Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/217f6e8f-37f6-3779-a3b5-ff2398f0fc89.roa
File:                     217f6e8f-37f6-3779-a3b5-ff2398f0fc89.roa (raw, json)
Hash identifier:          h/Az3jj4QcX84HTauBmU1CmdmyiaecLj4D6L9aRq9w4=
Subject key identifier:   A9:70:BD:AD:63:C5:31:57:5C:62:93:81:35:28:2C:BE:6D:37:6D:03
Certificate issuer:       /CN=1931273b-f68a-4770-b714-cad22762621f
Certificate serial:       010D0C9F4328584E1E444B8483666C43D0675300
Authority key identifier: F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/217f6e8f-37f6-3779-a3b5-ff2398f0fc89.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     13411
IP address blocks:        130.12.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:4b:84:83:66:6c:43:d0:67:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1931273b-f68a-4770-b714-cad22762621f
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=28c70b6a-f0a8-4f9e-8617-7ae4fbe5fd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:55:20:d1:2f:3a:77:bd:6e:e7:c4:3c:fa:
                    21:dc:38:d0:49:2d:ad:43:21:67:c5:bf:ca:50:fb:
                    9b:f7:30:69:01:83:43:f9:c0:76:10:6d:96:77:ac:
                    af:13:88:4b:1e:20:0b:21:aa:4b:ad:57:a2:69:bc:
                    2a:60:1d:81:59:89:10:e4:74:03:19:76:8b:5e:aa:
                    7d:56:60:74:31:17:93:62:60:87:4c:aa:9a:3d:64:
                    f8:d3:9f:67:e8:d1:b5:49:89:2d:ec:84:49:54:48:
                    52:45:3a:a3:8b:9f:17:5b:0d:79:a4:64:d1:4f:e5:
                    77:34:09:92:42:ed:2d:2a:b7:13:a3:38:32:dc:81:
                    b2:ea:a2:13:01:e2:ef:4c:b3:7d:2f:5a:db:34:5f:
                    a7:b9:7f:91:c1:73:4a:1b:e8:de:1b:f5:15:88:5a:
                    ea:0c:2a:41:d7:5d:a4:b8:47:a4:bc:2e:13:e5:c0:
                    5e:88:e2:58:c0:21:e6:80:c1:82:b3:a4:61:af:67:
                    af:d6:9d:69:32:a9:4e:91:0c:e2:f2:dd:85:d6:33:
                    91:ac:01:a8:c3:69:e0:6a:49:b7:fd:a7:85:39:d2:
                    82:7f:5b:f2:ed:bd:e7:9b:ca:ad:32:46:03:51:f6:
                    45:21:8e:53:db:c6:3c:fe:8f:ba:58:33:6f:ae:1d:
                    dd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:70:BD:AD:63:C5:31:57:5C:62:93:81:35:28:2C:BE:6D:37:6D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/217f6e8f-37f6-3779-a3b5-ff2398f0fc89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e9:c5:d0:c2:eb:ea:df:e8:a4:d3:19:4b:ac:64:ef:0e:6e:
         d7:a7:01:af:93:44:04:7f:cc:5c:8d:52:b9:a6:91:46:3d:4a:
         a2:8b:c4:64:40:7f:c3:1d:6e:d3:e8:80:96:6a:91:6c:52:fb:
         b5:8b:68:3e:9f:ed:c6:88:af:c6:76:6f:48:f0:b8:6f:95:4e:
         bc:46:77:e0:ac:03:43:0f:bb:db:64:84:f0:43:41:60:9d:d6:
         dc:82:5f:7a:ba:6e:a1:ef:d4:c7:c4:7b:49:6d:f7:41:24:2a:
         c6:03:af:c0:9d:f6:2a:7e:4d:be:28:31:a5:18:ee:48:8d:a1:
         7c:30:21:6d:81:d0:d4:cc:66:13:96:67:4d:03:89:78:c3:48:
         35:c3:0b:50:f0:9d:98:30:0b:64:06:a7:e2:6c:b7:64:29:6a:
         e1:96:f4:4e:07:2d:ba:4a:55:71:b4:d5:1d:f7:33:df:3f:41:
         db:e0:16:3e:c0:5e:a4:6f:2a:9f:6c:ff:fc:fd:4d:8e:67:92:
         74:45:47:d6:92:bd:68:d3:97:90:c3:dc:1a:2d:f4:57:26:3a:
         44:f4:07:ae:d5:99:f8:4b:f7:01:be:f1:d1:68:5c:b1:e6:53:
         06:5b:0e:97:24:55:90:ca:7c:a7:e6:6e:08:cf:73:ab:5d:9f:
         fd:5d:7f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:03:15 2026 by rpki-client