Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87172803-bc12-38e0-a0e7-3e5c8011604a.roa
File:                     87172803-bc12-38e0-a0e7-3e5c8011604a.roa (raw, json)
Hash identifier:          kFwB6hXJeVhF8clUKe/KBkkDx0SoJMuc1u9z3sgFbvA=
Subject key identifier:   BE:1A:82:EC:DE:56:13:17:22:62:CB:7B:81:44:DC:29:3F:B1:80:82
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FC616E5798925A1F72F40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87172803-bc12-38e0-a0e7-3e5c8011604a.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        141.164.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:c6:16:e5:79:89:25:a1:f7:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=af333863-937d-4c0f-8114-2ee7983010b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:77:4d:57:1d:6e:07:72:8d:41:8d:fe:39:
                    8d:cb:7a:2c:eb:25:85:9d:39:0c:cb:c7:bd:5e:c8:
                    62:29:cc:5f:d3:51:91:65:90:30:05:af:0a:65:f0:
                    5a:f7:77:ea:52:d2:ac:13:2f:12:a8:e8:71:0f:d7:
                    b8:2d:e7:ea:e1:66:55:4f:ef:df:4b:72:82:54:d5:
                    e5:09:6f:a7:20:f3:2d:55:a8:45:36:b9:31:01:07:
                    99:6d:b6:d5:a9:99:2f:96:b2:9e:2c:42:9b:06:85:
                    e6:f3:6e:3e:ae:d3:66:9e:80:93:e4:3d:b9:8f:80:
                    7f:fd:2d:88:ab:f9:5d:02:bf:76:b6:32:8b:d6:79:
                    46:43:e5:7f:b9:e9:46:98:d7:b6:8b:98:5a:30:a0:
                    ef:e4:6e:2b:da:39:8c:cf:ae:d7:1d:0a:cd:2a:f0:
                    c9:d0:90:d3:8c:93:c7:06:84:6d:47:b5:40:62:ad:
                    45:09:5b:24:39:78:e6:99:f2:99:2a:3b:3c:2a:11:
                    94:66:16:ad:84:11:7f:1a:5c:32:ea:3a:b8:f3:d2:
                    8a:11:79:1a:0f:28:b4:30:e2:39:c3:7f:31:f6:67:
                    37:6d:39:60:03:e9:21:af:f7:0c:25:a8:92:63:d4:
                    71:da:a2:74:21:5e:b6:1f:1a:a0:5d:fa:39:a1:3a:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1A:82:EC:DE:56:13:17:22:62:CB:7B:81:44:DC:29:3F:B1:80:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87172803-bc12-38e0-a0e7-3e5c8011604a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:93:f5:df:51:06:c0:45:e8:71:3c:64:c2:0f:85:39:5f:ab:
         03:53:51:02:81:32:dc:91:93:74:04:5e:a2:bb:d1:ef:84:15:
         81:d4:9f:e8:5c:75:e0:3e:ff:00:0d:79:fb:b0:93:45:5d:c9:
         14:50:60:18:35:b8:47:6d:46:d3:58:fd:9b:73:4a:b1:26:4c:
         4b:97:c9:1c:32:1c:11:75:b4:f1:6a:e3:5a:d6:00:10:00:d8:
         0f:0d:8f:1b:e4:e2:db:36:6d:ee:3b:f6:22:2e:27:9e:ec:50:
         9e:e3:e3:9c:97:26:98:7e:5a:08:38:88:a8:52:71:85:bc:78:
         7e:59:82:a8:7b:ad:3f:6e:68:7f:cd:46:ff:7a:03:0a:6c:e3:
         2d:4c:6c:66:32:b2:19:64:38:5f:b1:33:4f:d2:39:3c:ac:e8:
         dc:28:38:41:f2:9e:28:08:bc:a0:37:8e:c9:92:1d:52:6b:11:
         84:1e:0d:fe:4a:4f:ae:ad:fa:94:4c:9c:12:a9:06:27:f4:a0:
         d3:8f:12:fa:c2:e9:0c:ea:12:10:98:8f:f1:5c:8d:98:40:a4:
         c6:a0:64:0b:45:c8:3a:ae:db:ec:d7:48:d0:8b:5d:2f:66:ac:
         29:6a:ce:a6:82:a2:bf:da:f7:83:42:c4:b6:05:20:c8:26:fe:
         3f:98:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:01:12 2026 by rpki-client