Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1ff14226-6b7a-3e35-90c2-f5e5b37c64d4.roa
File:                     1ff14226-6b7a-3e35-90c2-f5e5b37c64d4.roa (raw, json)
Hash identifier:          tqWmGQritQkwUX5PPrqCsFxWBl9q0gP4+mr9m80swGI=
Subject key identifier:   04:D5:BE:C0:08:93:08:A0:19:77:F2:7F:6A:F9:E5:C5:9A:50:CC:E3
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584D5F7F9EC5E72B2BFBCF9D91C0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1ff14226-6b7a-3e35-90c2-f5e5b37c64d4.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     46558
IP address blocks:        130.35.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:9e:c5:e7:2b:2b:fb:cf:9d:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=f4f2cb10-3424-4270-b158-45f99d5be820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:91:4b:f4:e1:85:d1:69:6f:ea:ff:07:cc:8f:
                    dd:67:e9:55:5c:a0:ea:7b:f1:8c:ef:8e:0a:88:c0:
                    91:0e:57:ce:77:59:9b:89:c2:25:fa:f6:51:0f:93:
                    1a:ec:b3:94:47:2c:c7:28:68:0e:b0:15:19:03:96:
                    62:87:53:d7:10:7e:2d:f2:09:24:2f:62:f9:07:6b:
                    32:65:2a:fc:52:36:4a:83:af:86:27:62:da:a0:82:
                    16:4b:80:c9:8b:98:87:e1:3f:ed:5a:40:d1:e7:bd:
                    76:7b:cb:bf:fb:ca:47:e1:c4:94:b0:01:3a:de:9d:
                    cc:51:ad:32:38:fd:63:8b:90:69:02:9f:64:b5:0b:
                    d4:25:ff:27:97:46:95:16:d9:12:d5:e3:1c:3a:ac:
                    76:ba:4f:27:03:e9:08:14:63:c4:c5:84:f3:59:5f:
                    87:bd:a6:ab:21:90:29:1d:39:b5:14:e4:9f:25:59:
                    d2:54:5a:ce:65:e2:cb:c6:29:15:ca:d2:01:9c:17:
                    64:66:ca:31:a5:5b:a6:ac:e5:c3:20:79:ad:93:9f:
                    07:88:2a:36:38:b3:61:68:4a:cd:1c:83:a8:11:28:
                    63:6d:51:99:2f:62:72:6a:bd:ed:fa:51:4e:bd:04:
                    45:3c:f3:96:70:03:6b:71:14:31:e5:c6:cd:58:a5:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D5:BE:C0:08:93:08:A0:19:77:F2:7F:6A:F9:E5:C5:9A:50:CC:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/1ff14226-6b7a-3e35-90c2-f5e5b37c64d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:68:ac:6b:64:66:e2:83:a6:1e:c6:d8:88:9f:ba:91:02:68:
         34:84:ba:9b:32:86:73:57:82:65:14:36:1e:13:27:e8:58:4e:
         7d:d2:9c:fc:f0:25:7d:87:7a:7b:9e:fe:e0:ec:25:ab:b7:55:
         54:6f:aa:fe:e3:10:36:e9:40:cd:de:48:9d:39:b6:6d:95:9b:
         04:e3:a7:e7:e1:c0:aa:f3:97:72:4a:ac:70:ef:e3:81:3a:06:
         07:f7:c2:8d:ca:f4:5a:29:e3:05:a6:3a:97:a4:49:16:9d:24:
         6c:ac:90:71:6d:1d:90:5b:11:08:24:22:48:ab:6e:15:a3:57:
         c7:33:2f:f5:d5:02:8c:20:25:ea:2b:de:29:57:11:ee:3a:04:
         50:e7:81:56:64:49:d9:1c:49:01:ec:56:db:6a:52:34:8f:95:
         76:b1:4b:06:96:03:02:de:e3:6b:74:f3:b4:88:13:b1:6b:b6:
         7c:98:e1:bb:3f:17:8b:b3:8a:08:78:c8:b1:e0:af:6a:ea:b9:
         60:c2:ea:b8:7b:bb:b3:75:49:54:49:c9:b2:40:fd:28:7c:d1:
         87:fe:fc:94:40:3d:ea:22:9a:5e:29:cc:14:02:ae:cc:64:76:
         09:d8:cf:63:91:13:bf:e1:c7:11:6a:35:65:7d:90:01:30:9b:
         47:1d:d4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:18:54 2026 by rpki-client