Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9841d182-ab9e-3502-bdf0-18255a838d8e.roa
File:                     9841d182-ab9e-3502-bdf0-18255a838d8e.roa (raw, json)
Hash identifier:          eyJZ59w4qpDzooEBFTcTqgtkMftC2Vh6SCjE0NWO270=
Subject key identifier:   A2:CE:E3:41:56:E8:C4:39:77:5C:19:49:6A:91:8D:96:6D:4E:6D:CE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAE5E885AB0C3383E73B53E00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9841d182-ab9e-3502-bdf0-18255a838d8e.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        130.61.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:88:5a:b0:c3:38:3e:73:b5:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=7e0644df-bd13-4353-abce-0003b1f192f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:8e:2b:fe:ca:ee:06:1a:9d:05:11:04:c2:
                    54:32:a6:76:05:5c:02:79:6e:61:d6:31:27:97:b2:
                    d8:9e:fe:48:4f:5c:06:83:9e:31:01:cd:55:95:c4:
                    ab:e5:dc:44:88:44:4b:b8:67:58:e0:9a:a3:d4:55:
                    ba:51:a2:2d:95:5e:10:29:52:4d:b4:02:6a:2d:d1:
                    56:e7:a3:cf:8c:56:c8:50:0f:16:d1:fc:38:33:c4:
                    9a:75:1a:b1:09:aa:70:53:78:a4:e6:ee:9e:88:20:
                    81:c6:89:cd:be:6b:69:71:dd:4f:b6:a0:18:62:e6:
                    c6:20:87:3e:9c:cb:de:d3:7c:af:64:99:54:7b:83:
                    e6:a2:e2:14:3e:ab:e3:70:7c:29:fd:c1:24:6c:bd:
                    b5:28:10:91:b9:d7:fe:47:69:01:cb:fc:ee:e8:ee:
                    93:a5:63:52:5d:a2:36:7b:5f:4d:ed:25:97:38:5b:
                    b2:25:f1:9a:f6:c2:67:ff:15:c4:95:e1:35:ca:e3:
                    6d:eb:a6:70:02:98:d2:28:d2:cf:4e:76:05:d2:ac:
                    e8:f9:b5:e7:0f:a7:30:49:2c:56:06:d6:ed:39:64:
                    e1:aa:aa:dd:70:f6:dc:a9:09:de:a8:eb:f7:88:d3:
                    f1:51:7a:28:33:68:2e:b3:ab:ea:ac:18:d0:1e:f7:
                    68:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CE:E3:41:56:E8:C4:39:77:5C:19:49:6A:91:8D:96:6D:4E:6D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9841d182-ab9e-3502-bdf0-18255a838d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.61.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:73:3a:cb:77:43:8e:d7:53:6a:a4:79:7f:88:db:42:e9:85:
         0a:0d:42:7a:6f:30:e6:47:f6:b2:6a:82:9e:42:29:b6:87:05:
         d0:31:b5:4b:08:91:a2:41:6f:f6:a3:fb:5f:bc:0f:4f:04:94:
         18:29:f7:21:d0:16:e2:4c:e6:9f:82:8e:98:0d:9e:e7:7e:0d:
         7c:97:52:78:83:bf:46:85:fd:3b:0f:83:0b:eb:e5:c1:5f:ca:
         92:eb:17:48:2d:a0:90:ea:c5:25:7c:7e:08:de:3e:dc:6d:bd:
         38:e5:54:86:88:1d:98:07:a5:da:0e:c3:d3:1b:40:7d:ea:21:
         18:5c:86:32:57:20:b7:7a:7a:ac:99:09:e8:d2:6c:47:df:b1:
         91:fe:7d:22:0e:3e:14:48:f7:43:71:48:dd:43:87:f5:df:63:
         fb:7f:4b:41:bb:d1:2d:5f:63:b5:e6:fa:0f:45:b3:3a:09:53:
         af:05:9c:79:aa:c9:e5:c0:42:9b:7d:04:3e:ef:c3:3c:a5:99:
         06:f6:d8:2f:e2:fe:5b:22:6b:ce:d8:74:c1:c5:f0:08:0f:cc:
         3c:13:f9:20:48:26:61:53:78:30:9b:c6:b6:55:23:c2:11:cd:
         4c:89:4a:19:14:ec:4c:67:e0:e2:f4:17:e6:b6:0e:17:ed:7f:
         f8:69:69:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:32:05 2026 by rpki-client