Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/80ab3809-3297-3c0b-95d9-0169f274d1a4.roa
File:                     80ab3809-3297-3c0b-95d9-0169f274d1a4.roa (raw, json)
Hash identifier:          nNxqR+xqaDqdv6TUTzzmhOyVBQn7peHMlHMDsHW/b6M=
Subject key identifier:   0C:46:F6:F6:A8:CD:1D:84:60:06:99:18:4A:27:67:60:4D:76:56:5D
Certificate issuer:       /CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46
Certificate serial:       010D0C9F4328584D757338803A95DDFB5191AC2C
Authority key identifier: 41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/80ab3809-3297-3c0b-95d9-0169f274d1a4.roa
Signing time:             Fri 10 Apr 2026 09:43:18 +0000
ROA not before:           Fri 10 Apr 2026 09:43:18 +0000
ROA not after:            Thu 09 Jul 2026 09:43:18 +0000
asID:                     152179
IP address blocks:        130.12.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:73:38:80:3a:95:dd:fb:51:91:ac:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46
        Validity
            Not Before: Apr 10 09:43:18 2026 GMT
            Not After : Jul  9 09:43:18 2026 GMT
        Subject: CN=750bc39c-2fc5-46f7-8586-094dc08b6b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:29:bb:1f:66:38:c0:36:8d:7e:f5:b1:95:b0:
                    cf:ca:7d:b9:a9:c4:51:ed:a1:ba:12:f1:ea:c2:ff:
                    6b:a6:fa:30:d1:6a:b0:cb:87:78:b1:4e:50:77:77:
                    4e:f6:a0:c3:ba:0c:4f:3b:06:11:37:a6:18:ce:2f:
                    3b:0b:41:a7:40:7e:65:6d:d5:ea:50:9b:86:02:96:
                    65:88:56:0a:f4:f1:b8:d6:3f:a6:c9:b9:ed:c9:ef:
                    9d:1d:2d:c3:22:90:d0:2b:fc:7d:11:f6:4a:be:14:
                    ab:b3:30:74:b1:32:55:6f:be:85:83:88:f2:54:83:
                    63:f3:f9:f4:85:52:f8:68:1d:9a:e5:25:a6:08:42:
                    ce:c6:cc:d5:82:0c:49:8d:d9:0f:bf:25:12:af:b1:
                    64:75:fb:93:8a:21:cb:40:97:47:27:de:ba:e2:fd:
                    12:ac:99:00:69:aa:35:ee:2d:96:05:51:d1:e4:f1:
                    b7:94:61:51:bf:f3:22:db:84:1c:da:40:dd:72:3a:
                    4b:08:5a:98:75:c7:ae:10:36:02:c6:57:63:6a:62:
                    bc:17:ab:46:68:a1:b8:3f:c8:09:15:04:e7:54:88:
                    2d:89:08:9c:8b:13:05:8d:a0:97:58:31:ce:df:a5:
                    2a:d0:3d:79:b2:e7:06:d3:9c:f1:a2:1d:55:e7:8d:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:46:F6:F6:A8:CD:1D:84:60:06:99:18:4A:27:67:60:4D:76:56:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/80ab3809-3297-3c0b-95d9-0169f274d1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.crl

            X509v3 Authority Key Identifier:
                keyid:41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:07:74:f6:70:35:a4:df:7b:24:ff:8e:8f:86:8e:6e:06:
         3f:ac:7a:62:7e:3a:fb:52:4a:68:cd:6f:f6:a2:e0:02:e2:6a:
         7d:51:13:19:e4:67:4c:7c:54:96:f1:22:71:f1:a6:b4:c8:6f:
         66:69:0d:ab:a2:f4:54:be:e0:58:2d:b6:e5:e0:49:4e:e7:80:
         cc:3b:ed:3a:28:8e:1b:c6:6e:cc:20:52:7d:9f:b4:bf:4b:ec:
         48:e5:db:93:03:36:4a:39:22:20:47:ac:ad:08:74:9e:39:5c:
         cc:f8:6d:e2:d1:1e:76:da:74:fb:47:a4:15:3a:c6:94:08:04:
         99:83:3e:d1:cb:fe:a2:33:16:4a:30:1d:cf:56:12:1a:5b:2b:
         52:3b:c0:3f:5e:e1:41:8f:73:e0:0c:56:9d:14:4d:3a:3a:fd:
         8b:be:ef:ac:56:e3:78:7e:85:1c:f8:b0:ba:52:31:7e:7f:72:
         0c:5d:b9:f7:fa:a1:d5:6c:90:c9:25:5a:3d:48:7a:d0:35:db:
         f9:9c:03:e8:36:c1:69:51:1d:bd:df:85:0c:76:d1:d2:10:b7:
         b6:49:73:ec:f7:7b:c8:59:01:c6:02:8f:19:68:7e:93:27:88:
         a5:1d:e8:33:df:c3:18:a5:a6:5f:5b:74:bf:b6:3f:46:67:c8:
         4b:d8:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:24 2026 by rpki-client