Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa
File:                     6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa (raw, json)
Hash identifier:          cnLLyMbWwepKEwuUuOyPaxO2snQP+Zrygale9eiP9B8=
Subject key identifier:   2E:B7:4D:92:0E:A1:B7:E8:9C:19:4C:2B:50:1D:A7:13:40:37:73:7D
Certificate issuer:       /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Certificate serial:       010D0C9F4328584EA78F463702F660C9AC234D00
Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6859
IP address blocks:        130.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:46:37:02:f6:60:c9:ac:23:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=771d5987-4def-4ce4-96a1-3ec9464231c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:59:88:a4:1b:ed:af:36:31:2e:78:95:a0:cb:
                    2e:5a:c1:45:76:7b:f0:f1:a7:cb:8f:ae:f1:1e:fc:
                    4c:ca:47:30:24:7a:48:a4:aa:17:dd:1f:03:3b:ae:
                    0d:33:c4:68:5a:09:42:24:c0:9a:e1:9d:54:c1:1c:
                    93:21:25:d0:38:79:30:8c:e1:38:d8:c3:a3:95:c5:
                    79:b8:f5:c7:0e:cd:2f:82:9d:52:ab:3b:e5:5f:64:
                    8f:08:fe:fe:7f:93:38:eb:0d:b7:7b:04:76:cb:37:
                    fd:a1:57:4a:3b:91:7d:d8:89:2e:b4:6f:5c:ca:3d:
                    4c:99:7c:29:08:ff:88:89:85:f6:40:2d:2a:10:74:
                    df:94:9a:35:7d:44:10:d6:d2:40:24:15:1c:01:9d:
                    dc:cb:ec:c9:2d:77:b2:65:d4:50:d2:15:f6:e1:e5:
                    21:ec:41:69:b0:df:81:96:c0:ea:7c:6b:ac:2e:b2:
                    e5:54:f7:0d:01:58:ab:44:38:dc:33:b0:3b:90:e7:
                    6d:ef:68:21:8c:27:7a:0d:cc:dd:ec:54:35:f8:9c:
                    00:8b:12:0f:c8:16:66:a3:73:3e:2e:d3:be:c3:73:
                    4d:d8:31:b6:8a:35:bf:7e:4b:d6:49:b3:31:c3:1d:
                    75:0e:26:7d:21:74:24:26:12:1e:f1:6e:d1:3c:a2:
                    c7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B7:4D:92:0E:A1:B7:E8:9C:19:4C:2B:50:1D:A7:13:40:37:73:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl

            X509v3 Authority Key Identifier:
                keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c6:a1:90:71:d9:8f:50:82:54:a1:3f:fb:3c:38:67:eb:d5:
         17:b9:23:8c:89:24:2b:67:21:0e:9a:70:14:e0:db:64:fc:21:
         ae:40:29:b1:5c:30:4a:da:4e:d4:5c:4f:80:a7:79:b9:97:e4:
         69:08:50:a1:0a:48:de:41:60:82:e2:17:80:5d:9a:b2:a8:5b:
         63:a1:90:49:28:af:1a:05:ff:8e:8d:b7:29:1e:ed:a6:09:b7:
         82:77:91:b9:27:b4:dc:32:c0:f2:73:21:82:fa:00:4a:bc:9d:
         48:95:66:7f:f9:80:a1:70:ad:05:f2:bc:21:ce:99:e5:a0:1b:
         5b:e5:20:d5:1e:5e:52:a0:c1:29:e5:b3:20:da:76:d5:c8:2d:
         6e:0e:32:23:0c:2f:4c:28:36:91:0f:66:40:2a:b7:51:a0:fa:
         33:73:12:53:c4:51:db:b0:c8:cf:dd:28:c9:b5:df:6a:5a:10:
         ca:10:ee:75:3a:eb:f1:2e:a7:3b:bb:53:df:9d:c1:2d:c7:d4:
         8d:05:dd:e8:92:79:08:df:82:c8:78:df:56:6b:a7:16:a8:6e:
         86:c8:dc:76:c9:02:4d:df:31:5b:cc:61:00:4f:ba:a0:12:e1:
         52:bd:aa:0d:0b:bd:47:ef:dd:e0:66:c3:9a:77:e5:24:bc:4e:
         18:d9:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:48 2026 by rpki-client