Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/9d4a0e16-b554-3878-abab-449e1b09b084.roa
File:                     9d4a0e16-b554-3878-abab-449e1b09b084.roa (raw, json)
Hash identifier:          iMWawA2QVepUrkVLXktM4/++70ugXlYp/QMhx/tf8c4=
Subject key identifier:   7F:9D:D9:55:97:90:69:EC:ED:0A:38:2E:1E:5D:B3:33:0B:F1:85:00
Certificate issuer:       /CN=a6e2845d-3d1c-4612-b11c-d852ceebfa50
Certificate serial:       010D0C9F4328584D65152EAB817F37178BF2BDC0
Authority key identifier: 44:B8:D9:FC:45:E5:BB:CC:B1:A4:1C:76:06:E3:87:07:47:3D:94:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/9d4a0e16-b554-3878-abab-449e1b09b084.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     20473
IP address blocks:        130.51.67.0/24 maxlen: 24
                          2620:53:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2e:ab:81:7f:37:17:8b:f2:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6e2845d-3d1c-4612-b11c-d852ceebfa50
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=a2869e08-395c-4ee6-bdb1-06972329ec53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:96:41:d5:14:5d:0c:71:8e:13:7c:9a:89:
                    9a:67:72:25:aa:4e:b2:38:29:13:67:c4:1d:6c:58:
                    d0:45:13:ac:97:d2:ae:8a:f2:66:69:c1:69:75:e0:
                    52:1f:ec:63:f3:b1:9d:e2:af:a7:49:cc:2d:5b:7b:
                    ca:78:58:78:7a:6c:a3:da:cb:ac:25:87:32:e7:1a:
                    36:82:55:eb:97:ad:6a:52:36:c3:18:2e:4e:00:4a:
                    a3:45:97:86:32:15:27:73:c5:0e:60:e2:69:0a:ee:
                    a5:11:64:0f:bd:43:ce:cd:70:46:1d:74:0a:b3:25:
                    1e:6f:65:63:c8:3b:dc:d3:4d:c0:ca:46:9e:5a:7c:
                    0e:b6:fd:12:32:63:84:b5:f2:2a:56:fa:c1:6e:9d:
                    19:fc:f4:44:13:3b:5a:e4:33:b8:55:99:5d:48:a2:
                    45:17:69:90:7f:0a:23:aa:25:d5:f5:e9:c7:bb:4f:
                    16:fa:02:db:77:62:37:97:6c:73:8a:da:b7:90:dd:
                    1c:4d:3c:3d:08:53:60:f1:1c:81:86:f0:9a:3b:c7:
                    63:6f:a6:e2:c2:04:f8:71:15:74:0a:69:8d:d7:63:
                    14:18:c5:a1:47:48:5d:d2:63:95:b4:df:c1:4c:60:
                    10:ae:05:20:59:c2:30:04:56:c6:9a:cb:03:63:7c:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9D:D9:55:97:90:69:EC:ED:0A:38:2E:1E:5D:B3:33:0B:F1:85:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/9d4a0e16-b554-3878-abab-449e1b09b084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50/a6e2845d-3d1c-4612-b11c-d852ceebfa50.crl

            X509v3 Authority Key Identifier:
                keyid:44:B8:D9:FC:45:E5:BB:CC:B1:A4:1C:76:06:E3:87:07:47:3D:94:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a6e2845d-3d1c-4612-b11c-d852ceebfa50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.67.0/24
                IPv6:
                  2620:53:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:86:9d:cc:47:03:eb:2e:54:6e:1a:9b:b5:c5:d1:b5:9a:e1:
         44:18:88:f6:c2:86:6b:36:17:d9:13:f0:22:24:15:ae:04:c6:
         21:c8:0d:92:f5:f1:92:34:a8:ee:33:2e:41:5a:71:4c:df:98:
         54:28:0e:a0:70:2c:51:06:81:f1:43:f9:b9:29:ff:d4:68:4d:
         3a:06:82:6e:8c:5d:f1:73:80:54:76:22:43:31:4a:b2:a0:aa:
         34:66:d8:56:84:61:83:6c:4c:fb:d5:cd:51:7f:1f:49:93:bb:
         b9:41:df:4c:8f:32:ec:c3:03:ea:ea:93:66:80:73:5e:2a:2f:
         96:57:1e:26:fc:bc:7c:13:f5:6c:0a:cc:48:70:84:c5:0e:59:
         94:2b:d2:15:e2:c4:e7:a8:48:cf:3f:bf:5e:e8:13:04:82:3d:
         67:4d:dc:c2:f3:96:8c:b3:e8:bf:48:20:89:df:43:64:9e:df:
         0c:11:dd:df:3b:48:92:03:9a:96:de:17:e9:f0:ae:70:3a:c1:
         65:29:28:64:44:ce:b5:ba:60:85:8c:65:fe:70:7c:88:50:22:
         6b:3e:ce:11:a2:29:d8:a8:b3:24:85:1d:48:1c:18:f9:30:7e:
         73:5c:60:02:ae:6f:98:5b:84:e8:cc:cb:78:5c:44:d1:45:e6:
         34:bd:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:01 2026 by rpki-client