Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/31c090d1-b6a1-3f1b-8511-139f67a1791e.roa
File:                     31c090d1-b6a1-3f1b-8511-139f67a1791e.roa (raw, json)
Hash identifier:          +Y1nqo9G6a+OSRxFOgR37NQl8MhszCc9Zr5CksnDRGY=
Subject key identifier:   3D:43:6D:2D:E9:C1:87:5E:19:E9:63:15:1C:10:C0:47:D1:F8:18:38
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DC995ADA4110C40B8F3DA2380
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/31c090d1-b6a1-3f1b-8511-139f67a1791e.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     20001
IP address blocks:        130.44.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:ad:a4:11:0c:40:b8:f3:da:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=2c901ea0-e72b-43db-a715-7dd42872282f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:91:8d:ae:14:4e:31:2c:b4:b5:4c:43:f9:09:
                    b5:bb:37:a2:3b:9a:5a:50:4b:45:38:e9:1f:c9:84:
                    3a:b1:05:4d:0c:56:ab:95:70:ef:d0:cb:ca:5b:6a:
                    b8:c5:79:e0:1a:18:62:20:1f:5d:68:18:7f:bd:ce:
                    9b:ce:72:f0:91:25:9f:38:53:90:99:bb:58:59:44:
                    e1:f9:34:eb:9d:c6:0f:db:51:a7:07:a5:a4:8d:b7:
                    d5:f8:09:2f:fb:5e:d9:5b:b4:33:2b:4a:da:80:42:
                    6e:62:24:f2:02:d5:1f:a5:4c:39:a1:64:91:5a:9b:
                    87:d5:6f:fe:3b:ee:cb:5c:93:53:ac:39:93:34:9c:
                    5b:6a:b2:f5:b4:1d:66:2d:cc:13:e0:26:84:ae:fe:
                    e9:e9:bb:e1:bb:79:2c:c0:26:a4:53:68:2d:96:3f:
                    7e:ce:ac:9d:a8:3a:52:54:43:f4:41:eb:59:dc:b9:
                    06:13:34:cf:e1:7a:39:14:ae:89:f8:55:21:f4:92:
                    a9:b3:f3:7d:21:17:76:c2:3e:41:60:cc:97:ee:12:
                    50:9e:fb:31:e3:5f:1e:60:93:bf:66:c9:ce:24:a4:
                    55:27:ba:ae:75:79:8a:c4:9d:80:05:67:26:cb:bf:
                    96:60:37:9c:da:cb:ee:8a:14:8d:43:4b:95:b2:cf:
                    75:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:43:6D:2D:E9:C1:87:5E:19:E9:63:15:1C:10:C0:47:D1:F8:18:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/31c090d1-b6a1-3f1b-8511-139f67a1791e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.44.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:52:f5:62:df:ec:29:55:58:df:87:eb:c5:d3:0e:4b:9e:93:
         14:08:f5:02:cb:45:a9:5e:54:67:8d:a5:4c:f5:c4:18:0f:dd:
         ad:e5:2c:a7:c0:08:9b:8a:43:4d:40:84:85:95:45:ef:17:fd:
         29:6e:29:57:ba:43:6a:eb:9d:cc:91:9d:d5:b0:a0:bf:ec:d7:
         67:99:45:e8:65:d8:69:dd:92:92:dc:ae:ec:a4:78:22:81:f3:
         e8:25:4b:aa:d8:34:c4:cb:61:43:90:0f:4a:00:5f:ad:0a:d4:
         37:fe:6a:11:c4:ac:10:58:2f:ff:52:b0:09:15:6b:29:a6:7c:
         d6:73:cb:56:a1:54:47:f3:6b:e3:af:c5:31:15:49:c1:47:2b:
         78:77:85:b9:3f:bd:51:4e:5e:c7:03:47:af:c6:2a:0e:f4:69:
         7f:6d:4d:3d:52:eb:f7:d1:0e:8f:ba:ea:81:81:d1:e4:18:c9:
         5d:f5:60:b4:b3:87:0b:c3:88:01:3e:ea:f4:40:03:b2:4b:b9:
         5c:73:bd:d5:24:52:43:d2:2f:c1:6b:72:0a:aa:d1:01:7e:3f:
         8c:c1:ab:e0:58:d1:ee:99:42:e5:ff:5f:99:69:23:d5:6a:8f:
         39:8c:7b:7a:d1:aa:d2:66:b2:85:93:5a:0c:7a:4f:e6:03:a4:
         01:28:6a:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Jla2kEQxAuPPaI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk
MmM5MDFlYTAtZTcyYi00M2RiLWE3MTUtN2RkNDI4NzIyODJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JGNrhROMSy0tUxD+Qm1uzeiO5paUEtFOOkf
yYQ6sQVNDFarlXDv0MvKW2q4xXngGhhiIB9daBh/vc6bznLwkSWfOFOQmbtYWUTh
+TTrncYP21GnB6WkjbfV+Akv+17ZW7QzK0ragEJuYiTyAtUfpUw5oWSRWpuH1W/+
O+7LXJNTrDmTNJxbarL1tB1mLcwT4CaErv7p6bvhu3kswCakU2gtlj9+zqydqDpS
VEP0QetZ3LkGEzTP4Xo5FK6J+FUh9JKps/N9IRd2wj5BYMyX7hJQnvsx418eYJO/
ZsnOJKRVJ7qudXmKxJ2ABWcmy7+WYDec2svuihSNQ0uVss91IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD1DbS3pwYdeGeljFRwQwEfR+Bg4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMzFjMDkwZDEtYjZhMS0z
ZjFiLTg1MTEtMTM5ZjY3YTE3OTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgizKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM1S9WLf7ClVWN+H68XTDkuekxQI9QLLRaleVGeNpUz1xBgP3a3lLKfA
CJuKQ01AhIWVRe8X/SluKVe6Q2rrncyRndWwoL/s12eZRehl2GndkpLcruykeCKB
8+glS6rYNMTLYUOQD0oAX60K1Df+ahHErBBYL/9SsAkVaymmfNZzy1ahVEfza+Ov
xTEVScFHK3h3hbk/vVFOXscDR6/GKg70aX9tTT1S6/fRDo+66oGB0eQYyV31YLSz
hwvDiAE+6vRAA7JLuVxzvdUkUkPSL8Frcgqq0QF+P4zBq+BY0e6ZQuX/X5lpI9Vq
jzmMe3rRqtJmsoWTWgx6T+YDpAEoakg=
-----END CERTIFICATE-----
Generated at Wed May 13 14:38:48 2026 by rpki-client