Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4fd1e6af-6cc9-39cd-ad54-bc9e6b884b8d.roa
File:                     4fd1e6af-6cc9-39cd-ad54-bc9e6b884b8d.roa (raw, json)
Hash identifier:          /Pkky1oQxkaWrmik9LeaT6kMPJEY8AGvGzfXuzsjls8=
Subject key identifier:   8E:82:19:F9:7B:12:D4:3E:06:97:5F:FE:DC:EE:F0:19:16:FF:59:C8
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B79BCB33375059F9072591A40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4fd1e6af-6cc9-39cd-ad54-bc9e6b884b8d.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     397630
IP address blocks:        130.254.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b3:33:75:05:9f:90:72:59:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=b073f6eb-c7da-4573-bd6e-51fc0e33bb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:a4:77:47:fd:a0:37:1f:eb:45:50:a0:bd:
                    be:22:82:21:88:20:bd:73:6a:11:cb:c2:f1:fe:5a:
                    0f:d8:65:8c:b8:94:ce:ec:e9:9b:57:af:4a:ae:02:
                    b8:2c:0e:b0:18:71:bb:6c:7e:40:c7:2b:a1:87:e2:
                    62:78:e1:31:74:df:56:ac:b3:67:67:68:b7:07:56:
                    f2:70:c7:59:e0:bd:f8:dc:99:a5:34:dd:6d:56:e0:
                    93:53:47:e4:c0:63:e9:10:40:5e:b6:d5:c6:5f:f3:
                    3c:ee:90:89:3c:fe:ac:d3:b7:23:7c:7d:96:68:f1:
                    3f:1c:dd:59:08:f3:82:1e:0e:7d:b9:60:66:cf:20:
                    2d:09:b7:4c:f3:46:39:77:fe:00:fb:48:7a:b0:ee:
                    05:b4:bc:1e:a3:36:88:82:00:3d:3a:91:21:92:4c:
                    21:6a:8c:fe:c2:76:f8:d7:7a:b8:b3:3b:eb:63:53:
                    2a:bb:c5:d7:bd:00:05:ee:0b:3e:98:82:7d:e8:9d:
                    12:f9:19:f2:a7:dd:c4:f8:be:36:80:94:2f:d5:e8:
                    33:99:38:ef:52:43:95:cc:31:fd:be:3c:80:f5:1d:
                    a2:aa:af:d5:3f:00:19:3d:e8:5a:85:19:3a:bb:18:
                    a3:65:c3:f8:25:b5:05:05:d1:96:ba:60:d6:6c:8f:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:82:19:F9:7B:12:D4:3E:06:97:5F:FE:DC:EE:F0:19:16:FF:59:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4fd1e6af-6cc9-39cd-ad54-bc9e6b884b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:f3:56:23:54:f4:be:c0:70:f8:1f:5c:6e:e7:04:cd:bd:
         d3:91:cf:34:5d:1d:41:e0:26:20:89:b0:e6:83:02:51:b6:c7:
         9e:17:81:1a:72:b6:95:65:48:aa:9f:9b:c3:6d:c0:c6:ad:df:
         08:b7:9e:b1:fb:eb:f0:70:0f:d1:66:2d:86:37:76:e7:14:a4:
         c9:e1:5e:95:ed:f6:78:7c:2e:1a:39:75:3a:65:5f:90:ec:9d:
         6a:f2:d8:26:b3:0e:6b:be:53:26:f8:29:0a:bd:a6:31:e9:40:
         bc:d4:11:6e:22:2c:f9:1d:12:6a:09:d7:57:58:53:27:58:a9:
         87:90:3c:fa:2a:cf:eb:26:22:66:4f:06:11:78:a9:c7:6c:2c:
         3e:8e:95:8f:87:45:1a:dd:56:2c:aa:31:40:25:ee:ab:34:ac:
         fe:c9:97:f6:83:a6:77:f9:8b:f7:ac:9d:07:0f:d5:f2:96:dc:
         c8:34:19:78:50:6d:ff:1e:4f:e0:d8:f0:0c:80:63:86:7e:01:
         c8:cd:92:8e:5c:bc:43:07:61:21:ad:1e:79:43:fa:7c:5e:c6:
         6b:14:d8:d3:67:e6:f7:ae:b3:8f:ff:c2:36:76:24:f1:4e:6a:
         80:5d:07:9f:4f:56:4c:51:74:0a:ef:b2:ed:a0:5b:49:f6:35:
         1a:4e:4b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:17:30 2025 by rpki-client