Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/75f70a42-3f1a-3750-8345-f62203e5d4b7.roa
File:                     75f70a42-3f1a-3750-8345-f62203e5d4b7.roa (raw, json)
Hash identifier:          kAYOe8DVsgQLGQIW9cJMuixLXs3jUZVWgno8dqJ+O9U=
Subject key identifier:   39:E6:B8:A5:AB:AB:29:37:EF:A2:A9:D5:8C:BF:B6:7E:D3:6E:99:0A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B1F017B82D9708681BD25ECC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/75f70a42-3f1a-3750-8345-f62203e5d4b7.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     7018
IP address blocks:        130.254.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:7b:82:d9:70:86:81:bd:25:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=a6a24b4b-6ea8-4f65-a962-d389b6b6a1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d4:aa:9d:b7:20:5c:94:08:01:4f:d4:7a:d3:
                    1a:cb:2a:14:99:3d:7d:a3:f6:f2:48:16:c9:99:02:
                    29:3a:fe:5e:2d:cd:9b:e5:3d:a8:31:a1:72:72:d6:
                    da:a3:aa:87:e6:23:00:b2:8f:77:fd:05:ff:f1:a1:
                    c5:47:13:1c:d6:6a:b9:c3:69:15:24:4e:9a:97:d4:
                    a3:fb:b1:a4:c5:65:ad:f9:e3:0d:03:e8:48:81:41:
                    5c:1b:7f:d9:86:b3:41:1e:80:97:6f:bd:7e:34:bb:
                    07:a8:f9:ae:83:5a:31:dd:14:07:65:05:99:3f:df:
                    c5:c4:24:1e:f6:b7:f3:75:91:3a:e4:58:a3:95:b2:
                    c5:83:c6:1d:3b:ca:87:1b:69:56:92:c9:45:41:18:
                    e4:1a:e8:0b:84:71:1f:cf:51:d1:7a:15:ab:4c:ab:
                    81:98:ff:f4:58:ec:dc:c8:88:c0:7b:ac:14:bb:eb:
                    b9:c7:a8:6a:e8:80:91:e4:95:91:db:0e:a6:17:24:
                    e4:d4:29:b0:2f:1e:a9:e9:ec:77:58:57:ff:59:5c:
                    b8:bd:14:85:63:69:5d:c3:34:02:39:72:66:81:a5:
                    fb:8c:b5:3f:33:e5:58:31:3a:f0:81:24:f2:e4:c7:
                    51:06:b5:67:ea:b8:13:15:fc:84:db:0a:21:44:89:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E6:B8:A5:AB:AB:29:37:EF:A2:A9:D5:8C:BF:B6:7E:D3:6E:99:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/75f70a42-3f1a-3750-8345-f62203e5d4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e5:74:33:f0:12:7d:f7:2e:45:6a:74:5c:0e:da:26:b8:b3:
         65:23:ba:99:6f:d5:76:20:e9:b8:6b:cc:a3:6c:28:d0:ae:2c:
         28:bb:54:2d:68:1d:7e:fa:6d:a9:ad:e5:48:7e:31:f7:b6:d5:
         a4:bf:26:7b:14:91:36:76:60:b8:b2:19:d2:8f:06:74:41:43:
         a8:a6:9c:78:32:da:14:b0:82:c7:53:18:88:12:98:32:c3:ea:
         5f:52:31:75:cc:5e:a9:b9:36:d7:d7:4b:4d:b1:eb:dd:de:78:
         af:89:19:b2:84:f9:97:74:83:f8:99:39:74:f5:f0:15:4d:53:
         1b:14:dc:56:66:9f:66:b0:97:38:ae:16:d4:a1:e1:0a:64:39:
         c6:b1:1d:ee:eb:fa:90:b9:91:05:c2:83:92:c0:c5:14:22:3f:
         ce:e6:0f:e8:7b:ea:04:8e:10:16:84:b4:95:27:7a:6c:4d:64:
         c5:11:e0:af:37:cd:e0:91:19:c4:10:c3:ff:80:d2:b4:33:24:
         84:05:c1:f3:2e:76:81:4a:aa:d8:27:73:8f:44:82:54:9b:74:
         34:69:8e:73:18:f9:fd:c4:6d:b5:f3:f7:50:26:a7:76:34:dd:
         30:f9:8f:51:4e:d9:15:17:90:97:8e:02:0a:49:b2:f8:8f:15:
         32:d1:4e:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXuC2XCGgb0l7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
YTZhMjRiNGItNmVhOC00ZjY1LWE5NjItZDM4OWI2YjZhMWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdSqnbcgXJQIAU/UetMayyoUmT19o/bySBbJ
mQIpOv5eLc2b5T2oMaFyctbao6qH5iMAso93/QX/8aHFRxMc1mq5w2kVJE6al9Sj
+7GkxWWt+eMNA+hIgUFcG3/ZhrNBHoCXb71+NLsHqPmug1ox3RQHZQWZP9/FxCQe
9rfzdZE65FijlbLFg8YdO8qHG2lWkslFQRjkGugLhHEfz1HRehWrTKuBmP/0WOzc
yIjAe6wUu+u5x6hq6ICR5JWR2w6mFyTk1CmwLx6p6ex3WFf/WVy4vRSFY2ldwzQC
OXJmgaX7jLU/M+VYMTrwgSTy5MdRBrVn6rgTFfyE2wohRIkchQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDnmuKWrqyk376Kp1Yy/tn7TbpkKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNzVmNzBhNDItM2YxYS0z
NzUwLTgzNDUtZjYyMjAzZTVkNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjldDPwEn33LkVqdFwO2ia4s2Ujuplv1XYg6bhrzKNsKNCuLCi7VC1o
HX76bamt5Uh+Mfe21aS/JnsUkTZ2YLiyGdKPBnRBQ6imnHgy2hSwgsdTGIgSmDLD
6l9SMXXMXqm5NtfXS02x693eeK+JGbKE+Zd0g/iZOXT18BVNUxsU3FZmn2awlziu
FtSh4QpkOcaxHe7r+pC5kQXCg5LAxRQiP87mD+h76gSOEBaEtJUnemxNZMUR4K83
zeCRGcQQw/+A0rQzJIQFwfMudoFKqtgnc49EglSbdDRpjnMY+f3EbbXz91Amp3Y0
3TD5j1FO2RUXkJeOAgpJsviPFTLRTjw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:48:03 2025 by rpki-client