Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/1cdd1620-baae-37e3-a52e-74047c58c79d.roa
File:                     1cdd1620-baae-37e3-a52e-74047c58c79d.roa (raw, json)
Hash identifier:          QNEa4+Z3m/nR6MWCEi5Ux8sl4r1K9+gaBSO0OaLni6Q=
Subject key identifier:   CA:71:F1:D9:2B:C0:89:43:EE:7C:C3:B1:D3:1D:47:FC:EB:4D:76:A5
Certificate issuer:       /CN=b052c0e7-788b-47d1-8126-ea94da7ceca7
Certificate serial:       010D0C9F4328584D75D53B34846EDC00A84A5100
Authority key identifier: A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/1cdd1620-baae-37e3-a52e-74047c58c79d.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        130.150.64.0/19 maxlen: 19
                          130.150.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:3b:34:84:6e:dc:00:a8:4a:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b052c0e7-788b-47d1-8126-ea94da7ceca7
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=3342a238-6829-4c26-90ec-8ecdacb9dadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:5a:73:9e:c1:bf:7a:b4:98:77:1c:0b:bf:
                    6d:ee:32:d4:ab:bb:9c:79:f4:fe:3c:4c:88:2c:b9:
                    31:0b:ef:b1:90:35:25:8f:0b:dc:99:70:78:2c:95:
                    a5:48:8b:49:ba:5d:34:ac:ee:9d:c8:19:62:69:c3:
                    9e:f9:67:ff:54:ac:e2:f5:55:65:19:4b:dc:2c:c2:
                    8c:da:3c:dc:a7:fa:21:68:21:78:b1:54:43:ba:70:
                    34:19:52:93:d5:55:93:a8:9f:69:92:99:e9:d4:4f:
                    5e:58:12:63:fd:5d:8b:c4:56:4a:a5:cc:dc:23:bb:
                    e2:97:60:b0:d1:19:0d:67:6a:77:7c:72:33:4d:73:
                    c7:30:78:3e:ce:94:11:8a:3b:d1:a6:4b:1c:34:60:
                    f4:38:e5:25:a1:a4:cf:f5:2b:04:09:3b:c9:bd:bf:
                    e6:0b:e2:14:fc:91:80:eb:e8:99:e2:6f:f7:c6:50:
                    7b:96:15:43:f5:90:b9:e4:04:06:5e:f4:30:b7:b4:
                    5d:6f:4f:c7:c9:9a:68:ab:26:c9:fa:7d:c6:87:35:
                    97:e3:b8:02:0a:6a:99:19:6b:db:79:38:25:e1:ce:
                    4a:da:47:47:48:ec:e8:ca:5a:42:f3:8f:bb:fe:73:
                    df:b3:a3:8c:aa:c2:66:8a:e3:ba:4c:fc:4a:b1:8b:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:71:F1:D9:2B:C0:89:43:EE:7C:C3:B1:D3:1D:47:FC:EB:4D:76:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/1cdd1620-baae-37e3-a52e-74047c58c79d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl

            X509v3 Authority Key Identifier:
                keyid:A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.150.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:53:c7:d2:62:06:0f:87:00:8d:6c:87:d7:e1:a2:78:ed:
         23:b4:4c:ed:5b:b6:c9:28:25:7d:7a:29:b6:27:aa:be:4f:97:
         27:5a:2f:1b:7b:8f:c5:51:bd:76:8a:38:53:02:c9:80:36:5d:
         1d:1b:06:d6:bf:36:90:ae:20:7b:47:50:2d:57:72:3e:b8:06:
         d1:a6:06:e2:30:dd:86:3f:3d:26:a1:4c:b1:18:fa:c4:c5:6c:
         64:81:7b:eb:2f:71:ee:6d:45:8a:ca:4c:0e:0f:40:cb:5f:a9:
         cc:ac:fc:0f:e7:f4:c5:96:d2:10:da:bf:d9:6d:6c:dc:d2:65:
         3c:cd:89:43:db:2a:6f:92:8b:48:b8:12:db:19:8c:10:69:01:
         d7:57:4a:cb:85:2e:7f:db:b0:47:4b:4e:e9:ff:7d:fb:70:04:
         11:eb:68:32:c7:c7:48:1e:34:d9:25:9d:b1:fa:22:0f:c0:9c:
         7b:e6:e0:3e:c2:08:4b:38:11:d5:3f:bf:c4:7e:a1:3f:4b:49:
         63:9a:d6:05:77:b1:f1:2a:38:f1:b0:74:90:2b:c9:e0:b5:ee:
         5f:13:7a:e6:ae:14:46:ff:1f:5e:fa:f9:bf:e4:79:e1:7d:8e:
         ba:e3:67:89:87:4a:19:31:26:1a:33:0b:26:d5:14:ff:c0:19:
         8c:59:90:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:43:06 2026 by rpki-client