Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/297f5666-5364-3907-84f9-4b038cedcf3c.roa
File:                     297f5666-5364-3907-84f9-4b038cedcf3c.roa (raw, json)
Hash identifier:          +fad5HRACHUeSkC5W7H5aY4uDYE5PJCE6RJZUxi6ccs=
Subject key identifier:   32:DC:97:DC:AF:9C:13:68:21:F9:34:96:B6:31:73:57:2B:E6:93:BA
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DAC45944D4EDF82BB3725E000
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/297f5666-5364-3907-84f9-4b038cedcf3c.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     64267
IP address blocks:        172.81.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:94:4d:4e:df:82:bb:37:25:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=ecdc9320-7cc5-4696-9a57-8f14a59fed91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:43:03:b0:9e:50:23:36:3e:36:72:46:91:25:
                    da:60:4f:ee:50:9b:e7:fe:ab:db:c2:68:4b:eb:af:
                    5b:52:24:89:45:3e:a0:9a:04:dc:67:1d:9d:4c:d5:
                    83:1d:95:e2:9a:dd:c2:07:d4:62:b7:be:43:ca:b8:
                    8c:65:ab:51:b1:17:2b:e7:2d:ea:ac:f3:90:99:36:
                    5d:0a:89:6b:85:4d:0b:2f:4a:ae:b5:c7:a3:ac:c9:
                    e8:45:62:5f:a5:60:5b:45:10:a7:71:85:9f:19:f4:
                    dd:8a:cc:bc:f2:95:50:1d:64:e3:e0:4e:d4:79:8f:
                    14:13:b9:8e:8a:22:6b:fe:16:5b:e2:c1:f1:fe:fa:
                    d4:62:46:07:12:97:7a:15:d6:a5:09:26:0c:c3:93:
                    91:cf:9a:38:60:62:f3:65:4f:45:46:90:4d:1c:c6:
                    d4:39:70:71:2f:27:6a:b3:77:b1:f7:e7:79:05:08:
                    9e:ad:3d:cd:40:e1:0c:68:04:2a:dc:96:c4:c3:c1:
                    8c:b9:27:02:d4:a1:b6:f1:62:9c:9a:51:76:98:52:
                    eb:fe:f6:fc:a8:ea:59:12:df:19:3a:9b:e2:9f:51:
                    23:95:9f:83:0a:57:c2:a3:c4:62:4b:4d:e9:37:8c:
                    5c:21:23:0e:d3:2c:74:f1:5a:33:f9:ed:f1:ff:c6:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DC:97:DC:AF:9C:13:68:21:F9:34:96:B6:31:73:57:2B:E6:93:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/297f5666-5364-3907-84f9-4b038cedcf3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f3:42:07:92:bb:5e:92:51:18:6d:9f:d3:fa:1f:9a:fc:2c:
         df:ac:b1:d4:0d:f8:fc:f9:81:0f:e6:a3:7b:d3:82:b3:e8:ce:
         5a:b5:e0:73:68:2c:8f:37:12:61:d8:6c:1f:96:f0:3e:93:db:
         28:e0:38:fd:1c:30:70:1b:c5:3c:5f:d8:12:95:4b:2b:f6:bf:
         83:a1:c8:a7:3e:14:a4:35:69:44:5e:a2:40:03:81:4a:bb:6e:
         68:3b:ab:d5:a6:d0:72:af:1d:a4:5c:f1:2e:f2:d1:b0:cd:52:
         95:86:4c:df:32:db:16:09:89:a7:c3:9d:d4:99:4c:8d:ef:5c:
         28:2d:da:a3:20:dd:e0:de:18:ce:cc:61:d3:1f:88:f4:dd:d5:
         71:bc:af:f4:fb:49:32:93:ad:60:8d:6a:27:e9:40:a6:e2:16:
         0a:aa:fa:fb:21:8d:0c:bd:b5:28:31:98:67:55:fb:57:b2:74:
         1f:ff:da:f6:0a:24:45:5a:ac:35:dc:d0:3d:eb:6c:7c:f5:df:
         ac:2a:cb:f3:9a:5d:43:aa:36:22:ed:1a:70:8c:3e:d9:47:13:
         c7:04:39:16:38:73:af:b5:5d:12:6b:64:3d:17:11:4c:22:03:
         9e:ca:85:c1:ba:c7:72:45:82:fe:2c:ce:24:83:2b:99:0a:bf:
         f1:85:bc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:55 2026 by rpki-client