Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9502864c-fddc-44c2-8779-f623b645e7ba/c0214fdc-eb17-3ed0-be98-0b6e4f34f65c.roa
File:                     c0214fdc-eb17-3ed0-be98-0b6e4f34f65c.roa (raw, json)
Hash identifier:          Vim9AxVGPHY/HXBEsge5DWTLGSIWgC11iwJqNwUOfCY=
Subject key identifier:   98:E7:93:BE:14:52:8E:43:D6:C9:24:50:4F:C6:DA:69:D1:4F:A2:1D
Certificate issuer:       /CN=9502864c-fddc-44c2-8779-f623b645e7ba
Certificate serial:       010D0C9F4328584D5234F4E5E86DEF78BE6E12C0
Authority key identifier: 35:1C:39:5F:EF:AD:2C:6F:F5:E4:B3:6D:D4:4D:E3:D6:56:AB:CC:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9502864c-fddc-44c2-8779-f623b645e7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9502864c-fddc-44c2-8779-f623b645e7ba/c0214fdc-eb17-3ed0-be98-0b6e4f34f65c.roa
Signing time:             Sat 28 Mar 2026 18:44:34 +0000
ROA not before:           Sat 28 Mar 2026 18:44:34 +0000
ROA not after:            Fri 15 May 2026 02:42:18 +0000
asID:                     397312
IP address blocks:        130.44.211.0/24 maxlen: 24
                          216.239.100.0/22 maxlen: 24
                          2605:29c0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9502864c-fddc-44c2-8779-f623b645e7ba/9502864c-fddc-44c2-8779-f623b645e7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9502864c-fddc-44c2-8779-f623b645e7ba/9502864c-fddc-44c2-8779-f623b645e7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9502864c-fddc-44c2-8779-f623b645e7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:f4:e5:e8:6d:ef:78:be:6e:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9502864c-fddc-44c2-8779-f623b645e7ba
        Validity
            Not Before: Mar 28 18:44:34 2026 GMT
            Not After : May 15 02:42:18 2026 GMT
        Subject: CN=3034c767-c35e-4397-bf0b-8b9bf896ebba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:32:14:9d:6c:5d:d7:73:95:3b:38:12:99:
                    e6:0b:35:21:90:ab:ac:dc:bd:10:c9:db:25:9a:d0:
                    8e:c1:a5:49:0b:29:45:ed:7c:47:f2:86:5d:a5:f4:
                    99:69:75:80:cf:47:d1:87:35:ed:ab:02:46:5c:aa:
                    49:af:28:02:15:6c:6c:a7:f0:3d:b8:25:42:17:0f:
                    93:f2:ee:03:76:cc:3d:ba:37:39:77:68:ac:dd:8b:
                    2d:13:0f:68:16:ee:dd:4f:e3:49:54:69:d7:2c:7f:
                    fa:49:ca:97:6e:20:9a:c1:a7:71:7a:8d:d0:4e:b8:
                    a2:1a:65:7e:0c:49:12:75:46:f2:2e:af:25:1c:09:
                    b5:19:3a:89:f2:e8:83:ae:6c:d5:88:9e:03:e6:45:
                    51:24:df:5a:8e:dc:44:b4:c4:d8:0f:77:63:07:80:
                    36:60:7f:2c:82:6e:4a:5a:13:3a:44:4d:e1:37:14:
                    ba:3e:ac:99:e5:12:df:e6:a2:45:02:08:b3:9e:cd:
                    52:39:a5:53:03:fc:0e:62:bc:b7:e1:94:b8:d9:73:
                    df:71:d0:77:c4:a2:56:3b:e4:92:64:80:1f:e5:51:
                    cb:66:21:5d:c1:bf:c6:e3:2b:71:20:91:3b:d1:a7:
                    e6:06:97:5e:e1:20:0d:fc:65:ae:f3:e7:59:dc:de:
                    60:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E7:93:BE:14:52:8E:43:D6:C9:24:50:4F:C6:DA:69:D1:4F:A2:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9502864c-fddc-44c2-8779-f623b645e7ba/c0214fdc-eb17-3ed0-be98-0b6e4f34f65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9502864c-fddc-44c2-8779-f623b645e7ba/9502864c-fddc-44c2-8779-f623b645e7ba.crl

            X509v3 Authority Key Identifier:
                keyid:35:1C:39:5F:EF:AD:2C:6F:F5:E4:B3:6D:D4:4D:E3:D6:56:AB:CC:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9502864c-fddc-44c2-8779-f623b645e7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.44.211.0/24
                  216.239.100.0/22
                IPv6:
                  2605:29c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:22:ab:93:73:3c:cd:55:e2:1a:d9:9b:10:6c:93:be:63:fc:
         fb:1f:91:85:29:a9:b0:24:39:a4:7b:95:d6:66:17:28:63:73:
         06:7b:38:e6:72:de:17:e4:75:11:ef:4b:64:15:c2:e6:ae:8e:
         f4:da:da:47:97:fb:fd:15:ba:ab:e0:a2:96:4e:ea:9e:c2:a5:
         39:41:e3:17:75:36:1f:c7:61:5f:52:7b:ce:87:5d:36:01:99:
         89:93:c4:bd:71:38:5e:bd:76:09:ca:17:b5:5b:3d:0b:81:f4:
         5c:85:bd:45:b6:1a:a5:a0:39:28:28:f6:ab:1f:ff:ef:1c:d6:
         1d:e4:e9:f0:a2:cb:de:79:16:e0:f6:23:b3:72:49:4d:24:4f:
         ef:d7:a7:37:34:80:53:17:5a:1d:e0:92:46:ef:f3:55:77:be:
         06:8d:7f:6c:b0:8e:a4:34:84:24:1c:b5:fc:9a:ba:58:f5:41:
         c8:be:3d:78:5d:80:16:f8:81:a2:c7:19:3e:c5:12:1b:31:2f:
         71:4e:42:2f:37:23:f1:a6:85:74:a8:71:61:9a:b7:6d:2b:40:
         8b:71:24:ca:a2:8e:a6:f5:70:1d:ff:8e:30:e6:d7:90:c8:78:
         b1:93:bf:79:b0:f7:4d:ed:d2:b1:85:72:cb:33:e0:07:81:65:
         62:38:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:14:12 2026 by rpki-client