Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa
File:                     898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa (raw, json)
Hash identifier:          GGBC6qH+MjkRZ+iulRthwnrkc3uclWtLFD2P0V2Al1E=
Subject key identifier:   B3:D2:A0:FB:72:EA:DF:D1:EC:64:C9:BA:55:73:A4:A1:66:D4:C0:35
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584CB81C82517963BF37FFBCD280
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     31898
IP address blocks:        130.35.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:82:51:79:63:bf:37:ff:bc:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=64d138aa-777d-4ae0-b75f-9dc52ace5286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:91:29:6b:a3:74:a1:e5:94:29:06:c5:f4:
                    07:15:a5:50:fb:cb:dd:c4:e5:cc:28:a4:f8:bd:75:
                    b2:83:36:b3:8e:42:22:74:55:69:21:8f:d1:64:ed:
                    25:4b:0b:bd:7a:ff:79:11:ce:09:ef:c0:71:a5:ee:
                    e6:a9:41:22:09:25:59:af:ba:c0:1e:dc:7e:c5:e8:
                    cb:b4:32:36:19:88:70:e7:50:61:b6:bd:65:e4:db:
                    b3:80:85:19:3a:c3:5e:34:9e:be:87:f7:99:3b:63:
                    9a:2e:e2:ff:70:81:4d:52:bd:44:7e:19:a4:a3:1f:
                    75:e9:41:60:0f:91:53:0f:7d:75:29:23:86:2f:b5:
                    c5:c9:bb:05:dd:50:3a:72:1a:67:78:eb:63:4c:2d:
                    a9:7f:dc:3a:b2:14:d1:f3:e6:4e:7e:00:ab:0d:87:
                    5f:74:44:2d:74:3a:88:55:d9:fd:3a:fc:48:c9:94:
                    4c:c5:a0:29:50:5d:a6:db:9e:83:68:a6:ed:ce:f6:
                    fa:19:b6:15:14:d2:12:7b:ff:91:78:b7:61:27:83:
                    87:6f:07:16:82:9d:6f:15:d7:52:79:d6:ec:8a:ca:
                    85:cd:a5:7c:c0:73:4d:1a:36:06:45:27:d4:6d:34:
                    15:1a:a2:93:05:5d:7c:39:3a:ab:b5:d7:1b:5b:b9:
                    ce:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D2:A0:FB:72:EA:DF:D1:EC:64:C9:BA:55:73:A4:A1:66:D4:C0:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/898d80f8-2b61-317a-8bb0-4e06fc2c2c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:58:5e:ed:0e:71:ea:0e:c3:00:21:3e:33:7e:f7:29:50:9c:
         6a:41:88:6f:1c:87:9c:d6:1d:9a:cf:7e:c2:12:d0:e4:db:41:
         c5:65:fe:79:91:df:5a:ec:2e:bc:00:ab:57:b2:48:41:dc:bb:
         be:6b:f9:14:11:4d:c9:fd:22:71:90:53:9c:ff:44:b5:46:98:
         b0:97:91:cf:9b:62:48:1e:9c:c1:8c:11:5b:27:bf:fb:02:ad:
         c7:ed:18:90:8a:3a:aa:da:ec:62:68:94:2f:ba:8e:97:43:17:
         01:b9:4c:30:21:58:58:f5:3b:5e:bf:16:8e:e8:db:7d:e3:90:
         94:27:38:23:e1:03:8f:8b:59:32:93:f6:36:d9:2d:a7:be:18:
         28:90:32:97:9b:ed:dd:39:db:a2:1c:60:69:1a:50:fe:7b:5a:
         f0:40:21:a9:13:a0:13:a3:c0:98:4b:47:8e:0f:b1:64:ec:a1:
         e8:fb:df:b2:ab:28:d8:92:0e:fe:f7:2a:53:59:45:46:7d:03:
         d3:f3:50:3d:fb:f7:7c:85:ac:de:12:63:16:81:4c:16:f7:ca:
         57:47:1d:a4:45:05:80:3b:85:c0:11:b0:11:5b:4e:b3:30:09:
         ad:60:d8:88:1c:7a:aa:a3:d5:b9:2d:df:b8:aa:64:7a:4f:51:
         5f:7e:74:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:16 2026 by rpki-client