Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/b162d766-e883-3edb-97b5-e88b65947837.roa
File:                     b162d766-e883-3edb-97b5-e88b65947837.roa (raw, json)
Hash identifier:          V8zhpWorPD1srR7VfYTiQI2kFO1MkbIMvsi8Ddrhmoc=
Subject key identifier:   73:2C:0F:A4:71:56:72:21:1A:C0:F5:8C:53:0F:A7:62:68:81:F5:8F
Certificate issuer:       /CN=221cdd91-10e9-41bb-8765-69edc6f1e631
Certificate serial:       010D0C9F4328584D703FD3094707FADECE59B280
Authority key identifier: D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/b162d766-e883-3edb-97b5-e88b65947837.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     16509
IP address blocks:        130.50.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d3:09:47:07:fa:de:ce:59:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221cdd91-10e9-41bb-8765-69edc6f1e631
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=c6e25980-e9fb-40ba-91ee-cc944a72f674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d3:8a:68:97:58:77:a0:40:94:ba:22:1b:8f:
                    c1:40:3b:47:a5:5e:de:8a:27:f4:38:a9:c2:94:ad:
                    dc:5f:37:47:8c:c9:67:bb:67:b6:62:f4:c5:81:cd:
                    b3:d6:b8:d5:47:64:b6:8c:d9:b2:2d:fb:ce:3e:fe:
                    38:28:48:42:97:19:03:87:9c:37:cd:6c:ac:1f:75:
                    b7:52:a2:5e:04:ec:0d:2b:1a:69:4b:f1:38:dc:0f:
                    5a:2b:e6:73:fb:11:0f:84:7d:2b:2f:c9:b2:1b:38:
                    40:9d:a3:0b:20:31:99:4c:d0:e7:28:4e:ab:f4:04:
                    1d:45:e6:85:8c:c6:ce:b9:7d:a0:98:5b:9d:df:7e:
                    75:7e:10:61:33:c9:26:75:a7:55:c2:e3:ec:76:ff:
                    95:94:4a:3d:cd:08:44:2b:5a:07:b5:a1:41:89:99:
                    5a:81:eb:24:08:77:44:29:da:7f:a5:33:fa:7f:fc:
                    fc:f2:89:2d:80:42:5e:8a:70:d9:09:a4:ea:db:1e:
                    9f:7b:1c:ae:72:5b:3b:f8:b1:cf:eb:60:2c:0b:fe:
                    c0:c2:e2:c7:5c:8f:88:46:ef:2f:53:d5:46:74:4e:
                    bc:e0:74:50:ec:90:e2:a8:a9:36:db:b0:ad:b8:a0:
                    15:b0:3f:1b:f1:b3:39:23:a4:f2:e5:a1:84:b4:04:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2C:0F:A4:71:56:72:21:1A:C0:F5:8C:53:0F:A7:62:68:81:F5:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/b162d766-e883-3edb-97b5-e88b65947837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl

            X509v3 Authority Key Identifier:
                keyid:D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.50.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:af:a8:a2:37:58:b1:9f:a2:89:00:67:75:5f:1b:10:6c:8d:
         82:48:0c:5d:19:de:67:4d:9a:c9:69:0b:9a:26:a6:f1:75:63:
         33:58:14:f5:b0:10:42:89:03:1c:9a:99:3a:63:6c:2b:93:d2:
         6c:4c:b1:58:6a:9d:3d:94:5d:da:80:fc:12:dd:15:30:91:3e:
         09:a7:5d:68:8c:73:9d:03:8f:38:b2:8a:cf:fc:ab:03:52:ce:
         d4:67:ae:74:b1:83:59:78:51:e4:03:e6:7f:b1:ac:9a:39:d4:
         30:1e:cc:c7:d8:18:b7:f7:51:af:97:f6:df:1b:00:d6:4e:86:
         8b:99:e2:fe:fa:41:7d:74:46:79:99:21:0a:38:78:25:b7:fe:
         93:2a:4a:d3:9d:f2:6b:61:74:76:57:4a:1e:33:71:e1:c2:74:
         6f:fb:5c:cd:b9:4b:d0:58:99:09:50:a3:24:15:0a:54:62:91:
         ed:be:c1:e3:44:fc:6f:66:cb:de:db:03:93:e0:8c:60:f3:a3:
         52:83:d8:2a:9e:72:5b:19:3b:43:20:28:f4:4d:55:3b:01:5f:
         5a:d1:56:fe:0f:a2:38:97:d5:5a:17:0a:26:d6:30:8e:8b:38:
         28:5e:fa:50:56:11:f6:6e:3a:88:cb:85:1f:64:d6:d0:78:be:
         be:9e:28:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:51:56 2026 by rpki-client