Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/7d4082f3-79b6-3301-aee4-ac31f434f27a.roa
File:                     7d4082f3-79b6-3301-aee4-ac31f434f27a.roa (raw, json)
Hash identifier:          VPljNFq+nSeSD1MZrFOsxVYgON4d51xFcEejx3oz4as=
Subject key identifier:   D3:DB:0C:88:1E:EE:0E:2F:71:A8:48:B0:5C:86:8B:7B:05:19:23:EC
Certificate issuer:       /CN=e6948ae7-36f2-49ff-ae79-8de3b34aa992
Certificate serial:       010D0C9F4328584D667D4D2757296547D1220F00
Authority key identifier: 7B:3C:92:3D:B0:B2:70:C4:06:3F:46:A5:6D:00:73:D8:47:56:5D:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/7d4082f3-79b6-3301-aee4-ac31f434f27a.roa
Signing time:             Sun 05 Apr 2026 01:06:30 +0000
ROA not before:           Sun 05 Apr 2026 01:06:30 +0000
ROA not after:            Sat 04 Jul 2026 01:06:30 +0000
asID:                     401486
IP address blocks:        130.12.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/e6948ae7-36f2-49ff-ae79-8de3b34aa992.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/e6948ae7-36f2-49ff-ae79-8de3b34aa992.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7d:4d:27:57:29:65:47:d1:22:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6948ae7-36f2-49ff-ae79-8de3b34aa992
        Validity
            Not Before: Apr  5 01:06:30 2026 GMT
            Not After : Jul  4 01:06:30 2026 GMT
        Subject: CN=21320d2c-e972-4dca-a7ca-d5ae1cad565e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6f:5d:05:5d:a4:fa:c1:50:91:20:c4:79:5a:
                    70:fa:df:e3:d8:0a:cf:02:a7:f5:74:ad:b6:d7:25:
                    a5:28:17:75:bc:b0:cb:93:37:6b:c2:a5:ca:1c:90:
                    da:d9:57:8c:7b:a2:8a:2d:48:0d:bf:65:be:7c:9a:
                    c3:e1:ac:35:0e:d6:01:76:ec:d6:50:76:9b:eb:de:
                    aa:85:06:a8:f3:2d:69:08:13:3c:cd:7a:72:01:98:
                    23:41:f7:5e:ce:0c:a2:2b:6a:72:13:0b:4d:7f:d0:
                    dd:b2:a9:d9:73:8e:f6:b5:bb:9c:77:a9:3d:96:2f:
                    cb:83:4a:2b:e7:4f:28:23:90:56:38:74:30:6e:4b:
                    49:b1:1f:3a:3b:54:a7:e9:a9:f5:6c:4c:da:ac:21:
                    77:c9:85:b4:47:37:db:a6:90:32:9a:59:64:37:06:
                    0e:3c:88:b4:11:e5:7a:14:0d:19:b2:65:9f:34:61:
                    fe:40:fc:15:38:ae:f0:a4:8e:16:90:33:f6:49:a1:
                    aa:e2:1f:67:72:e2:63:9a:ef:08:2c:8f:ef:9a:02:
                    8f:3a:39:88:d2:aa:a0:4b:ff:69:fc:f3:47:31:4e:
                    3d:af:ce:73:a6:09:91:26:de:4d:26:ad:a7:a0:02:
                    0b:c4:67:58:18:a3:68:7c:10:fa:f0:c7:7f:0b:6b:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DB:0C:88:1E:EE:0E:2F:71:A8:48:B0:5C:86:8B:7B:05:19:23:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/7d4082f3-79b6-3301-aee4-ac31f434f27a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/e6948ae7-36f2-49ff-ae79-8de3b34aa992.crl

            X509v3 Authority Key Identifier:
                keyid:7B:3C:92:3D:B0:B2:70:C4:06:3F:46:A5:6D:00:73:D8:47:56:5D:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:86:75:65:0b:78:f2:12:ca:c6:34:af:a0:37:c5:da:8e:fe:
         2c:07:49:45:6d:2c:02:a6:30:12:11:a5:4c:4c:a6:bb:39:c3:
         b3:20:8f:30:95:6d:37:b8:a3:5a:7b:90:c1:41:59:0f:9e:eb:
         6b:fc:29:96:63:8a:b4:c8:f1:09:26:91:e2:8f:70:1a:8c:ac:
         06:8f:48:a1:fa:c1:a1:fc:6d:8a:28:da:76:33:02:2a:bc:24:
         63:98:cb:ee:62:f7:6c:22:87:48:9d:43:84:b2:c1:7a:74:91:
         84:7d:4f:72:3d:f9:2d:b0:fe:32:7f:2c:8c:20:c3:4b:db:da:
         2c:7a:94:fd:32:6e:df:b5:be:36:32:9e:a7:94:ed:7c:15:e5:
         7d:cb:a9:0a:d9:89:a7:fe:f9:4c:04:ad:54:7f:3d:d6:59:ad:
         43:23:25:d2:2d:1e:b3:11:e4:0e:c2:4e:8a:44:72:bd:ba:4a:
         45:1e:03:80:db:9e:17:99:f6:76:7f:e6:bb:a2:7f:44:bb:3f:
         69:f8:ba:5a:ec:61:e4:91:4f:c9:30:f0:a0:34:c0:f8:ca:ff:
         07:e2:a4:3a:34:5d:ef:9c:35:b0:67:0e:75:3e:a3:e1:c9:d8:
         35:e6:a7:91:ac:e2:aa:b2:bf:18:ec:8e:18:ae:46:00:11:4c:
         5a:21:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:44 2026 by rpki-client