Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/9fcbe125-25cc-329b-8c00-21f62cbc4d28.roa
File:                     9fcbe125-25cc-329b-8c00-21f62cbc4d28.roa (raw, json)
Hash identifier:          5KTMBGQtdQYvnLyUdvFpvGoV1tT5jBYOWe7szjTEmv4=
Subject key identifier:   03:A5:0F:8B:D0:97:8E:06:25:BB:57:08:C4:F0:36:15:1B:01:CF:A0
Certificate issuer:       /CN=b9030ea5-31a0-4bad-bebd-2fffbce27add
Certificate serial:       010D0C9F4328584CB121DDB3541B23B65160F300
Authority key identifier: B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/9fcbe125-25cc-329b-8c00-21f62cbc4d28.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     49544
IP address blocks:        130.254.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:dd:b3:54:1b:23:b6:51:60:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9030ea5-31a0-4bad-bebd-2fffbce27add
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=cd22d287-5989-4145-97d4-e571291f7455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:8e:c3:bf:0a:c6:c1:02:c0:f2:af:47:a1:
                    f9:05:58:c6:f4:c9:42:cd:6d:94:1b:f5:93:a7:41:
                    3d:04:4b:2c:81:1c:72:73:87:a1:28:02:b8:60:63:
                    8d:50:e6:17:a7:78:2a:af:61:d6:a5:7e:ad:d5:0c:
                    51:5a:90:d1:3f:9e:c6:a1:aa:ad:b4:22:5c:26:ed:
                    7a:10:e9:b0:15:f6:18:f8:7a:ec:ea:fb:cc:21:ff:
                    d0:a1:83:63:1a:6e:68:6b:9b:a2:1a:db:78:48:8c:
                    f6:b4:01:1d:b3:68:b7:27:74:a4:b8:44:3e:50:4c:
                    0b:60:03:aa:14:22:cd:35:e0:0e:c4:d9:e1:b4:7f:
                    52:c5:26:27:86:30:c1:58:34:94:ee:ad:1c:bc:07:
                    ed:e8:9c:af:da:e0:ab:c8:db:db:d7:78:64:96:bc:
                    8b:fc:a0:f8:2e:9b:d0:9f:e0:9f:bf:e2:26:d7:e5:
                    7d:71:48:c1:08:da:f8:9c:fc:0d:24:1b:a1:8e:de:
                    3b:11:c9:5a:fe:e8:24:35:56:3a:a4:53:45:94:1b:
                    0c:fe:70:e4:e0:4d:94:9e:a7:44:dc:4f:8a:c2:e3:
                    5a:9a:33:f5:29:7a:f2:c7:85:11:6e:5d:a9:fa:3d:
                    19:b2:e5:f7:92:d0:4b:41:39:a1:50:f1:d5:fd:86:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:0F:8B:D0:97:8E:06:25:BB:57:08:C4:F0:36:15:1B:01:CF:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/9fcbe125-25cc-329b-8c00-21f62cbc4d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:af:e1:f9:83:48:e0:df:84:57:63:72:a9:4f:28:d3:5d:f4:
         c9:c1:20:ce:3b:61:08:51:87:9f:b6:75:64:30:94:d2:4f:32:
         ca:9d:1d:c0:f7:37:bb:04:3d:f8:4e:e2:31:b8:4b:fb:c3:13:
         d1:8b:14:b7:75:45:8a:36:cc:5a:77:86:10:40:89:e5:16:f4:
         c4:07:c3:a0:7c:25:ad:de:50:10:e1:a0:82:dd:ae:70:7f:16:
         2a:48:fb:f6:7c:f6:3e:30:ec:87:a7:52:77:a7:2b:a0:42:50:
         71:2f:8b:14:73:cd:e9:2b:c5:90:4d:7a:ca:b6:49:45:57:58:
         59:a9:84:e3:de:d2:ff:32:e6:5b:61:04:58:9a:20:3a:a6:d9:
         cd:6e:ac:30:1e:80:8a:1f:40:e4:ec:3c:ac:c2:8b:38:95:74:
         72:cd:d2:28:b5:cd:38:54:9a:2e:a3:e7:88:ff:63:02:2f:cc:
         b7:90:58:a9:92:4e:2f:77:1b:19:f5:bf:e6:47:d4:df:78:dd:
         2a:d4:21:89:39:1a:84:d0:12:99:4d:82:d7:a8:21:ce:66:97:
         f3:51:8e:74:b8:87:6a:c9:b1:34:3a:a9:e7:08:a1:43:9b:ad:
         e8:3a:26:ad:fe:2e:29:07:1a:e1:bc:ad:aa:60:21:3c:42:d9:
         a3:bf:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:57 2026 by rpki-client