Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6adc3411-8ac3-3c07-94de-262d7701c722.roa
File:                     6adc3411-8ac3-3c07-94de-262d7701c722.roa (raw, json)
Hash identifier:          sMjzXvtGG5C5WpfaIgNdjYYHZmojMMB013rYeJbY+X0=
Subject key identifier:   81:0E:5C:CF:D0:8E:DC:E0:1D:46:A1:E3:37:86:33:83:13:73:09:52
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D1B1A13B80D854A6B6C0C3540
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6adc3411-8ac3-3c07-94de-262d7701c722.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     64267
IP address blocks:        199.34.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:13:b8:0d:85:4a:6b:6c:0c:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=c080b8d1-ba42-4c6d-9e07-c3071d506dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d1:b2:60:49:db:6b:0b:51:0a:7a:ef:45:56:
                    c4:c6:4c:88:bd:85:5a:4c:f6:ef:d0:92:ab:c6:ca:
                    31:fa:cb:c1:84:e6:30:42:ac:d1:51:2e:a6:60:c5:
                    f6:80:35:8f:9b:3d:3e:bb:ac:22:8e:3f:3a:58:45:
                    e2:19:86:34:63:59:55:c2:71:b6:b7:46:9d:84:bd:
                    0b:d2:dd:28:c2:ad:81:a6:83:9e:fd:e5:6a:b3:af:
                    a2:21:f3:49:5b:15:9b:8e:b8:54:e5:e3:bd:a7:fa:
                    e0:f2:55:14:ab:33:ac:7d:a7:05:43:70:39:db:6b:
                    07:63:05:1d:d0:f9:da:2d:c3:62:f6:4d:cb:7e:2a:
                    00:99:3c:59:be:4b:cf:d6:43:86:1c:07:78:cd:7a:
                    02:4c:98:3b:20:b6:1f:41:25:db:27:c0:6d:25:57:
                    d3:1f:d5:50:60:d4:7f:c4:b7:1d:9a:37:98:75:43:
                    db:cf:8e:b4:d0:08:87:d3:02:13:ab:03:5a:7d:12:
                    c7:2b:98:24:e4:8b:bd:93:1e:67:c1:74:e6:21:2b:
                    25:c1:24:a5:ce:fb:a5:88:6c:8c:76:9e:c2:e5:ac:
                    df:e3:3b:d0:64:01:e8:a5:12:d0:48:1a:78:48:44:
                    96:b3:c1:1b:2c:47:69:a0:37:58:47:45:19:3c:7d:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0E:5C:CF:D0:8E:DC:E0:1D:46:A1:E3:37:86:33:83:13:73:09:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6adc3411-8ac3-3c07-94de-262d7701c722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3c:39:99:d7:b8:f1:9b:75:0b:62:64:68:55:a8:1d:09:1a:
         44:60:26:f3:30:34:0a:7b:48:ca:b1:14:9d:1a:ea:b2:de:de:
         25:e8:c6:6d:e7:e5:bb:5b:da:62:69:68:45:48:92:72:15:4e:
         3d:0f:54:1d:6c:5d:f1:08:9c:5d:28:a7:98:3a:57:28:0c:37:
         44:cb:38:10:9e:b5:c5:19:44:3c:f4:22:d5:b0:9d:76:7a:31:
         fd:c9:4c:0f:98:3e:70:82:0c:9e:c8:2b:61:29:e9:d2:18:ea:
         d2:8a:f1:b0:0e:11:fa:39:1d:d0:3b:15:1c:c5:a7:78:6a:78:
         e6:76:25:45:cf:ba:0d:9b:74:7e:e4:9a:25:77:5b:22:fe:c4:
         b9:e3:1b:30:48:56:54:7a:6a:55:0f:dd:f8:b9:c4:a5:6a:e1:
         ed:81:ea:c9:8d:29:8d:58:51:91:0b:f8:49:38:a2:c8:64:f6:
         08:8c:11:8f:a9:ef:8b:83:37:2c:a9:28:70:2e:bb:5c:bf:bd:
         ff:c2:33:b9:9e:0f:33:f4:df:fa:1f:12:5c:61:11:0c:6b:ae:
         65:e2:b3:a3:d2:17:ee:47:4a:bb:3e:f8:ab:5c:1a:87:5d:79:
         c3:34:38:c5:ee:1a:5b:a3:2c:31:51:90:55:88:65:d1:fb:5f:
         05:92:9d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:55 2026 by rpki-client