Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5e82807a-ebc4-3c56-9892-b9fc92008af5.roa
File:                     5e82807a-ebc4-3c56-9892-b9fc92008af5.roa (raw, json)
Hash identifier:          pFvAx0b22pHA6i2QIqL7r5xKzrk6onhUHaITXjS/kFQ=
Subject key identifier:   9F:F3:1C:3C:79:6E:D3:98:05:4C:8C:F4:B0:A8:FB:79:74:E5:58:3F
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584E3FC472C0114F7F649A462760
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5e82807a-ebc4-3c56-9892-b9fc92008af5.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     46558
IP address blocks:        130.35.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:72:c0:11:4f:7f:64:9a:46:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=9a9d47c4-924f-4b88-8d5c-97c59ca394ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:8d:6e:a1:c3:c7:c7:d7:f3:34:00:91:e7:
                    84:57:ce:d8:84:94:cf:fd:f8:ef:15:bc:fb:54:07:
                    f4:a9:0f:09:32:2d:be:6d:46:f0:51:4b:c1:aa:09:
                    54:cf:dc:78:eb:63:05:d6:0a:7b:7b:3f:77:03:99:
                    da:7e:ba:96:59:ae:97:5e:98:af:80:c4:74:e0:f7:
                    25:30:f4:e8:3a:2a:31:74:0f:9e:00:fd:a6:e6:75:
                    8a:d5:4d:33:7f:4a:49:05:2d:4f:ca:2d:fa:77:7f:
                    15:75:7f:14:4c:81:59:80:59:8d:c0:0e:3e:b4:38:
                    e9:9e:d0:6c:d4:13:09:df:f1:dc:50:50:68:6e:75:
                    5b:e4:7d:ad:db:94:9b:d5:4f:1c:f2:86:f4:80:ca:
                    df:d2:3d:49:ad:1d:f4:4e:a0:9f:29:ca:f3:55:c1:
                    e2:e0:af:49:bf:a8:0b:8d:20:24:1e:8a:4c:20:e5:
                    78:cb:65:33:7b:bb:19:c1:78:45:54:30:41:52:74:
                    6a:6f:a0:1f:e1:9f:8a:91:4c:6a:34:80:85:ad:1e:
                    0a:d0:3f:43:52:9e:08:7b:1f:a0:ac:07:2b:96:54:
                    44:d0:3f:1e:c1:c1:9b:5b:69:89:af:8d:23:c7:97:
                    84:1c:71:56:3d:fb:c9:a3:ee:dc:94:72:e1:f1:02:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F3:1C:3C:79:6E:D3:98:05:4C:8C:F4:B0:A8:FB:79:74:E5:58:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5e82807a-ebc4-3c56-9892-b9fc92008af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:79:2f:c2:e2:94:73:7c:05:48:a2:3c:f6:03:b3:35:74:
         69:f6:39:43:23:6e:14:88:45:5d:45:3e:17:26:3b:41:6e:d3:
         14:bb:e2:4b:14:b4:c5:66:ee:74:15:88:b7:df:1c:e0:c5:02:
         b9:7a:7f:f7:99:49:46:68:85:17:38:45:5a:2f:f0:f3:e2:08:
         13:a6:17:25:99:10:b6:2e:e9:d0:49:70:eb:80:37:f0:28:ec:
         b2:cd:a3:b3:49:83:85:96:7b:ba:a3:db:f0:ce:11:fa:f2:dc:
         fd:95:6d:bc:20:a8:68:33:ba:19:32:cd:a5:81:f4:a0:19:d5:
         99:21:9b:53:6d:75:37:d7:c8:a5:e2:dc:bf:48:95:3f:fe:c5:
         99:e1:c2:c6:84:34:a3:05:69:a2:11:69:77:99:26:e4:02:22:
         c4:43:17:70:97:35:55:48:ba:07:23:74:fa:6d:dc:49:53:90:
         7a:c8:e1:a5:b0:26:e8:c5:45:de:73:7c:27:5c:af:f4:43:6f:
         a7:22:2a:1e:a3:19:47:d1:95:ab:6f:09:34:c8:0f:9e:12:bc:
         92:c0:ff:46:53:62:0c:be:7e:65:79:34:3f:22:ce:9e:24:3c:
         5d:9a:34:91:11:f6:95:00:4b:73:a2:8a:69:85:8b:52:91:3a:
         80:ba:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:12:43 2026 by rpki-client