Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6d128bf7-039b-3789-9911-1195cfa4af74.roa
File:                     6d128bf7-039b-3789-9911-1195cfa4af74.roa (raw, json)
Hash identifier:          Zhrsh6zk0a8MP3wIuPVtU8VBWoDrTP4OEF7plXEMzYs=
Subject key identifier:   0A:6D:12:CC:CD:41:C0:B0:09:6B:F1:20:14:7E:79:8F:C3:CA:0F:8D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FC7CF178CFAFF2B077A80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6d128bf7-039b-3789-9911-1195cfa4af74.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        130.254.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:c7:cf:17:8c:fa:ff:2b:07:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=13e22dac-89f6-48ec-83fd-936011ccfe1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:bd:c6:e3:a6:9d:53:3b:24:cf:95:ff:f6:
                    bc:58:5a:38:b1:08:21:4b:1a:68:f4:1a:aa:4b:77:
                    3e:39:3b:d1:3e:b7:70:d4:aa:1c:ea:46:70:b5:d9:
                    e6:72:47:09:f2:87:2d:ca:c7:83:39:0b:4c:d8:ad:
                    7c:9a:44:91:c4:ed:3c:6b:c3:1d:b5:29:a4:88:99:
                    5d:f7:8c:18:3e:53:14:9f:35:06:d5:16:ed:14:4d:
                    34:46:13:1e:7e:71:d0:ff:d8:56:a0:d6:b0:77:43:
                    02:b1:4b:af:3e:67:b6:ab:46:ce:fb:db:96:dc:a5:
                    9b:f9:6d:79:b9:e0:c4:b5:45:d4:a6:cc:71:ef:ab:
                    d9:e0:76:a6:ec:89:b5:f2:4f:19:64:4e:bb:93:1e:
                    3e:d5:c2:44:1b:6e:52:68:f7:86:08:d7:c1:df:fe:
                    c8:f5:fc:3e:9a:26:7f:2f:5b:6b:c3:e0:4a:1b:ba:
                    a0:60:fd:5d:c2:9d:d5:ca:e9:bc:23:86:94:66:96:
                    74:82:fa:93:9d:68:76:97:99:85:cd:0d:28:69:f4:
                    13:0c:e0:71:43:ac:64:31:44:07:7f:d1:48:f9:7e:
                    7a:62:6f:02:79:23:e4:6b:8f:5b:fc:56:f1:30:e0:
                    f3:77:14:34:3c:0f:10:b9:10:3d:49:d3:61:4f:86:
                    c0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:12:CC:CD:41:C0:B0:09:6B:F1:20:14:7E:79:8F:C3:CA:0F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6d128bf7-039b-3789-9911-1195cfa4af74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d2:63:61:66:4d:22:bf:82:2d:f6:5e:01:dc:b9:d6:78:90:
         74:21:e5:84:a0:a7:12:89:01:0c:85:18:3b:47:62:c2:2d:fd:
         48:aa:8f:6b:cd:7c:e5:29:01:f4:76:a2:90:c0:f2:23:c1:d3:
         23:1e:e4:c4:b0:1d:68:cb:56:c7:39:bc:94:37:35:bb:16:0d:
         0a:ef:dc:d0:49:58:cf:e6:08:cc:66:39:f9:2a:da:5b:49:67:
         87:ab:47:5e:14:09:31:c9:18:35:85:04:61:01:9b:33:70:7c:
         66:6e:dd:d2:8c:ad:35:7f:9b:e2:4a:b6:a3:a8:76:59:1d:36:
         81:cb:04:aa:57:6c:34:cb:ef:82:2f:b8:25:c8:e6:8a:c3:6e:
         f6:c6:8d:df:19:93:f4:3e:36:87:20:21:42:10:0a:02:b8:79:
         9f:fa:1f:d4:4d:72:c5:19:5e:86:8e:a3:30:60:55:75:87:69:
         be:fb:da:5e:9c:44:03:9b:d2:ec:61:91:2b:1d:f7:a0:f0:f8:
         81:6d:08:cd:44:d9:84:97:86:2e:bc:05:ef:09:f8:27:68:f1:
         58:c8:24:a6:c3:58:63:e3:26:bf:6e:65:28:de:95:74:65:26:
         88:e0:ee:7e:76:29:d8:ef:a9:13:77:cd:00:6c:24:0d:a8:eb:
         86:e6:7c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:06:13 2026 by rpki-client