Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2a11e720-7444-30d2-823d-8110526b0bda.roa
File:                     2a11e720-7444-30d2-823d-8110526b0bda.roa (raw, json)
Hash identifier:          xwg0ecrtZwFnxsKoWk97MrL/VQMb4Rjj3LCgBmakuSM=
Subject key identifier:   E1:E8:5E:6A:EC:61:B1:C1:69:4B:70:2A:8E:A8:C0:85:B8:76:29:D3
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DBA3B16E2D66A390C10742E00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2a11e720-7444-30d2-823d-8110526b0bda.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     22516
IP address blocks:        130.254.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:16:e2:d6:6a:39:0c:10:74:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=587b2187-f69e-4241-968e-f0e462fdcad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c6:08:56:bd:0a:dc:26:14:40:5e:88:1a:8b:
                    af:e6:99:17:70:5d:dd:af:f2:92:0a:b1:5e:59:8e:
                    af:04:8c:23:79:3a:99:56:f4:5c:73:8e:7a:05:78:
                    2a:46:b3:53:7b:f2:5c:31:6d:c1:7b:27:43:7a:13:
                    92:44:27:0d:cb:6a:03:7d:7e:62:b1:93:25:86:95:
                    12:8a:39:db:ec:5c:fb:89:44:e4:d7:e8:d5:7c:da:
                    51:ca:d2:a1:49:a6:25:a8:80:69:3c:fb:e3:ff:7b:
                    a6:41:fd:d1:28:42:85:2b:6e:bf:f7:5d:c0:f2:45:
                    fd:85:a1:30:9a:d8:15:10:3d:39:1f:9c:35:cd:92:
                    fb:2c:3f:6b:76:d6:2f:09:eb:fb:80:cf:8f:ed:e8:
                    5e:de:e8:5e:0f:46:a9:5a:97:66:d6:22:cc:e4:58:
                    4c:3d:f8:93:67:24:17:93:df:0d:8f:91:c7:87:09:
                    e2:c4:35:63:8b:b2:72:ca:9c:61:51:f8:89:8c:47:
                    13:9a:c7:ff:48:72:ef:b6:67:c8:be:3f:ab:3b:d6:
                    f1:3f:95:2d:34:38:05:44:ba:25:51:42:3e:c6:1e:
                    a8:03:0c:1d:2a:72:32:13:69:4a:16:8f:b7:11:70:
                    24:d7:e4:62:21:d4:08:78:2b:d5:37:24:63:43:67:
                    3f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E8:5E:6A:EC:61:B1:C1:69:4B:70:2A:8E:A8:C0:85:B8:76:29:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2a11e720-7444-30d2-823d-8110526b0bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:da:05:9b:44:bd:86:7a:78:ff:e5:f7:2e:67:9f:7f:33:f0:
         e4:29:8e:1a:1b:7e:7d:f0:21:17:f2:6f:b1:0b:f3:b7:8e:92:
         4f:b9:f3:77:ac:7e:70:8e:43:4b:dc:6e:61:22:04:01:aa:75:
         4e:a9:66:0e:b2:f1:b7:31:2d:2b:19:b9:bf:4e:38:fc:66:f0:
         e6:ba:d0:1c:14:08:c7:43:83:a5:14:31:9a:1c:ef:f7:68:97:
         e4:ad:99:b8:5a:b8:b7:46:87:14:60:f5:f8:b0:cf:94:a9:30:
         96:74:76:d3:0f:8f:62:cc:7c:4d:3c:f7:fc:a7:fb:2c:72:69:
         c8:42:0e:7d:a4:8e:d5:d3:1c:f1:26:a2:bd:6d:92:ef:6d:bf:
         71:9c:35:3b:11:73:d2:72:be:8f:6f:6e:81:ca:1c:02:26:c2:
         24:41:2c:c6:af:56:3d:b3:b9:a5:54:f6:06:9a:48:e1:0c:4d:
         5f:f8:5c:54:fa:7d:45:54:fe:29:34:29:3b:8a:a0:ea:ac:24:
         cb:c1:e4:1a:0a:68:98:d3:41:20:b0:5f:f4:61:7f:1e:33:21:
         ab:9d:e1:5b:5f:9f:65:db:00:0b:a4:42:e9:a3:87:3e:7b:7f:
         6c:90:3e:1a:49:e5:3e:58:a2:95:d3:5f:75:1d:83:62:87:5f:
         2f:79:14:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:27:47 2026 by rpki-client