Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5/fead7af1-33fc-300e-87dd-b4d84722fc75.roa
File:                     fead7af1-33fc-300e-87dd-b4d84722fc75.roa (raw, json)
Hash identifier:          QxUIBobBAEC/Kyfs5vDKKtgh4cnW4D4SwtGP43pyBK4=
Subject key identifier:   8A:00:EE:53:4D:84:F7:88:24:30:46:E4:E3:C6:53:74:0D:8C:98:A8
Certificate issuer:       /CN=ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5
Certificate serial:       010D0C9F4328584F27F252730FD9F1758B1C3FE0
Authority key identifier: E7:63:87:72:DC:08:86:6D:14:8D:63:B7:A9:6A:95:6D:31:50:E6:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5/fead7af1-33fc-300e-87dd-b4d84722fc75.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     398158
IP address blocks:        130.51.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5/ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5/ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:52:73:0f:d9:f1:75:8b:1c:3f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=2fa163c5-66df-4469-bc32-5bffc12c3647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:a4:55:a6:0e:06:96:37:ea:f7:ed:15:c6:
                    a7:b6:d2:40:c6:29:ae:19:ad:76:96:54:62:54:2b:
                    b1:6d:07:14:81:2b:cb:64:20:0a:88:66:28:e1:52:
                    78:ed:5b:2f:a7:3a:25:bf:0a:15:b7:f0:40:35:04:
                    94:7b:ef:c9:7e:fa:d8:bf:06:36:19:58:97:0f:ba:
                    a7:3d:ca:d5:64:87:68:90:56:c7:8c:96:58:28:31:
                    87:12:fb:a7:53:95:ac:6d:54:e7:c1:80:68:5b:8e:
                    6b:72:6c:30:e7:be:09:af:25:76:04:91:ba:72:d9:
                    b0:e3:e2:aa:23:cf:4b:82:2a:9c:f6:e7:04:d4:cf:
                    78:9e:4c:51:4b:a8:a7:59:ca:e3:40:87:a8:8b:34:
                    0e:bc:d7:5f:57:99:20:af:17:ff:51:f7:5b:8f:10:
                    fe:f4:49:44:b5:8a:a4:8d:32:67:9f:65:fe:3c:ee:
                    18:68:4e:af:57:38:cc:93:e0:da:05:db:b1:38:36:
                    5f:9c:04:10:21:20:46:44:52:b9:6f:70:ac:28:fa:
                    c4:3f:63:b0:d6:d0:94:f6:d2:9d:02:49:ac:50:e1:
                    f4:25:58:50:2b:57:c6:34:53:16:b0:7f:d1:22:d7:
                    84:be:ff:4c:77:22:d4:96:94:b7:6b:67:3b:67:d7:
                    6f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:00:EE:53:4D:84:F7:88:24:30:46:E4:E3:C6:53:74:0D:8C:98:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5/fead7af1-33fc-300e-87dd-b4d84722fc75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5/ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5.crl

            X509v3 Authority Key Identifier:
                keyid:E7:63:87:72:DC:08:86:6D:14:8D:63:B7:A9:6A:95:6D:31:50:E6:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec498ce4-fea1-40a5-8dc3-bd1c38bb02c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d9:7c:aa:cc:eb:7e:ee:ec:fe:49:1c:2a:79:d3:6e:9b:00:
         57:aa:7c:7e:dc:ea:39:f8:50:9b:b3:a1:e1:19:9f:c2:af:ab:
         06:79:06:c4:53:93:e6:7a:e8:bc:2b:4f:12:18:0f:83:7f:c7:
         56:c4:be:bc:0a:72:c8:44:24:a8:1b:f1:9b:df:cc:a3:ff:a5:
         5f:1e:59:6d:2f:97:46:60:c6:85:75:df:03:62:79:9b:6a:96:
         13:f4:e3:80:89:74:bf:56:81:6b:c4:8c:f2:9c:5d:4e:53:ac:
         7c:c6:a7:13:2d:b3:e5:5b:84:f3:3f:e6:f8:15:6a:78:09:20:
         6b:87:19:d9:8e:e0:ef:53:10:95:c8:b7:e5:14:03:c1:c9:ef:
         50:65:fb:61:a7:ef:d3:cd:1e:85:d3:b3:6f:d8:95:2a:66:02:
         9d:ed:6e:3f:08:cd:6e:67:5a:d1:ec:f7:d6:20:62:c4:81:63:
         a8:1b:4f:2d:64:85:fd:d8:29:ce:07:99:56:28:63:a0:bb:50:
         4f:22:98:6f:d8:1b:5a:40:1c:31:98:e3:68:11:17:10:01:70:
         08:5b:b9:a6:f2:89:24:f2:35:cf:5a:54:2c:2b:08:f7:62:10:
         cd:d8:22:89:44:69:c3:c8:44:52:05:10:8b:03:47:c6:66:2b:
         f0:ca:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:58:16 2026 by rpki-client