Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6df533e4-991e-338e-beaa-9f33d62927ff.roa
File:                     6df533e4-991e-338e-beaa-9f33d62927ff.roa (raw, json)
Hash identifier:          /XZFZcWbQRinmRFGfxSwBgotEXdn+f1xZ0EQZpZndyE=
Subject key identifier:   D6:75:BC:A4:59:51:3C:F3:A0:87:AD:01:73:24:2E:35:10:3C:76:0F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DAAE0532AB03BF2531D913F80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6df533e4-991e-338e-beaa-9f33d62927ff.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     64267
IP address blocks:        216.230.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:53:2a:b0:3b:f2:53:1d:91:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=ca0d626d-93ee-45f1-88bc-87177cbd495e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:1d:0b:13:59:6a:70:01:52:58:40:6f:25:
                    ee:89:3d:2c:af:52:65:99:fe:3a:f9:32:ad:f2:69:
                    3a:5a:97:7e:03:27:c4:41:b0:4a:b0:b2:7b:fd:4d:
                    ff:af:72:50:1d:42:ba:a9:cb:a1:99:36:e5:18:ec:
                    f6:58:73:4f:9a:5c:6b:bf:a8:88:1d:df:bd:d8:84:
                    fc:07:0d:b6:9e:d4:8d:80:51:ba:6e:8e:68:4c:bd:
                    33:0c:77:ac:d1:6c:85:cd:98:4d:f2:a6:ab:a4:fc:
                    8d:5b:10:15:d4:63:2e:9d:e7:6c:14:e1:46:cc:ef:
                    69:b0:08:2c:60:ba:1d:f2:1e:b7:92:a0:d9:e4:db:
                    e7:ff:d5:10:8e:be:b8:7f:55:7a:b6:99:c4:4f:1b:
                    5e:cc:ba:0e:f8:40:b2:d7:33:51:7a:d6:5a:fd:e5:
                    9b:84:1b:dd:fb:9f:46:c4:91:a7:b0:d5:3d:29:38:
                    9e:d9:0c:61:b3:21:8b:e3:92:60:c1:4c:e8:49:6e:
                    0d:f1:b9:11:31:40:78:e9:ec:bc:d4:c1:3f:d1:5e:
                    9f:2e:9b:d9:71:59:6b:75:ee:b0:e5:fe:0e:04:1a:
                    14:48:bf:b5:b1:89:c6:8d:a4:8a:fd:2d:22:c4:a4:
                    9c:d7:99:aa:12:ff:81:a2:52:15:95:b3:6f:26:08:
                    02:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:75:BC:A4:59:51:3C:F3:A0:87:AD:01:73:24:2E:35:10:3C:76:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6df533e4-991e-338e-beaa-9f33d62927ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:6a:aa:dc:f3:e1:27:1e:ed:ed:de:19:ca:65:a8:d0:90:5c:
         fe:4c:fd:d6:eb:96:d7:7f:9c:21:e0:8d:b1:01:34:14:9a:90:
         82:76:09:88:04:c6:40:89:f4:08:e3:ae:73:e3:5d:fd:90:0d:
         b8:3f:29:42:45:5a:38:c4:c7:b6:40:f0:76:d3:50:11:aa:02:
         d1:97:57:5a:6c:b7:5d:02:95:b1:6e:00:0d:0a:d4:f1:d4:d4:
         eb:ff:a6:07:6b:14:fa:4d:72:7f:9c:b3:01:01:9c:0d:e8:cf:
         18:84:24:86:ed:14:7b:7e:37:d3:5a:e0:0e:dd:c2:65:0a:26:
         d3:2f:a0:8f:7d:b1:0b:1f:7d:ef:9a:75:2e:bf:eb:14:23:83:
         f5:04:2a:0c:36:7d:0a:8a:95:3f:76:8f:f6:17:6c:31:6d:b2:
         43:b2:7b:ce:d1:93:07:20:e7:47:8d:75:c8:bb:8b:fe:63:c9:
         4d:bc:3e:5d:35:81:0e:71:23:dd:cd:4c:45:13:29:91:ff:00:
         45:17:4b:dd:4c:83:d8:f3:84:cc:31:29:f3:2a:af:8d:bd:73:
         b1:ab:43:a0:4f:79:41:4d:e3:e5:b7:55:b8:9e:20:c3:6d:4a:
         f1:94:d1:bc:48:2c:eb:f6:36:90:5d:5a:b2:93:78:42:94:78:
         1d:8c:81:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:45:35 2026 by rpki-client