Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/78eb1a4c-6ebe-3cc0-b8f2-7b60f30b2d44.roa
File:                     78eb1a4c-6ebe-3cc0-b8f2-7b60f30b2d44.roa (raw, json)
Hash identifier:          PMB9bj7A60/SYuZ5WDKmefmnvBUFI20tMBVDXf/8hMI=
Subject key identifier:   11:CE:C6:66:C7:00:6F:38:BC:C5:31:DC:99:C4:E0:C5:4F:DD:EF:F1
Certificate issuer:       /CN=cb84dafa-5c30-4458-8de9-79ae91217514
Certificate serial:       010D0C9F4328584E151C2D1B74D34FD5B650AAC0
Authority key identifier: 4E:40:4E:4E:7B:43:0E:09:9A:CA:36:5F:7E:7D:B2:33:2F:F2:F0:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/78eb1a4c-6ebe-3cc0-b8f2-7b60f30b2d44.roa
Signing time:             Sat 06 Jun 2026 14:17:16 +0000
ROA not before:           Sat 06 Jun 2026 14:17:16 +0000
ROA not after:            Fri 04 Sep 2026 14:17:16 +0000
asID:                     212071
IP address blocks:        130.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/cb84dafa-5c30-4458-8de9-79ae91217514.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/cb84dafa-5c30-4458-8de9-79ae91217514.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:1c:2d:1b:74:d3:4f:d5:b6:50:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb84dafa-5c30-4458-8de9-79ae91217514
        Validity
            Not Before: Jun  6 14:17:16 2026 GMT
            Not After : Sep  4 14:17:16 2026 GMT
        Subject: CN=4d186326-2c40-4c8c-a30f-d7554a4d6f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:d8:f1:5d:f9:0c:c9:27:99:94:3e:5e:fd:
                    fd:49:9c:ae:ff:69:6a:66:53:d0:bb:86:3c:19:f7:
                    15:36:3a:21:76:a6:ba:ea:0d:9c:8a:ed:fe:aa:29:
                    89:10:1a:8f:74:73:cc:e2:66:14:d8:52:fc:c6:53:
                    78:5a:59:e4:97:e4:b3:e9:cb:34:2b:d6:60:2f:e0:
                    d8:5f:29:30:17:53:43:51:a1:1e:c0:4c:6f:e2:0b:
                    70:97:ff:75:da:06:54:44:f3:a3:89:e0:45:35:2a:
                    ba:30:14:6b:7e:14:c0:9d:fb:9e:b8:85:ad:bc:4f:
                    6b:dd:72:86:18:d5:d9:a0:71:d1:46:aa:8d:73:4b:
                    09:b1:45:61:f4:fd:f7:1e:18:49:99:f4:e6:56:33:
                    d2:6c:0a:82:b2:6b:da:d9:09:da:0d:1f:48:c9:2c:
                    d8:af:d5:8e:ac:aa:79:7d:56:f6:0e:ad:38:71:5b:
                    2d:58:8b:eb:05:20:0f:33:2e:eb:54:da:76:56:52:
                    90:2c:c0:1f:d0:62:c1:3e:97:c1:b0:74:b4:a5:3a:
                    0f:e3:5d:97:9f:c3:d0:2e:31:0e:f1:c4:7e:bf:ca:
                    b9:9e:81:5f:0a:37:29:fb:3d:06:0c:2c:63:8d:49:
                    e9:a7:0e:7e:f3:3b:79:c6:b0:92:47:0c:24:ac:33:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CE:C6:66:C7:00:6F:38:BC:C5:31:DC:99:C4:E0:C5:4F:DD:EF:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/78eb1a4c-6ebe-3cc0-b8f2-7b60f30b2d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/cb84dafa-5c30-4458-8de9-79ae91217514.crl

            X509v3 Authority Key Identifier:
                keyid:4E:40:4E:4E:7B:43:0E:09:9A:CA:36:5F:7E:7D:B2:33:2F:F2:F0:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:bf:27:0a:4a:c1:d7:93:99:4a:8c:2e:d6:fa:f6:ed:f4:26:
         71:f5:13:70:0e:8c:47:00:91:42:d6:b3:89:c1:38:1e:63:0c:
         23:44:1e:fd:57:8f:0c:8b:6b:f1:d4:3a:28:38:ac:d6:67:ec:
         8b:f3:09:24:a8:da:66:b5:4e:22:1c:41:40:37:57:0d:b8:6e:
         cb:d4:10:71:06:d1:b1:d1:f3:80:2d:22:36:51:45:9d:50:01:
         dc:1c:7e:8b:77:39:1a:01:6d:df:8e:2f:9f:89:c5:1a:02:e2:
         6f:35:1a:57:5c:10:43:3b:5b:ab:45:7a:07:65:26:fa:87:f7:
         c5:2e:2d:57:73:14:1f:3e:9d:90:ce:92:5e:7b:ef:0c:e3:c6:
         4f:04:ae:a8:16:6e:6e:d9:84:88:50:78:43:77:b7:f8:17:d1:
         cb:7a:c9:bd:3e:10:04:00:ea:4d:16:a0:89:fc:44:f4:ba:8a:
         21:a5:81:50:b2:d3:9e:9e:60:1a:86:80:15:e6:e5:8d:02:cd:
         12:d5:0e:1b:46:b4:e3:0f:8a:de:f0:78:f0:83:a4:11:f9:84:
         42:fa:e1:31:bf:a4:cd:66:9d:05:ac:18:17:96:5c:33:30:1c:
         63:ac:80:7d:cb:68:4d:1c:e4:64:45:86:b3:9b:69:e3:13:79:
         24:a5:ce:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:51:37 2026 by rpki-client