Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/64064726-682a-3c14-9d98-4b1f74c95c16.roa
File:                     64064726-682a-3c14-9d98-4b1f74c95c16.roa (raw, json)
Hash identifier:          Efu2Fcl+1FvNNa9CpzGN8Ekih6ftVloX7s1ZcVPKSV8=
Subject key identifier:   0E:E3:8F:9A:61:67:DA:A0:E1:90:87:1E:C8:BC:C7:F3:C7:47:59:F4
Certificate issuer:       /CN=c8bca10d-6445-4407-bd16-6d0c90e9bfd5
Certificate serial:       010D0C9F4328584F5E62F285FF8469D8952546C0
Authority key identifier: E9:6F:EF:D0:13:5C:EE:7D:99:FC:6E:21:46:72:23:EF:BA:A0:75:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/64064726-682a-3c14-9d98-4b1f74c95c16.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     14618
IP address blocks:        130.12.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f2:85:ff:84:69:d8:95:25:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8bca10d-6445-4407-bd16-6d0c90e9bfd5
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=26f1bd29-908f-4e69-9d58-9159e7ff3469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:ba:ed:32:ae:b0:97:30:7c:7a:58:a5:93:
                    35:de:46:a3:eb:df:aa:bc:cc:84:29:ec:7d:ea:c5:
                    b7:4f:43:c5:0c:d2:7c:a6:9e:cd:1c:bb:49:36:44:
                    8f:e1:96:64:08:48:75:95:88:66:25:a2:e2:0b:a8:
                    2f:2a:d9:08:2c:d2:02:03:ac:de:38:29:de:51:82:
                    31:b1:98:f6:10:f0:31:34:37:07:d5:c1:20:95:e2:
                    e2:66:d6:44:46:d0:e7:76:8d:e7:9b:2a:9e:5e:d4:
                    93:0e:53:0f:04:77:cb:28:fa:6d:a2:51:19:31:68:
                    8b:2c:07:ea:b2:c1:e0:03:b6:b7:fa:e3:69:b7:d3:
                    39:e8:07:78:6c:63:8a:cc:66:dc:46:b2:59:1b:96:
                    20:e6:1a:af:fe:44:e1:de:e9:1e:40:99:90:30:3e:
                    c0:7b:c2:b8:12:b7:93:3f:d1:56:47:48:a5:ef:7b:
                    7b:6c:3f:65:10:5a:a0:27:76:b3:8e:c4:e0:e3:05:
                    98:51:0c:7c:04:a5:6a:15:d3:45:43:a0:62:85:db:
                    5f:09:01:ca:86:57:b8:5c:4b:e7:6e:91:60:ec:4d:
                    68:dd:51:af:bf:bc:ad:61:82:25:8e:57:33:b3:11:
                    6e:aa:38:bf:6d:83:dc:52:44:13:a0:5b:c0:15:ea:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E3:8F:9A:61:67:DA:A0:E1:90:87:1E:C8:BC:C7:F3:C7:47:59:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/64064726-682a-3c14-9d98-4b1f74c95c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.crl

            X509v3 Authority Key Identifier:
                keyid:E9:6F:EF:D0:13:5C:EE:7D:99:FC:6E:21:46:72:23:EF:BA:A0:75:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:eb:17:0a:c4:63:b1:f9:d4:22:83:4a:f0:b7:94:bc:2a:03:
         e6:15:33:bf:41:11:c0:37:79:6f:36:f5:68:b7:6e:95:8a:8d:
         10:02:7c:c4:b8:34:6a:36:e5:9d:73:87:57:2c:36:e6:d7:e4:
         8a:57:11:6c:0e:32:56:68:57:47:2b:29:54:e0:8d:1c:a0:a7:
         83:1c:5d:52:41:e8:a2:4c:9f:dd:bc:56:09:e2:01:ab:b2:fe:
         85:5c:86:64:48:dc:da:c2:fc:58:10:9d:b1:14:99:b8:f5:a4:
         03:56:10:34:8d:7b:ad:b9:4b:45:ad:76:8e:93:70:5c:79:3c:
         3f:97:c0:2c:e3:27:59:a5:4e:5c:f5:c8:7e:27:16:e4:4e:5d:
         56:a8:15:9a:3f:80:5a:3e:00:e3:fb:bf:6c:84:87:64:95:13:
         07:d8:62:36:65:f6:40:f2:25:7e:21:8b:02:07:0d:3b:2a:32:
         8a:81:b0:7d:cb:30:b1:82:06:85:f4:08:2e:f6:4b:8b:8f:ed:
         93:26:a9:5e:7a:e7:35:b0:f5:0f:5a:78:57:48:5c:8c:84:62:
         ea:2d:19:0f:a9:06:ab:14:10:fa:0d:5f:d3:39:d0:e0:f8:3a:
         3b:d2:f2:08:2a:dc:bf:f7:f5:d8:a4:1a:88:8f:c1:8c:b3:95:
         71:78:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:12:38 2026 by rpki-client