Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5e82807a-ebc4-3c56-9892-b9fc92008af5.roa
File:                     5e82807a-ebc4-3c56-9892-b9fc92008af5.roa (raw, json)
Hash identifier:          tmJOib5uSv1kV6Q9+h4AVkFanppe3m1NavVpzAbsRnw=
Subject key identifier:   98:30:4A:08:C5:D1:B7:65:06:77:AD:66:52:B0:99:AA:47:A7:DE:A8
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584EE2274235A7FE74FEEC002080
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5e82807a-ebc4-3c56-9892-b9fc92008af5.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     46558
IP address blocks:        130.35.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:42:35:a7:fe:74:fe:ec:00:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=bd48c979-f591-40c5-815c-78b7089e7272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:2c:df:fd:75:20:6c:c9:f6:93:ee:05:91:
                    60:02:1e:78:11:c1:eb:6c:3d:77:bf:69:ac:0d:b7:
                    8f:3a:a5:cf:a4:a1:b1:68:cc:f1:d4:dd:4a:58:54:
                    10:5e:a9:18:00:56:79:ec:08:4d:66:58:2c:90:5a:
                    f7:81:6c:2d:97:9b:da:4f:01:79:95:53:34:ed:de:
                    d0:ee:95:d1:56:8e:cf:71:33:d2:ea:0c:72:11:5c:
                    83:aa:d3:f8:cb:df:f3:a8:ff:c8:bc:89:91:ac:34:
                    f7:52:ce:82:fb:78:45:1a:f7:48:5f:34:e1:5b:43:
                    12:46:56:ef:c9:9a:c7:e9:3f:dc:a7:68:db:7a:e5:
                    24:4c:06:74:06:67:28:38:0c:b4:37:56:f9:32:4a:
                    ec:36:e0:42:42:62:80:cf:20:36:0c:ec:9b:54:8a:
                    dd:d2:fc:5e:19:f2:8a:61:42:e7:00:f4:64:1f:c0:
                    2a:b6:20:f9:13:eb:6e:f1:95:67:85:58:e7:83:2b:
                    68:1e:3a:d8:62:74:20:ac:7a:c6:52:8f:97:65:44:
                    34:d1:9a:96:13:91:e8:d5:de:6a:ae:8d:7c:95:69:
                    fe:0d:c0:dd:df:e6:6d:40:db:3a:4b:b0:17:c8:ff:
                    66:52:d3:31:93:3c:ab:9f:2b:8a:c9:27:7c:c2:c7:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:30:4A:08:C5:D1:B7:65:06:77:AD:66:52:B0:99:AA:47:A7:DE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5e82807a-ebc4-3c56-9892-b9fc92008af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:53:69:98:9d:97:50:44:05:44:3a:3e:81:ca:70:f6:0f:4f:
         77:24:98:20:c8:e4:92:c3:fb:c0:95:41:37:48:16:46:99:90:
         69:13:ee:f5:44:d3:1c:99:83:87:1a:29:2c:1e:c5:5c:6c:1b:
         05:bb:1e:94:be:fd:66:60:79:19:18:4f:fd:66:6e:bb:7c:3d:
         67:01:7a:96:9c:75:d0:c5:58:30:e1:9d:56:0a:c5:c3:54:fc:
         28:20:50:95:ec:9a:55:9b:11:df:fb:a7:c2:6e:fe:cd:51:51:
         41:56:00:0d:82:1e:48:8a:da:1a:a1:c8:fc:f5:d3:d6:f8:76:
         10:10:f8:54:a6:6a:73:c5:4c:b6:4a:61:9d:70:c7:d8:4e:ad:
         67:f4:fd:a3:ce:c3:e2:10:c3:ca:fe:36:6e:09:d1:78:57:da:
         1b:61:a9:80:83:3d:0f:a5:9a:63:89:6c:63:ea:cc:ff:ce:31:
         02:76:00:87:c2:8d:0c:c0:25:10:ce:b8:cc:e7:bc:c0:12:cf:
         32:69:0b:40:90:2c:7a:d0:47:c1:b4:58:ee:52:57:7d:2f:a5:
         9c:5e:ed:87:4b:17:14:95:61:e4:cb:d2:ff:8f:97:b5:b8:b0:
         4c:70:3e:1e:8c:c9:87:f6:99:3e:82:71:63:ce:41:bb:f2:64:
         e4:36:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:14:38 2026 by rpki-client