Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2a74c8bb-738b-37a6-a8c8-592e762d96b8.roa
File:                     2a74c8bb-738b-37a6-a8c8-592e762d96b8.roa (raw, json)
Hash identifier:          2IoAdeYumqlP31DuXXEg5z/dBikLMlaenKsLPacEF9c=
Subject key identifier:   A9:09:FB:DB:FC:10:68:5E:A6:F0:18:01:09:18:8D:6D:2F:30:86:8B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B2761804B0BA85767FFF76D0F
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2a74c8bb-738b-37a6-a8c8-592e762d96b8.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     7018
IP address blocks:        130.44.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:80:4b:0b:a8:57:67:ff:f7:6d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=4ac18c8c-2467-4d0a-b1c5-541afc3a159d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:4f:f1:84:88:8b:10:34:8a:ce:63:18:3e:
                    06:14:25:54:77:1b:c1:93:f8:a6:a1:be:01:86:b2:
                    87:b5:ac:eb:64:ce:ef:d5:29:5f:45:20:b7:30:ac:
                    57:d6:61:83:dd:0c:8e:e4:4a:54:32:32:47:80:01:
                    0e:4e:33:43:05:4d:78:0f:95:87:92:42:b5:9c:38:
                    37:ba:82:23:d6:a2:3d:12:0b:32:7c:0e:cc:d5:5d:
                    ea:a0:ab:4b:a3:bb:95:77:87:bb:cb:f8:15:78:c8:
                    79:10:11:a9:ce:cb:e9:c3:3c:be:72:19:14:66:c7:
                    84:b5:1d:99:13:43:ab:e1:41:f2:95:45:2d:d3:50:
                    7d:bb:73:0d:02:1a:2c:a1:27:7b:80:d2:f6:96:d1:
                    35:39:06:96:09:30:07:b2:60:94:b0:de:96:d1:fe:
                    66:70:3e:bb:26:c4:73:58:7c:35:36:a2:db:29:82:
                    81:1c:cb:eb:40:be:77:a8:e6:43:4d:b7:a1:6d:0e:
                    9e:f7:a5:7f:fe:56:2b:d0:59:93:58:fe:64:a1:d8:
                    90:a0:2f:a6:34:a4:06:11:72:b7:af:10:fc:9c:fe:
                    70:96:51:3d:42:51:4c:e9:04:87:ec:b6:96:62:a6:
                    67:d7:15:30:ad:2a:e9:0b:cb:a7:d8:b0:25:35:d4:
                    6d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:09:FB:DB:FC:10:68:5E:A6:F0:18:01:09:18:8D:6D:2F:30:86:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2a74c8bb-738b-37a6-a8c8-592e762d96b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.44.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:81:56:50:86:e5:3f:96:6a:97:5a:8d:ba:39:1a:68:89:
         ca:cc:5e:58:fb:a6:74:9e:8f:a8:54:32:7e:5b:d8:4e:ec:38:
         58:ce:58:8b:34:3e:b5:fb:de:c2:99:5d:57:03:27:e4:24:e9:
         c4:12:07:d6:b3:e6:2b:db:ec:57:b6:bb:cc:8a:30:14:08:18:
         84:e7:40:50:0d:29:6d:af:9f:d2:bb:cf:4b:a6:fd:50:a0:2c:
         9d:7d:32:87:de:4f:ae:10:00:86:09:d7:30:7d:36:95:dd:74:
         22:ca:9a:b7:29:37:c4:34:fa:b7:0c:ad:73:5f:33:22:10:7c:
         e8:0a:41:8a:b3:ef:1f:9e:f5:ae:75:b0:39:93:53:43:ff:aa:
         b0:a1:09:29:a8:7d:6d:f6:5e:e0:17:39:17:ad:8d:da:db:37:
         cc:9f:8b:0c:30:61:9d:27:bd:7e:ae:d2:ce:36:0e:e6:32:cf:
         f7:81:af:a1:02:c6:c8:81:75:c2:01:5d:59:cc:2b:16:fe:a4:
         50:70:64:b4:92:cc:9c:19:ae:cc:6f:89:64:27:9e:53:0c:00:
         07:15:49:45:e9:ea:7f:b1:3f:6b:20:8b:fc:55:64:c5:be:6b:
         10:94:c7:83:84:82:fe:5e:c9:d1:3f:bd:fd:4e:19:29:7d:f6:
         23:73:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:40 2025 by rpki-client