Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87172803-bc12-38e0-a0e7-3e5c8011604a.roa
File:                     87172803-bc12-38e0-a0e7-3e5c8011604a.roa (raw, json)
Hash identifier:          KmI+JzwfK+2IwYm2onLLjtFvx76jz7cmCZdj41gc3G4=
Subject key identifier:   BE:32:51:8B:E9:78:C4:00:F9:58:72:5D:C3:35:80:64:4E:0C:41:9E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DBA3AF1317720BB20B4937A80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87172803-bc12-38e0-a0e7-3e5c8011604a.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     7029
IP address blocks:        141.164.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f1:31:77:20:bb:20:b4:93:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=865448e8-17e0-46e3-a172-42687466df93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:39:6f:69:be:fc:59:f4:0c:50:72:6c:24:bb:
                    a3:ea:9f:e4:bf:ed:61:e2:cd:53:96:3f:92:aa:37:
                    95:6c:a3:b3:cc:31:6b:08:a8:8f:61:13:60:8c:ac:
                    24:e7:a5:e3:46:47:ae:ec:cc:1e:bb:b8:9d:a0:bf:
                    23:84:46:4a:7b:c7:57:30:4c:64:d2:ca:e7:5e:e1:
                    38:f1:45:57:d2:a8:76:1d:66:12:fa:f0:4d:d3:48:
                    c2:5e:92:fe:22:9f:3a:42:b7:83:25:06:61:15:23:
                    e2:11:2a:1c:f1:8a:01:22:cd:78:a0:0e:79:28:94:
                    b7:8d:97:90:dd:a1:0f:0e:2d:23:8b:44:0f:59:32:
                    96:38:b4:d0:03:61:aa:16:b6:c0:f0:b0:f9:34:ba:
                    61:06:ae:e4:79:33:ae:ab:90:79:89:f0:a9:e2:de:
                    d9:5b:b8:97:d4:53:8f:2e:c9:4f:96:7a:21:94:6a:
                    a3:4e:fd:a5:e8:c6:ca:f3:e0:e3:32:e1:86:90:3b:
                    ec:85:7b:73:a7:6d:db:46:68:71:23:cc:b0:b6:d3:
                    11:b8:c7:33:ef:73:42:b9:3c:99:76:be:5d:d4:30:
                    8c:bc:e7:f5:0b:ac:51:4a:55:19:e1:82:3f:76:43:
                    c5:85:6e:8a:c7:e7:57:b5:3c:a7:1f:fa:ad:83:81:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:32:51:8B:E9:78:C4:00:F9:58:72:5D:C3:35:80:64:4E:0C:41:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87172803-bc12-38e0-a0e7-3e5c8011604a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:72:16:2a:65:93:4a:ad:42:bb:99:e5:66:2a:ca:d8:7b:c6:
         7a:85:ee:bf:f4:1b:ae:0c:bf:0e:85:77:ac:71:6a:b3:bf:5b:
         20:53:95:76:62:ba:21:0f:82:ac:ad:b5:c5:d3:4f:6a:c0:11:
         d1:0e:33:13:93:ca:ca:99:3a:0b:a8:34:22:fa:ac:23:84:73:
         78:4f:06:91:ff:e8:2b:18:f5:7f:2d:c0:a7:f8:21:50:98:4e:
         cc:35:c0:07:dc:c9:bb:72:96:a0:32:ad:a6:66:22:e2:01:00:
         14:95:5a:a2:4e:6f:ca:81:28:d3:1c:ee:63:b6:ed:25:7a:01:
         7d:0b:ee:b6:a2:55:0d:bf:2f:70:fa:8a:aa:d9:ee:90:2f:40:
         21:95:b7:65:02:af:08:a5:65:ff:63:79:6f:c3:8c:91:bd:ae:
         80:ae:96:e8:fa:46:01:91:b5:6c:5e:3f:68:9b:cf:cd:91:0b:
         d9:ca:95:14:72:0b:f4:08:57:c7:bc:3e:71:a2:1c:ec:ab:fb:
         32:01:a9:30:7b:72:fe:95:4a:f1:96:5d:b4:db:a5:9e:d0:0c:
         01:25:30:7d:d9:9d:50:ee:62:f1:d2:d1:87:5d:af:bd:12:f0:
         b7:5f:d7:d2:3c:84:8c:c1:e6:73:d4:6c:77:b9:3e:2e:5b:5d:
         db:3a:74:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:36:00 2026 by rpki-client