Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa
File:                     c370e212-a1ea-3215-a2ef-5220722c0d21.roa (raw, json)
Hash identifier:          UwA3X0k1pdVjCeP1BU73snifZrAgLl87IgJBLiI7W7c=
Subject key identifier:   4C:1B:36:7A:D1:BA:D4:40:F2:AF:E8:00:D5:72:58:E6:34:92:F2:AC
Certificate issuer:       /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Certificate serial:       010D0C9F4328584D00B2708EE94848431744CC00
Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     7922
IP address blocks:        130.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:70:8e:e9:48:48:43:17:44:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=b573fc9f-79ac-40fe-9431-fb47aed67d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:18:bc:6d:fc:36:45:81:de:a9:e4:46:cb:
                    11:39:43:7d:24:8c:91:53:6b:79:30:66:ba:43:ea:
                    66:41:fb:d0:ca:88:2d:c1:cc:00:6c:76:c6:05:07:
                    0c:f5:9b:21:06:81:fb:52:e6:76:77:c2:ea:49:7a:
                    39:1b:3c:0d:87:31:c6:af:fa:f5:9c:a7:81:86:1e:
                    ee:fb:63:33:f9:05:ef:48:ef:8d:71:60:ec:19:a9:
                    ac:ce:72:d8:62:80:90:26:8d:d8:44:e6:ff:a1:cf:
                    2c:a7:13:df:01:1c:00:e8:d3:e0:64:97:e0:46:df:
                    08:80:6f:8f:0b:c2:06:15:5e:df:bb:8f:a2:85:d5:
                    ff:90:47:05:cd:8d:b4:df:9c:6f:68:ad:a5:0e:c3:
                    fc:3b:be:99:0a:4a:f6:c0:d1:27:7b:16:68:9d:b6:
                    90:fd:51:a3:7f:97:cd:48:ef:86:71:eb:97:44:eb:
                    76:1e:b2:e6:35:80:f4:df:41:99:1c:a3:aa:9f:fe:
                    67:f5:b9:1b:52:fc:69:f9:1b:8c:1f:b1:3c:b9:82:
                    71:98:b3:6c:88:f7:95:48:14:53:92:b8:04:2e:0a:
                    b5:ad:32:84:02:24:c7:88:cc:81:e0:a8:14:fe:a4:
                    64:ea:e3:b2:f0:7c:6c:55:97:44:5a:78:a1:7e:2c:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1B:36:7A:D1:BA:D4:40:F2:AF:E8:00:D5:72:58:E6:34:92:F2:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl

            X509v3 Authority Key Identifier:
                keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e8:33:d8:e3:9c:7a:71:cc:d0:66:ed:40:b2:4e:ea:6d:36:
         a4:25:d8:9c:d7:75:96:a4:ee:de:09:bd:7e:62:e9:fd:12:8d:
         1f:cd:da:6f:aa:0b:2c:46:75:db:9c:f0:ed:04:86:31:09:e2:
         a4:c9:9a:e3:c0:ad:40:30:93:fe:9e:50:ef:64:63:aa:85:22:
         77:2a:ad:87:35:a0:c0:57:bc:86:d9:f0:18:3b:af:d4:e7:d7:
         a5:22:4a:a1:8c:8d:0b:44:5a:12:7a:5a:e3:53:89:4d:73:f0:
         ce:70:4f:ad:a5:91:0a:a2:6e:58:2d:93:ab:af:f4:45:c5:9e:
         cb:ab:6f:46:e6:9c:03:cf:36:f8:ea:7b:e1:96:73:fa:4b:22:
         10:dc:07:0c:5a:87:04:d8:a1:be:6a:23:04:69:0d:98:06:02:
         b9:e6:47:47:59:1f:99:25:67:b5:6c:08:93:e6:0e:70:ce:c8:
         5e:fc:73:9f:a7:e4:53:3d:42:9c:eb:1c:93:0b:35:6e:2c:0a:
         11:da:7a:27:e4:f4:91:3c:40:46:df:2f:bb:de:99:32:b2:76:
         5a:da:49:79:67:34:c7:bf:3d:b1:f6:ef:9c:43:a3:6c:92:e1:
         24:52:38:ae:2e:b0:fa:9e:9f:76:4f:a9:6e:fb:f9:d8:92:fc:
         b7:c4:ae:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:58 2026 by rpki-client