Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c2db622b-7545-33c4-9e85-825e60dfab74.roa
File:                     c2db622b-7545-33c4-9e85-825e60dfab74.roa (raw, json)
Hash identifier:          /y6pKEIS6mfv0kaoSl52U4spCgtc84CpsJTYW0UxRrY=
Subject key identifier:   00:98:E4:A5:E4:FD:12:9B:70:0A:54:45:31:A7:C9:79:67:1F:FB:F1
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584CB81C80D8B61DE030185A6BE0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c2db622b-7545-33c4-9e85-825e60dfab74.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     31898
IP address blocks:        130.35.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:80:d8:b6:1d:e0:30:18:5a:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=117fdcbb-a887-4a8e-b618-5fa495f801e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:97:40:9b:bb:d4:8d:bc:60:05:85:4a:05:5d:
                    3c:ec:38:e8:6f:65:ef:eb:53:d1:2c:84:aa:d1:c9:
                    2c:22:6d:b7:b5:3e:67:63:d4:05:af:8f:45:1a:fc:
                    59:a1:18:aa:62:93:33:e2:66:61:e0:a9:27:17:9c:
                    b0:51:98:f3:b0:7d:ad:a1:87:a0:e8:45:5d:b7:c2:
                    40:88:9f:1f:86:20:b3:8e:0c:cb:63:2c:d3:fa:8b:
                    58:34:ed:84:ea:b2:f7:67:a9:0c:25:82:62:c6:df:
                    51:5e:9b:d0:54:24:2d:d9:24:d5:91:0d:60:20:7b:
                    0e:23:26:a7:de:e8:0d:c0:28:fd:97:fd:11:39:7c:
                    c1:31:d4:07:c7:6a:d6:ea:f8:e0:f4:dc:c3:2c:6d:
                    f0:33:1a:05:9f:62:4b:2a:47:3c:bf:fd:8e:58:2e:
                    38:46:94:d4:44:5a:27:ea:b8:b7:3a:85:8f:dc:40:
                    68:44:01:80:bc:4e:84:a3:ec:c7:cc:52:8f:4a:3b:
                    29:f2:db:55:a3:80:48:49:ed:23:0c:bc:cf:b0:cf:
                    f8:4e:42:44:4d:e9:04:6f:28:b7:79:4f:9b:6d:b2:
                    e5:a5:27:06:5f:26:69:f1:6d:af:e8:38:84:de:e7:
                    23:29:d6:d8:d5:36:a7:7b:40:e4:f9:d5:d8:5f:c2:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:98:E4:A5:E4:FD:12:9B:70:0A:54:45:31:A7:C9:79:67:1F:FB:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c2db622b-7545-33c4-9e85-825e60dfab74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:59:e7:12:6d:7e:c7:07:9f:28:16:9f:43:5d:5a:7f:93:b3:
         48:a0:41:e7:27:43:ec:dd:9a:7c:91:e6:f8:8c:e3:e1:be:d7:
         55:db:24:d3:0b:58:df:88:07:f3:f2:04:8b:b5:37:9d:ae:9b:
         30:ee:47:0f:5d:c2:0a:5a:c8:3d:b3:54:e4:3f:36:59:fe:ab:
         a5:ca:c1:c8:3b:6f:27:6f:ba:a0:26:e8:6a:cc:7e:2a:f2:d0:
         d3:50:f4:8b:80:f6:77:fc:46:f5:ea:c1:53:38:69:74:ad:19:
         bb:3f:75:ec:69:8e:6d:50:36:f7:83:ca:a7:b7:fc:f6:b2:c4:
         b0:6a:d9:da:b2:2e:20:2a:a4:c2:22:73:b0:bd:aa:60:8f:57:
         4e:c7:1d:a4:1e:8a:35:b8:fd:40:5d:ac:2c:ed:cb:47:29:d0:
         ef:d0:be:2e:83:da:85:a8:1c:bf:5f:e4:3d:c9:32:7c:29:c4:
         89:ea:68:14:b5:b3:7f:3b:77:b8:fa:56:51:09:76:4c:86:4c:
         5e:b7:ff:20:38:81:31:a2:54:2c:24:3e:36:9d:79:b3:92:2b:
         de:01:0c:23:02:ec:b9:d0:a9:2a:df:bf:fd:72:21:1e:15:c1:
         20:11:bc:33:40:d2:63:4d:55:1b:c9:dc:b9:f9:b3:7a:27:0f:
         2c:15:67:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIDYth3gMBhaa+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy
ZTQ0MB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk
MTE3ZmRjYmItYTg4Ny00YThlLWI2MTgtNWZhNDk1ZjgwMWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZdAm7vUjbxgBYVKBV087Djob2Xv61PRLISq
0cksIm23tT5nY9QFr49FGvxZoRiqYpMz4mZh4KknF5ywUZjzsH2toYeg6EVdt8JA
iJ8fhiCzjgzLYyzT+otYNO2E6rL3Z6kMJYJixt9RXpvQVCQt2STVkQ1gIHsOIyan
3ugNwCj9l/0ROXzBMdQHx2rW6vjg9NzDLG3wMxoFn2JLKkc8v/2OWC44RpTURFon
6ri3OoWP3EBoRAGAvE6Eo+zHzFKPSjsp8ttVo4BISe0jDLzPsM/4TkJETekEbyi3
eU+bbbLlpScGXyZp8W2v6DiE3ucjKdbY1Tane0Dk+dXYX8K03QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFACY5KXk/RKbcApURTGnyXlnH/vxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0
MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYzJkYjYyMmItNzU0NS0z
M2M0LTllODUtODI1ZTYwZGZhYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx
MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj
MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1
MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtZ5xJtfscHnygWn0NdWn+Ts0igQecnQ+zdmnyR5viM4+G+11XbJNML
WN+IB/PyBIu1N52umzDuRw9dwgpayD2zVOQ/Nln+q6XKwcg7bydvuqAm6GrMfiry
0NNQ9IuA9nf8RvXqwVM4aXStGbs/dexpjm1QNveDyqe3/PayxLBq2dqyLiAqpMIi
c7C9qmCPV07HHaQeijW4/UBdrCzty0cp0O/Qvi6D2oWoHL9f5D3JMnwpxInqaBS1
s387d7j6VlEJdkyGTF63/yA4gTGiVCwkPjadebOSK94BDCMC7LnQqSrfv/1yIR4V
wSARvDNA0mNNVRvJ3Ln5s3onDywVZ0A=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:25 2026 by rpki-client