Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/130a44d9-f7d2-3e4e-a75b-e1ba89c0a899.roa
File:                     130a44d9-f7d2-3e4e-a75b-e1ba89c0a899.roa (raw, json)
Hash identifier:          v3O9ZaOMd5KbYZgy2aJjPAfxW3++7bi9JcoPAcriU/k=
Subject key identifier:   5B:04:47:7D:11:A0:DD:7A:AD:A1:4C:04:A0:02:9B:4F:00:84:67:0C
Certificate issuer:       /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
Certificate serial:       010D0C9F4328584EFD79F339E991CE61B9579A40
Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/130a44d9-f7d2-3e4e-a75b-e1ba89c0a899.roa
Signing time:             Fri 28 Aug 2026 19:53:44 +0000
ROA not before:           Fri 28 Aug 2026 19:53:44 +0000
ROA not after:            Thu 26 Nov 2026 20:53:44 +0000
asID:                     22379
IP address blocks:        131.162.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fd:79:f3:39:e9:91:ce:61:b9:57:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
        Validity
            Not Before: Aug 28 19:53:44 2026 GMT
            Not After : Nov 26 20:53:44 2026 GMT
        Subject: CN=9c3a4396-0f40-4fcc-81bd-4da1e69990ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:b7:a0:37:ec:83:24:b4:b7:94:0a:b1:66:
                    25:a0:7b:15:3a:96:b3:eb:89:46:f9:0a:02:22:09:
                    e8:2f:ed:9b:d1:cc:17:25:e3:93:c7:d5:af:4c:b4:
                    ef:d0:a7:0d:97:a1:50:95:c7:5f:51:ee:a0:ba:31:
                    c0:a1:af:73:a4:d5:0c:39:7c:ec:f2:18:9e:0f:7f:
                    3d:c7:08:a9:b9:67:ae:ff:51:2c:c1:8d:20:df:54:
                    f0:53:84:96:8a:73:c1:25:64:eb:cc:b1:e0:94:98:
                    01:f5:01:da:43:bf:d3:4a:31:71:50:a4:11:2b:03:
                    ff:e0:1b:29:3f:b6:d0:52:ea:a4:74:4e:79:69:68:
                    a3:81:4e:1c:20:9a:65:08:40:67:a1:23:ac:da:87:
                    97:b8:07:1e:46:64:94:71:7c:2c:7d:d2:c7:99:83:
                    40:92:44:bf:7c:aa:89:68:ba:da:e2:44:af:d4:94:
                    1d:dd:5c:43:8d:7c:6a:94:f4:93:a8:40:cb:62:c1:
                    43:22:8a:e2:9c:73:9f:21:dc:fa:4d:6f:4d:3a:25:
                    10:65:a9:cf:97:2d:a2:94:7d:49:b1:aa:b1:2e:71:
                    9a:2d:32:e3:b0:0b:7a:f9:ef:43:b2:52:95:e4:ab:
                    34:94:a0:ff:ee:ee:ed:fb:b4:04:b7:72:18:00:8c:
                    31:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:04:47:7D:11:A0:DD:7A:AD:A1:4C:04:A0:02:9B:4F:00:84:67:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/130a44d9-f7d2-3e4e-a75b-e1ba89c0a899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl

            X509v3 Authority Key Identifier:
                keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.162.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:71:7b:ec:6f:59:54:0e:cc:62:df:45:5a:b9:59:53:dc:03:
         ca:66:e7:f1:39:5e:15:e2:0b:2a:f1:bf:72:5e:b1:3b:a3:da:
         c6:27:ce:0b:bb:bf:d6:c7:b5:6c:80:63:02:7f:dc:99:87:89:
         50:92:e7:12:7c:eb:ce:74:44:1a:61:75:93:6b:21:cf:01:f7:
         93:d3:6c:9a:05:c3:a6:db:cf:59:3e:70:8c:db:19:aa:6b:d3:
         4c:e1:18:37:44:50:f9:01:9a:8b:39:c9:2a:84:af:21:97:99:
         8f:69:39:e0:a4:ab:df:62:f0:6e:8a:93:12:0c:2c:2f:55:cb:
         c1:7c:20:e2:ed:32:74:3e:1b:71:65:37:10:0e:60:15:6d:cb:
         bb:c4:63:fa:c9:06:7e:4c:b6:1e:64:94:9a:ca:c2:56:e5:fa:
         8b:b1:b8:7f:25:1a:90:2f:28:14:99:05:b1:21:06:25:1e:0c:
         87:10:ed:7d:06:c0:f2:9c:59:ec:13:31:8f:c2:d2:7e:41:50:
         8a:a0:3b:a2:05:ee:2c:fe:17:23:42:ab:76:64:55:37:9b:ee:
         7c:47:e2:c7:78:cd:7c:a7:00:e4:c9:1f:fb:24:95:90:3f:e3:
         ea:52:ec:33:ac:b2:23:5c:92:78:9d:40:88:ec:59:90:0e:03:
         3e:38:43:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:09 2026 by rpki-client