Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42013abe-8bc8-3170-a028-a470bed66edf.roa
File:                     42013abe-8bc8-3170-a028-a470bed66edf.roa (raw, json)
Hash identifier:          5QKTP3RfVhfE9GzeRP37X8bY0gotztgWJnyQDdOJcb8=
Subject key identifier:   EC:B8:F8:80:8D:C2:74:82:6B:6C:E2:EF:07:10:F1:10:9F:F2:79:DD
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3A320D5D82C7509ABCC080
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42013abe-8bc8-3170-a028-a470bed66edf.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        130.162.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:32:0d:5d:82:c7:50:9a:bc:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=f959814e-abaf-4273-a479-9c53431d0237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:73:7c:8c:57:c9:d3:3c:13:16:aa:b7:17:7f:
                    ce:99:89:76:e1:de:ed:da:1c:1e:f8:b0:16:c1:2b:
                    56:96:72:2f:25:af:26:63:5e:ca:e9:3b:07:ae:52:
                    f3:91:ec:f0:5e:56:6d:d1:07:48:4c:a7:cd:22:3f:
                    3d:c3:41:de:63:05:ef:a3:5a:b5:54:30:ef:8a:e2:
                    71:b1:c9:fe:88:8c:94:e9:6f:e5:23:a5:46:ad:39:
                    0d:63:8c:f7:6c:04:5d:26:27:6b:3f:f7:d1:d5:7c:
                    a9:53:8e:98:74:17:73:ef:ed:36:d9:10:dd:7e:52:
                    2a:a3:5b:87:0d:d9:b3:40:b9:14:39:8a:86:a4:ca:
                    84:7f:f9:38:73:a7:07:24:23:ca:aa:73:39:81:fd:
                    12:58:23:ed:a9:de:d1:fb:59:45:0f:ad:22:b3:a8:
                    d0:6d:72:92:c8:81:92:11:8a:b7:d2:29:0d:75:04:
                    a1:91:e6:5a:52:85:af:81:c2:96:b5:73:e6:7e:53:
                    dc:8c:86:a0:e2:c9:20:04:80:72:73:aa:d1:54:ff:
                    1c:05:e2:0f:8f:72:19:a8:57:0e:ae:ae:4c:81:dd:
                    ed:eb:4f:e3:14:6a:0f:7c:31:0a:e6:a4:90:b5:76:
                    72:6d:0f:59:ec:2b:be:9b:4b:45:8f:d3:0b:85:bf:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B8:F8:80:8D:C2:74:82:6B:6C:E2:EF:07:10:F1:10:9F:F2:79:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42013abe-8bc8-3170-a028-a470bed66edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.162.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:be:04:8b:fd:bc:ab:e3:c6:b1:b8:b5:b3:ce:78:f6:b3:79:
         c2:28:f5:ee:54:7b:55:f9:2d:d2:e9:e3:88:2b:1e:b7:fe:a2:
         6b:61:73:cc:7b:78:7c:2b:ab:29:ea:65:64:5d:8b:9f:b7:8a:
         fb:4a:80:1e:02:42:4b:7c:a7:c1:69:74:08:2f:d6:f1:b1:89:
         c4:14:b1:23:80:13:27:56:12:7a:53:b4:3e:73:9e:f8:91:82:
         72:f0:9f:44:96:43:d9:21:30:36:c9:e3:10:b7:04:ce:07:02:
         9a:8c:16:4c:a9:6b:65:2f:23:df:bd:4d:90:49:34:7e:9a:7f:
         95:e5:42:1d:6e:a3:dd:e1:d9:83:5f:ec:cb:20:40:04:cb:4c:
         e4:ef:e9:cf:b2:57:d5:2d:ec:84:3c:e8:49:01:fc:8a:ce:92:
         c2:b6:9e:a1:ec:4e:90:71:26:7e:d5:ec:2c:5c:87:32:74:f5:
         a8:b5:26:f0:db:a5:b9:1b:f1:66:6b:16:85:99:1a:a1:79:c7:
         49:43:94:eb:bd:08:3f:4e:31:c7:09:59:fa:11:65:9f:ce:c5:
         ac:35:ce:29:64:0a:ac:3b:f4:93:32:5f:35:95:47:99:8c:a6:
         69:46:40:ef:c8:73:2b:d3:b3:4c:ed:2b:89:57:cb:77:bb:a6:
         cc:a3:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:24 2026 by rpki-client