Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5455bf38-7af0-36a7-bdfe-c7a95193bdba.roa
File:                     5455bf38-7af0-36a7-bdfe-c7a95193bdba.roa (raw, json)
Hash identifier:          ELf9n4QfGWb4NidGmTuFqIcRHrb3y2IrZ8p9Zl2+EFc=
Subject key identifier:   F9:8B:6A:3F:53:9C:10:5C:9E:9D:09:0B:97:B7:1F:D5:14:A3:30:07
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584D5F7FA85242746628CB51E000
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5455bf38-7af0-36a7-bdfe-c7a95193bdba.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     46558
IP address blocks:        130.35.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:a8:52:42:74:66:28:cb:51:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=5f4b85d5-2ee0-46c1-97ae-96bdb5e4b10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ef:bf:17:b1:2c:53:df:40:b8:0e:76:f5:41:
                    2e:2a:fc:cb:52:9a:5d:35:9d:9f:fe:ec:3a:90:5c:
                    aa:89:44:fb:45:77:50:ee:4d:ab:96:72:83:de:b4:
                    1c:93:56:9c:d6:0b:fe:45:37:5b:00:c0:79:f3:9d:
                    9c:46:6f:5f:9c:ce:c2:f2:ff:7e:66:4e:31:a3:56:
                    37:0d:bf:10:48:3b:80:b7:20:dc:3a:20:a9:5f:a2:
                    21:85:ea:f8:f4:ab:2f:c8:70:3c:71:b5:d5:53:b4:
                    cd:64:fe:68:e0:e5:13:94:79:20:15:5d:57:b2:5c:
                    5b:55:99:ec:dd:76:0e:21:9b:b1:c8:41:92:76:56:
                    44:50:51:06:d5:e4:ba:e8:6e:94:79:9a:5a:bb:c9:
                    a9:76:5e:57:2b:53:27:8e:10:7a:ae:85:14:fc:0a:
                    6d:7f:32:49:54:d1:96:53:f9:2b:a3:5b:0e:3d:38:
                    e6:c9:3f:c4:f0:7a:8d:49:aa:aa:65:4e:06:2c:27:
                    c3:6c:b4:2c:42:8b:b9:c2:60:ad:57:f9:80:c5:53:
                    14:19:87:ed:82:32:05:00:ad:ee:ee:23:2a:26:9d:
                    87:e3:df:30:5e:e2:6e:9d:e3:cc:5e:2c:4e:7a:f7:
                    db:f9:c8:09:66:c5:0a:03:1e:7c:d9:4f:04:3b:49:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8B:6A:3F:53:9C:10:5C:9E:9D:09:0B:97:B7:1F:D5:14:A3:30:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5455bf38-7af0-36a7-bdfe-c7a95193bdba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:40:e2:1c:07:6a:0b:fc:8f:c0:9c:fa:d7:9c:6c:92:ce:4c:
         00:b2:77:52:72:cf:48:b2:a5:f9:c2:fd:80:05:10:d0:ad:c0:
         ce:12:02:53:b9:51:7d:82:96:63:04:10:c5:18:20:42:44:6f:
         38:0b:f0:57:89:22:2d:a5:d6:2e:7a:40:f6:e7:97:b9:fe:d1:
         25:30:60:25:94:cc:6f:32:78:12:1f:80:69:49:fb:b8:6a:c8:
         aa:7b:7a:ef:f8:df:c0:1e:ce:25:d9:39:04:b5:20:45:0a:14:
         a5:b7:65:4a:d4:70:8b:f9:6b:e5:ca:00:1a:12:b2:5e:0a:f7:
         50:e6:39:52:19:2b:bd:37:64:8e:0a:16:04:c5:74:56:60:74:
         84:a9:0c:f9:a7:27:56:da:a4:41:46:6f:95:76:d8:2d:7f:73:
         d9:99:b8:a0:c4:b6:09:bc:a5:a0:c5:4f:2f:48:d5:b2:e5:46:
         4c:28:8d:d3:8b:2d:33:3a:e6:c3:b4:48:16:77:51:84:7c:c8:
         93:9b:57:d7:8c:92:a4:00:ab:eb:26:01:96:ee:44:bd:1d:13:
         15:fa:3d:ee:11:0c:cd:8c:72:07:5b:90:b2:4d:2c:f7:14:a4:
         a6:c0:d3:0a:6e:f5:22:bd:24:66:41:03:3b:16:83:ea:b8:9c:
         a1:3a:3d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:16:22 2026 by rpki-client