Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3ec3c551-9141-3764-ac13-7b6cef5c5499.roa
File:                     3ec3c551-9141-3764-ac13-7b6cef5c5499.roa (raw, json)
Hash identifier:          gbbV6ORM8nwkF5m8dA4kQLxWUGaThzb5Rn2WilgN3HA=
Subject key identifier:   48:05:5A:EC:28:F2:B0:24:BF:1C:C6:31:BB:62:E0:31:6C:47:EC:81
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B28C6F2453D443E5B4BFD9CE0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3ec3c551-9141-3764-ac13-7b6cef5c5499.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     20001
IP address blocks:        130.254.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:f2:45:3d:44:3e:5b:4b:fd:9c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=d19f1d3c-1a00-43fd-ab18-51334b6113af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:95:b7:4c:dd:f3:6f:32:53:83:3c:31:e8:2a:
                    9f:43:94:8a:3c:62:17:45:ff:45:eb:9f:bc:c5:a1:
                    59:28:63:ae:a4:f9:7a:18:4e:91:85:ef:fb:44:f2:
                    b1:22:c0:bb:73:c0:b5:17:f4:6b:46:99:b3:4c:40:
                    4d:a7:ac:2c:4c:7a:13:cf:30:d2:88:4a:49:2c:3d:
                    e6:77:c9:9d:77:cd:e8:42:97:80:0c:12:c3:e4:fc:
                    8c:a1:bb:54:03:e2:6e:0e:e9:c4:d9:38:5f:b9:bd:
                    85:e8:36:d6:02:77:35:c4:26:8d:05:93:14:b5:af:
                    ef:18:1f:e2:b2:14:5d:16:df:f3:be:e3:90:25:c4:
                    50:1d:95:f3:2f:b9:69:e6:a9:25:9f:d8:23:e0:cf:
                    a7:2f:73:a8:f8:70:b0:5f:64:aa:a6:58:2f:15:03:
                    23:81:7a:09:dc:3f:d7:9c:ab:6d:79:6d:9c:20:a7:
                    6e:50:4d:89:9e:2b:17:60:32:ea:5f:9c:c5:c4:35:
                    f6:af:af:62:1f:64:21:37:b1:78:33:59:f8:73:dd:
                    cd:fd:4f:4b:5d:e0:0c:0d:6c:72:8e:80:c5:4e:3b:
                    fa:24:42:33:09:e4:f2:b6:48:6b:10:61:c6:55:45:
                    9d:62:36:e9:7d:78:13:9b:75:6b:a4:fa:81:4b:0a:
                    87:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:05:5A:EC:28:F2:B0:24:BF:1C:C6:31:BB:62:E0:31:6C:47:EC:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3ec3c551-9141-3764-ac13-7b6cef5c5499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:be:26:cc:e0:88:c4:f9:90:e9:92:77:d6:8e:af:3b:e4:58:
         d2:1c:51:7b:d3:87:da:a4:ac:6c:8e:7b:ee:b9:a8:37:4e:ab:
         44:c1:97:7d:55:a7:12:73:fb:07:54:7a:ed:05:8e:f9:7d:f5:
         94:aa:b0:5e:31:45:2c:a5:2f:ab:93:89:49:53:27:32:93:a4:
         c4:2d:81:d5:c1:7f:ff:fa:f6:3e:56:17:a4:b9:68:90:1e:aa:
         5a:43:0b:df:dd:a5:39:ec:91:8d:1c:46:dd:52:29:e5:2e:96:
         e1:8f:04:a8:77:0e:33:f4:ae:da:ce:04:4b:67:97:24:42:2a:
         29:32:cd:33:b2:09:09:6b:49:04:a9:9b:80:ac:b4:57:aa:00:
         ff:fd:67:36:e8:16:ba:b8:ed:81:a5:3b:ea:4c:87:06:4e:0e:
         60:ac:8e:1b:39:cb:a6:ed:8c:54:56:b3:2f:2b:25:cc:b6:f3:
         b1:91:1a:bc:4d:5d:f6:7f:fd:df:c6:6d:8e:e3:7a:d1:9e:51:
         20:67:f7:c4:9d:51:f5:ae:9b:d2:37:01:b7:03:6f:b3:0d:15:
         b4:60:bc:aa:71:fc:4f:25:fb:e8:a4:b6:ee:83:97:dc:c7:5e:
         0d:e3:c5:4d:97:6a:33:2e:8b:14:13:df:5e:14:f2:d1:91:11:
         2a:59:21:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:43:15 2025 by rpki-client