e:e1:64:d8:8d:63:e3:f8:ad:80:f1:96:85:
                    ef:d3:55:0d:4e:54:69:e6:95:7b:8e:dd:ba:cb:90:
                    2a:25:97:e7:3e:16:f2:da:22:37:9d:a3:ce:58:37:
                    d0:99:b9:13:33:14:e5:fe:75:d4:b9:64:0f:d2:eb:
                    55:ca:70:93:34:85:02:03:a5:e2:bf:2d:e1:02:3b:
                    71:68:ff:a8:52:e2:68:0b:5e:5e:33:61:69:7a:a3:
                    bf:05:5b:0a:32:90:47:3f:ce:d8:bc:b8:0d:1c:84:
                    03:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D6:81:78:F4:A6:2E:33:98:13:E0:C8:B8:9C:5A:F0:04:22:1F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98891c30-b614-4d00-9fd2-9c071a21424e/bbc9a260-7f73-3b1e-b99b-a9c4059e444f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98891c30-b614-4d00-9fd2-9c071a21424e/98891c30-b614-4d00-9fd2-9c071a21424e.crl

            X509v3 Authority Key Identifier:
                keyid:CE:7B:95:B0:CE:4D:66:5B:14:04:9B:CA:1A:F2:EC:43:39:86:BD:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/98891c30-b614-4d00-9fd2-9c071a21424e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a2:c7:f3:ac:71:15:78:5a:c9:c1:3b:60:c0:bb:e0:65:04:
         eb:12:61:3a:0c:7a:a6:4c:d0:57:91:f5:21:c4:f7:d1:56:34:
         64:c7:4e:6d:74:85:cb:71:67:28:2b:b5:cb:9a:d7:0e:05:3a:
         69:09:a0:b5:79:f4:25:43:e1:44:13:e6:13:a6:bd:56:46:24:
         69:dc:3d:c9:d9:07:4d:57:9d:9c:eb:36:dd:12:35:a6:7f:c9:
         0f:9a:b8:e0:20:4f:b2:e3:95:60:40:60:64:8f:a5:29:24:5b:
         2c:8d:bb:23:f6:c3:ef:af:a3:53:91:3d:23:5c:53:2b:6d:f3:
         17:38:51:75:67:20:f6:fb:bb:1b:46:a7:06:37:75:7a:d6:94:
         75:52:ac:44:5b:55:c3:7a:0f:d5:dd:bc:9e:7d:02:7c:7e:34:
         ae:da:ac:43:96:2d:66:71:ff:1f:c0:bf:55:aa:0f:ad:50:a1:
         4b:5b:b7:6f:58:03:2b:b7:82:b7:4e:0d:59:b7:ca:70:e8:09:
         d5:50:5d:d4:dc:0b:23:72:5c:4f:c9:f4:64:c2:08:06:a2:d1:
         dd:ee:f6:32:4c:0f:e7:68:be:9a:97:43:2c:c6:38:e6:f1:cd:
         6d:4c:80:db:72:ee:ef:f3:da:78:10:dd:4a:c0:24:0f:e0:f2:
         ae:7f:30:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 03:54:23 2026 by rpki-client