Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/6db880a3-1df6-3a63-af4c-c4bf59cce255.roa
File:                     6db880a3-1df6-3a63-af4c-c4bf59cce255.roa (raw, json)
Hash identifier:          G1vf0HtkyDy33VO36sW5WX/3/YOJdmMJmoedjaZxf2Y=
Subject key identifier:   6A:71:A1:16:5A:45:4D:3D:E0:4A:A2:1A:05:59:50:BE:E3:70:2B:BD
Certificate issuer:       /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Certificate serial:       010D0C9F4328584F46A7E92D688F7F6233EEEB00
Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/6db880a3-1df6-3a63-af4c-c4bf59cce255.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     63334
IP address blocks:        130.51.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e9:2d:68:8f:7f:62:33:ee:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=8b362326-c2ba-4097-ac3b-94433d78446d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:7d:30:8d:1f:43:14:54:5b:f2:ad:dd:bf:
                    3d:a6:9d:71:21:3d:36:9d:29:48:31:da:1c:6a:f6:
                    07:3f:ba:2f:65:41:4a:6a:83:99:d5:51:3c:bc:3b:
                    31:61:8f:9d:a3:3e:3d:db:81:73:94:91:12:76:4f:
                    8d:ad:d5:9c:63:ac:ab:f1:77:98:e9:70:a0:f8:a6:
                    cd:da:88:1e:a9:c8:12:f4:71:be:aa:a8:ce:cd:14:
                    cd:d1:46:f0:66:77:5c:cb:df:52:73:e1:c4:1e:04:
                    38:fc:46:25:f9:61:d6:d0:d1:f9:a5:bb:49:6e:f2:
                    38:cf:c8:ee:99:92:45:bc:78:47:c0:76:02:aa:a6:
                    21:62:69:b0:99:28:20:59:42:e0:5e:8f:78:ff:d3:
                    e5:29:79:31:75:e7:71:e8:3f:7d:6f:69:92:a8:27:
                    46:7d:48:3c:a1:db:c9:88:4c:d8:e1:58:e5:aa:ec:
                    a9:24:f2:11:7f:a7:ee:2f:b8:f2:1e:e2:9f:4e:79:
                    6f:2c:ea:21:e1:1f:6a:ff:1c:72:09:74:a4:cc:e8:
                    ec:61:99:25:a8:36:cf:6a:5e:53:72:9a:b5:c8:93:
                    9f:b3:2f:97:72:49:08:a3:9f:ee:c1:6d:29:b8:8d:
                    5a:0c:43:93:e1:9b:45:1f:e7:6f:8b:28:ef:5a:70:
                    e0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:71:A1:16:5A:45:4D:3D:E0:4A:A2:1A:05:59:50:BE:E3:70:2B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/6db880a3-1df6-3a63-af4c-c4bf59cce255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl

            X509v3 Authority Key Identifier:
                keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5f:fd:b5:45:1a:99:ab:9e:f9:50:1a:6b:ad:c3:ce:31:9d:
         18:6b:92:f4:a0:39:75:7e:fa:0e:63:a3:b4:6b:56:5e:3e:bf:
         b2:20:09:0f:f8:85:de:23:7d:e1:aa:d6:e8:a3:1d:ad:c6:2e:
         33:35:f1:62:ed:45:4f:eb:1c:5d:b5:35:4a:06:9d:a8:2b:a6:
         0a:cb:e1:43:82:06:5e:b7:7e:c8:e4:14:f2:c1:b0:12:06:e1:
         1d:4b:b1:ce:27:5a:b9:dd:e3:83:4c:85:7f:f9:62:b1:70:2a:
         71:10:24:59:fb:ba:bb:77:7f:36:e9:94:fc:67:a4:73:1e:e3:
         9b:3b:30:3d:51:4b:b6:a3:0b:17:75:58:6e:b9:31:01:38:39:
         ba:fa:1d:03:92:23:8d:ea:b0:6f:e8:1d:1b:36:e6:be:19:bb:
         d4:1d:bc:c7:04:ed:7f:9a:51:dc:e0:ea:00:0f:4b:a6:81:7c:
         79:5a:ea:32:e4:39:cd:e3:6c:e2:37:f3:3b:ec:c5:01:9a:bc:
         61:81:57:9d:45:fc:ef:96:5e:69:92:4a:6e:07:04:91:27:fd:
         79:30:af:23:31:d0:33:6a:c0:9f:f7:24:9d:78:e6:87:0f:6c:
         75:c5:9e:3b:95:a4:dc:b5:5b:cf:5d:f9:64:a8:d3:82:ec:9e:
         78:4d:4c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:22:41 2026 by rpki-client