Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa
File:                     c370e212-a1ea-3215-a2ef-5220722c0d21.roa (raw, json)
Hash identifier:          xeazCgNj64kQhHE53j9i8lNQrgys9lyaz0n9eI4auX0=
Subject key identifier:   66:70:60:81:1C:05:9F:4D:2B:5B:0B:2E:40:84:B1:9B:EF:93:38:25
Certificate issuer:       /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Certificate serial:       010D0C9F4328584EA78F467925C9A31C1F9E0400
Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7922
IP address blocks:        130.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:46:79:25:c9:a3:1c:1f:9e:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6c89b2ec-b0c5-44d1-ae5c-5b3dd85ed1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:61:1c:d4:ad:91:40:f8:26:d2:05:87:31:4e:
                    db:50:af:b3:75:91:23:c2:9c:40:d3:16:17:95:c1:
                    d8:f3:4b:a9:16:4e:fd:35:cc:5c:95:08:39:20:08:
                    6a:16:75:47:d6:98:81:25:0d:88:03:1e:e3:f4:e4:
                    76:2a:0a:34:38:34:ea:62:df:0d:91:bb:ee:ae:c3:
                    25:b5:4b:52:fe:ba:8e:53:e1:59:42:83:14:6a:88:
                    9e:45:29:95:60:a2:8d:e8:3c:c6:04:f0:a0:82:ab:
                    eb:5d:7b:d9:38:c1:e6:1a:f0:92:49:df:1c:75:9b:
                    31:df:31:fb:f8:43:44:6a:5f:fc:16:be:de:54:4a:
                    52:aa:8c:7f:24:76:9b:d6:2c:aa:8d:38:9f:41:a2:
                    c2:9e:bd:d3:6b:5d:40:49:f5:2b:b5:73:eb:6b:f1:
                    5b:d3:c6:fc:ad:13:91:2b:7a:50:7f:4f:07:44:5e:
                    67:b9:b0:0d:ae:14:23:6c:35:f7:55:be:1e:c1:4c:
                    d5:f3:7b:b1:81:69:14:34:ed:be:b6:25:29:79:dd:
                    08:28:b4:41:95:3c:5a:d7:09:21:3a:8a:58:13:8f:
                    51:60:87:bf:cc:b6:2c:71:f5:2e:74:06:c8:62:8a:
                    a6:ac:d5:47:79:06:e7:c9:a6:9c:12:3e:c2:82:6a:
                    06:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:70:60:81:1C:05:9F:4D:2B:5B:0B:2E:40:84:B1:9B:EF:93:38:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl

            X509v3 Authority Key Identifier:
                keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:30:a5:83:36:84:a9:dc:a3:91:e1:ec:52:ea:f7:2d:69:d0:
         38:fb:72:03:40:32:31:e8:ed:f5:c1:92:a5:39:70:e1:04:ae:
         ea:d8:37:97:1c:a3:64:ef:a1:db:ba:87:a0:8a:40:e4:da:14:
         53:26:e7:38:e8:48:82:a6:b7:fe:a1:92:a9:b4:65:16:dc:9e:
         0d:24:10:b3:91:be:50:6d:66:62:68:a7:60:65:05:77:78:d3:
         6b:92:63:63:a6:c0:84:98:49:9f:05:fc:3c:b2:e8:0d:b1:21:
         16:85:a1:5b:3a:4f:70:34:8c:c2:6e:19:2f:55:79:31:2b:22:
         6e:9a:ee:ac:ff:26:43:3d:39:51:c2:54:f5:08:dd:05:9e:8d:
         7a:b6:d4:30:d0:9e:28:de:44:41:15:46:b4:f5:81:35:53:27:
         b0:b1:35:4e:8e:2d:a4:05:cf:15:04:a6:dd:69:9f:37:82:b3:
         4f:bf:34:62:a3:46:82:c1:5f:b3:9d:ee:b8:25:ca:c0:85:2d:
         7d:cb:6c:c8:8e:d3:a5:49:d5:7a:eb:fb:60:6f:07:97:9f:70:
         54:80:c1:5e:38:35:0a:01:76:a5:2e:1c:31:53:d5:ed:82:16:
         ec:bf:d8:dd:a8:d7:be:f2:90:7e:dd:29:f0:ea:ef:a7:cb:4f:
         4d:4e:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:41:41 2026 by rpki-client