Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a7aa61b2-7d19-3bd0-9746-697410795daa.roa
File:                     a7aa61b2-7d19-3bd0-9746-697410795daa.roa (raw, json)
Hash identifier:          N+vZqKPG8y5i/jYS9Ivj8JyqDmicesaz1U0qmoShysk=
Subject key identifier:   17:81:B4:5F:4F:BF:62:2E:5C:B7:D8:C1:54:C1:D3:3F:09:B0:F5:46
Certificate issuer:       /CN=97e6dc25-3cc3-4f4e-ad93-6bcf11c844da
Certificate serial:       010D0C9F4328584E147EDA6AA49E83BA997B8F80
Authority key identifier: 74:F3:80:33:A5:3E:5F:68:0E:7F:C5:24:F2:B4:7B:2A:8B:76:52:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a7aa61b2-7d19-3bd0-9746-697410795daa.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     395915
IP address blocks:        130.12.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:da:6a:a4:9e:83:ba:99:7b:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e6dc25-3cc3-4f4e-ad93-6bcf11c844da
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=6a0560af-e778-4365-94c2-62f92f621b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:d7:14:e2:aa:d6:5b:8c:cb:4f:41:3e:c0:
                    22:c8:f9:44:f5:73:5a:8e:ee:30:37:1c:94:8f:d5:
                    12:f8:d0:26:4e:52:d7:97:d6:85:2a:81:68:eb:a9:
                    06:dd:eb:c8:6b:6d:a2:56:8e:4b:51:2e:8e:81:ea:
                    30:94:54:58:16:a4:19:c3:f0:6b:66:5f:51:bd:bc:
                    29:03:9e:9d:f1:38:8c:f2:c0:c8:5e:b6:d2:8b:16:
                    6b:44:f1:42:de:de:20:ca:21:14:ab:69:e8:36:cc:
                    c5:9f:23:58:8f:8e:b5:54:e4:59:74:9e:97:70:77:
                    1d:cb:6f:f8:6e:9b:0f:8a:d8:29:27:3f:0f:ac:86:
                    ae:7e:d2:18:6d:56:0f:31:6d:d6:d1:73:91:7b:5f:
                    e1:4f:a4:5c:24:c8:66:ec:ea:64:84:ea:ab:c3:05:
                    4e:55:db:20:89:11:41:19:f2:f1:26:66:6b:8b:80:
                    7c:a6:66:d9:e3:6d:38:72:33:1f:d3:e8:a9:aa:4a:
                    36:19:ee:0a:a9:bd:c8:55:38:15:21:a6:79:b8:83:
                    dc:60:dd:61:fa:78:5e:42:c2:c8:f7:57:bf:73:9e:
                    c1:e7:c4:60:95:ef:37:9f:1e:2a:2d:f7:d6:07:73:
                    7a:e4:bd:2f:9e:d0:68:c7:40:c3:c9:db:5b:58:8d:
                    2a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:81:B4:5F:4F:BF:62:2E:5C:B7:D8:C1:54:C1:D3:3F:09:B0:F5:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/a7aa61b2-7d19-3bd0-9746-697410795daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl

            X509v3 Authority Key Identifier:
                keyid:74:F3:80:33:A5:3E:5F:68:0E:7F:C5:24:F2:B4:7B:2A:8B:76:52:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:11:44:d1:ef:85:ff:01:a4:08:fa:f2:e3:93:d6:a0:90:69:
         69:dc:78:91:ce:6d:72:81:20:a2:fb:93:58:25:c5:57:4a:07:
         e6:92:dc:04:77:62:b6:56:a0:8a:19:0a:f5:86:ef:02:f7:b7:
         64:82:c4:ab:ef:7b:62:c0:87:42:fe:fc:e3:7c:89:7a:4b:ac:
         64:8f:6f:e6:21:dc:b2:1f:c8:2b:d0:0d:63:1c:3a:d4:c8:b1:
         4c:99:73:9f:06:e2:35:03:3f:90:a9:73:2a:ac:20:05:d2:cc:
         d8:ef:9b:9a:29:13:27:76:19:19:4d:6f:92:45:c9:99:5b:99:
         76:8a:31:44:45:5e:76:66:df:2c:dd:e9:75:71:bf:44:dc:0c:
         b2:82:be:cf:e7:97:f5:f9:29:a8:eb:d7:42:02:7b:24:5e:02:
         40:3d:50:bf:88:a6:ba:81:ed:38:b2:39:93:35:63:61:3a:93:
         0f:5b:c0:f0:b4:ad:d2:f5:a0:15:a7:ae:36:e2:a8:1f:ea:ca:
         72:18:7a:cf:5b:5f:4b:fb:90:ca:cc:10:16:69:ec:3b:8f:3e:
         21:2d:f3:63:a4:8b:a5:8c:33:f2:56:1c:ce:ae:d9:70:ed:6b:
         85:22:32:5d:89:06:82:34:53:32:78:77:0f:f4:3a:b2:85:33:
         71:0c:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:46:26 2026 by rpki-client