Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/cf435177-d899-3b98-b125-e7e093fe112a.roa
File:                     cf435177-d899-3b98-b125-e7e093fe112a.roa (raw, json)
Hash identifier:          twZiZCFmmq7y8+vht3E5Y76yXbezFHo9+jHEiBJo3O0=
Subject key identifier:   12:F0:5C:BA:A4:E3:B2:58:EC:84:7C:6D:64:9C:65:5E:EE:EF:41:E1
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584CB121BF969E145808D06F2A40
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/cf435177-d899-3b98-b125-e7e093fe112a.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     21976
IP address blocks:        130.156.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:bf:96:9e:14:58:08:d0:6f:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=94b24a0f-efb1-4dd4-b196-98f5eebd3535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:2f:31:95:d8:bb:b3:e3:c4:0c:a5:89:31:
                    95:4d:c8:e6:3b:b6:36:4a:06:df:08:45:19:3a:0a:
                    aa:ce:10:15:c0:7f:2f:58:d2:5a:c2:e5:ff:05:f2:
                    89:1e:38:90:56:d9:33:5e:02:7b:c9:6f:b5:6c:73:
                    20:1b:36:00:ba:2d:4f:8a:51:d1:b1:b7:e2:18:4b:
                    bd:ce:a9:10:85:ba:7f:f1:8b:91:63:3f:5b:e2:71:
                    d8:2c:83:be:4f:c3:24:b0:4d:e9:25:d9:c8:cc:e1:
                    10:79:a4:5c:9c:d9:57:3f:39:a6:ef:ba:48:a7:d7:
                    7e:c8:74:65:46:d1:7f:57:54:3f:cf:c0:33:2e:39:
                    aa:82:b6:02:39:5f:dd:b8:4b:1a:99:9e:9c:fc:16:
                    02:90:e6:a8:5f:b1:4f:0d:5e:33:be:03:81:c8:48:
                    fb:f0:45:9c:20:bd:de:98:28:40:d3:52:41:2f:f4:
                    8c:8d:86:d6:1c:26:d1:e2:24:c6:73:2b:c4:c5:42:
                    a6:a7:7d:c3:c5:93:60:8b:c9:b3:c1:52:3b:c6:15:
                    e7:00:b7:f5:32:9d:df:7f:cb:4e:3b:d0:11:ce:ab:
                    3f:95:92:48:4c:29:e5:88:02:5b:d1:bc:f6:12:7f:
                    60:6d:74:6b:0c:2f:f3:10:9e:95:6a:7a:e3:81:e6:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F0:5C:BA:A4:E3:B2:58:EC:84:7C:6D:64:9C:65:5E:EE:EF:41:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/cf435177-d899-3b98-b125-e7e093fe112a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:d1:8f:4b:14:e1:9b:5e:85:fe:3e:06:d8:e9:45:3a:66:29:
         ea:07:8a:8f:92:0e:5f:7a:25:5b:d9:dd:f9:45:90:6e:8d:60:
         8b:e2:f3:59:45:01:21:8d:29:8b:17:97:0b:d7:5f:89:72:f7:
         cd:57:2c:93:c2:10:6b:dc:15:e2:89:35:e6:49:85:4b:d7:d3:
         8f:34:67:c8:51:eb:68:59:5e:d4:01:86:7e:54:2f:4d:0c:8d:
         fd:4a:3e:2a:56:fa:fc:c4:89:6a:c6:9b:32:2c:29:28:59:3f:
         c1:61:d9:72:55:27:98:c7:d7:5c:a1:ca:0d:73:f0:fc:aa:ed:
         15:1c:cf:e4:e8:76:a9:7f:16:3e:ce:f2:32:81:3e:35:6c:25:
         da:70:e5:5b:2f:80:cd:4a:dc:38:88:1a:4c:69:c0:31:4b:48:
         4f:20:63:11:0e:1c:d6:d7:d6:8c:73:0d:be:a1:6b:59:1e:9f:
         45:4a:81:6c:a5:be:31:21:bb:6c:60:02:75:42:91:e4:a0:bb:
         e0:08:1e:e5:fa:a8:76:b2:34:84:02:1a:aa:a6:07:bb:53:1b:
         5e:ed:9c:2a:ad:74:eb:73:45:79:ff:e5:6e:95:f9:9b:e8:0f:
         bf:e5:4e:64:46:2b:d1:e4:46:bc:92:91:28:1c:6a:1c:6a:a9:
         19:5f:27:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:51 2026 by rpki-client