Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/8eab7860-30e1-3df5-9c83-1583684e864c.roa
File:                     8eab7860-30e1-3df5-9c83-1583684e864c.roa (raw, json)
Hash identifier:          RkkrUeSZXz1bJYPFyCz/r+t/SAaKU5oddl8ly7kOlj8=
Subject key identifier:   60:E8:56:5B:E4:66:E9:65:38:4B:D4:4C:13:65:39:FF:D2:1E:B5:6E
Certificate issuer:       /CN=adf336cd-e30b-4fd4-a132-8eede3026803
Certificate serial:       010D0C9F4328584EA788A67D1A63B1B726E9F800
Authority key identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/8eab7860-30e1-3df5-9c83-1583684e864c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11094
IP address blocks:        130.219.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:a6:7d:1a:63:b1:b7:26:e9:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf336cd-e30b-4fd4-a132-8eede3026803
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4a6f744e-38c4-423c-acb6-b223e4eec496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:76:63:2d:1b:8c:30:ee:b2:c5:fe:49:b9:51:
                    04:4b:e0:ab:52:32:8b:10:18:c7:6e:1d:81:34:56:
                    4b:e1:d0:6b:55:66:56:76:70:11:ca:3c:75:b1:be:
                    65:e6:eb:c9:6f:ad:03:15:bc:78:bf:1e:4f:61:00:
                    1e:ca:90:ff:c2:78:14:2f:47:8d:7b:99:46:f0:e4:
                    4e:91:ae:76:fb:4f:cf:4f:09:0f:d4:48:9d:e9:77:
                    aa:9e:c2:9b:74:54:42:f7:66:ad:64:36:9f:a8:6a:
                    20:f9:43:38:b0:d2:f3:01:6a:74:be:b5:85:23:3a:
                    06:a8:aa:ca:44:79:69:33:a7:0d:5f:ec:ef:46:54:
                    a6:90:23:f8:2f:4c:17:8b:b0:c4:d6:1a:42:33:ae:
                    13:2f:f2:ae:77:a9:60:25:86:99:12:05:eb:3a:e9:
                    4d:fc:48:eb:e1:73:d5:a0:4f:4d:fd:55:69:13:14:
                    65:85:9c:3c:cc:fd:f0:e8:aa:b8:d6:73:68:aa:ea:
                    af:a7:f8:5b:ce:f4:0b:43:6f:8c:59:f6:46:52:ea:
                    4c:1d:db:b7:45:eb:7f:da:7d:25:20:16:72:6c:b1:
                    1e:b0:5b:c1:d2:47:b9:e8:21:df:04:be:d1:f8:68:
                    89:10:42:68:74:18:c1:87:7b:76:51:a7:16:99:0a:
                    f4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E8:56:5B:E4:66:E9:65:38:4B:D4:4C:13:65:39:FF:D2:1E:B5:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/8eab7860-30e1-3df5-9c83-1583684e864c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl

            X509v3 Authority Key Identifier:
                keyid:43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:cb:ac:52:0f:71:02:e5:ba:93:6e:92:49:1c:ef:b2:5c:41:
         3f:a6:d2:cf:2f:12:00:e1:3c:40:e4:4f:54:c7:d7:e0:21:b4:
         b5:28:4e:87:a3:cc:1c:b5:cc:75:10:f3:e5:a6:90:ec:fa:d6:
         af:06:a2:97:87:33:11:06:a7:26:87:99:da:de:8a:e6:81:cb:
         47:6a:87:bc:6b:5e:a3:09:c1:f8:01:db:a4:66:84:e8:f1:03:
         38:9a:ec:b4:65:56:e7:21:c8:c0:50:04:ec:c9:5b:3f:fa:42:
         aa:7e:ed:0e:a5:7c:5c:0c:e1:4a:d6:9c:66:81:74:b9:74:06:
         e2:4d:4d:44:8f:17:0f:c6:6e:df:21:75:6c:59:2a:ba:b3:61:
         e6:1d:54:fa:3f:a2:4c:fb:7d:ff:44:fb:7b:73:07:2e:9d:9b:
         9f:39:68:18:ed:7d:13:b0:70:a8:5c:85:34:fc:4f:7a:5e:ce:
         05:8f:81:8f:7d:00:17:39:47:f6:24:e4:3b:26:5f:49:5c:0f:
         ac:f0:ac:80:e2:b1:cb:bc:76:71:23:f4:2d:b5:57:a5:89:20:
         25:76:16:54:18:ad:c3:cb:fb:c2:a0:58:20:0d:fe:5c:cd:f9:
         c7:cb:05:80:cd:a7:a6:48:89:78:97:42:66:0d:66:aa:0d:b2:
         fd:8d:dd:86
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6niKZ9GmOxtybp+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRmMzM2Y2QtZTMwYi00ZmQ0LWExMzItOGVlZGUzMDI2
ODAzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NGE2Zjc0NGUtMzhjNC00MjNjLWFjYjYtYjIyM2U0ZWVjNDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HZjLRuMMO6yxf5JuVEES+CrUjKLEBjHbh2B
NFZL4dBrVWZWdnARyjx1sb5l5uvJb60DFbx4vx5PYQAeypD/wngUL0eNe5lG8ORO
ka52+0/PTwkP1Eid6XeqnsKbdFRC92atZDafqGog+UM4sNLzAWp0vrWFIzoGqKrK
RHlpM6cNX+zvRlSmkCP4L0wXi7DE1hpCM64TL/Kud6lgJYaZEgXrOulN/Ejr4XPV
oE9N/VVpExRlhZw8zP3w6Kq41nNoquqvp/hbzvQLQ2+MWfZGUupMHdu3Ret/2n0l
IBZybLEesFvB0ke56CHfBL7R+GiJEEJodBjBh3t2UacWmQr0ZwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGDoVlvkZullOEvUTBNlOf/SHrVuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZGYz
MzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVkZTMwMjY4MDMvOGVhYjc4NjAtMzBlMS0z
ZGY1LTljODMtMTU4MzY4NGU4NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWRmMzM2Y2QtZTMwYi00ZmQ0LWEx
MzItOGVlZGUzMDI2ODAzL2FkZjMzNmNkLWUzMGItNGZkNC1hMTMyLThlZWRlMzAy
NjgwMy5jcmwwHwYDVR0jBBgwFoAUQxPH+lFmkdv8n/tv5ccXECFKVo0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hZGYzMzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVk
ZTMwMjY4MDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgtswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlcusUg9xAuW6k26SSRzvslxBP6bSzy8SAOE8QORPVMfX4CG0tShOh6PM
HLXMdRDz5aaQ7PrWrwail4czEQanJoeZ2t6K5oHLR2qHvGteownB+AHbpGaE6PED
OJrstGVW5yHIwFAE7MlbP/pCqn7tDqV8XAzhStacZoF0uXQG4k1NRI8XD8Zu3yF1
bFkqurNh5h1U+j+iTPt9/0T7e3MHLp2bnzloGO19E7BwqFyFNPxPel7OBY+Bj30A
FzlH9iTkOyZfSVwPrPCsgOKxy7x2cSP0LbVXpYkgJXYWVBitw8v7wqBYIA3+XM35
x8sFgM2npkiJeJdCZg1mqg2y/Y3dhg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:31:10 2026 by rpki-client