Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/542d9ff8-97dd-3994-81d9-bf341854ebc5.roa
File:                     542d9ff8-97dd-3994-81d9-bf341854ebc5.roa (raw, json)
Hash identifier:          3rIz+QTZsgugRImAn7miEClNqqfHSEltiEu1xy2lZ5g=
Subject key identifier:   F2:AC:83:52:16:A6:DB:4C:32:E1:30:70:E5:13:51:FD:6D:BA:AE:4B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B76F254BCA1A6EE93F5AE4A80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/542d9ff8-97dd-3994-81d9-bf341854ebc5.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     397630
IP address blocks:        130.254.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:54:bc:a1:a6:ee:93:f5:ae:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=36446223-63ca-4756-9b2d-352006996e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:58:3b:73:b9:32:ee:09:b7:7a:c1:c9:ed:5d:
                    dc:bb:12:46:c1:f8:8c:08:d6:17:41:0b:71:44:24:
                    fe:bb:62:a1:0d:dd:4c:48:d4:ed:8e:e3:19:1c:85:
                    46:9a:87:b5:ca:4b:ba:1a:ee:01:71:29:17:ef:e4:
                    18:4b:60:13:43:5a:c9:87:b9:db:1f:ee:2e:30:49:
                    76:5d:5e:0e:87:ea:0f:1d:13:35:29:06:eb:84:dc:
                    8d:a3:ed:ce:9a:fc:36:cf:3a:9c:0c:c1:e3:f0:a1:
                    87:6d:22:43:78:8d:64:d6:43:fc:d7:4c:5f:0d:d5:
                    48:53:64:7c:47:28:fc:ed:24:34:03:68:1b:53:09:
                    64:a1:55:49:42:cd:ba:83:4a:f9:66:42:29:4f:fc:
                    88:bc:49:0a:87:68:d3:61:5d:49:d6:a4:a9:b5:8c:
                    0d:ab:05:c1:d3:9c:79:2f:eb:87:2a:65:69:6c:33:
                    90:cd:45:1a:c7:ed:02:61:36:53:c2:77:fa:5c:22:
                    86:57:ef:76:d0:e3:52:a8:4b:22:d1:ff:d4:b5:86:
                    73:a2:e4:26:5e:5f:06:f3:fc:dd:54:19:e8:5f:83:
                    7c:0e:c3:e4:12:3f:51:92:8f:6e:0b:cf:1e:79:ae:
                    c3:a6:c1:d2:06:79:4e:0e:71:3f:5e:8a:38:3e:71:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AC:83:52:16:A6:DB:4C:32:E1:30:70:E5:13:51:FD:6D:BA:AE:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/542d9ff8-97dd-3994-81d9-bf341854ebc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:22:82:28:78:47:53:95:b8:8d:a1:63:46:67:d8:19:db:7d:
         24:51:f8:27:02:30:29:3f:0c:03:79:be:72:7e:6f:1b:88:e5:
         68:b5:dd:0d:ed:37:ae:0d:88:27:08:fc:9c:11:95:cb:57:66:
         35:6c:e4:c1:02:51:02:1e:90:10:2d:2a:af:c9:98:40:17:da:
         c2:11:1e:48:de:34:6f:c9:35:1f:c5:1b:95:24:31:84:df:27:
         2d:10:11:96:d0:5d:97:9f:0a:55:5e:47:b7:a9:c7:76:4e:40:
         59:b8:be:2f:6e:fb:e5:eb:0a:9c:03:d9:5c:f0:62:9a:9e:66:
         9f:38:35:9f:a9:50:01:07:93:e6:7c:3c:01:37:3a:d7:ad:55:
         2e:0d:76:77:82:82:23:4b:5b:22:34:3d:0a:fe:99:91:7c:b0:
         a5:72:77:8d:32:09:4e:5b:93:9e:a8:cc:cb:1c:68:9e:49:4a:
         ed:80:78:ca:88:eb:d3:28:06:b3:cf:6b:90:f5:2b:47:74:83:
         1b:80:f7:d1:b2:2f:b0:f1:cb:ba:1b:ae:69:70:eb:a5:71:c4:
         53:20:46:71:c5:bd:9f:7f:9d:8d:e6:5c:39:22:1a:b1:55:a2:
         89:00:a2:8b:ea:4f:da:4d:6c:61:dc:ae:e4:9c:1a:5d:b2:00:
         e7:4e:7c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:01:41 2025 by rpki-client