Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a6c0284-0388-36a7-99a1-fe154f3c5899.roa
File:                     8a6c0284-0388-36a7-99a1-fe154f3c5899.roa (raw, json)
Hash identifier:          SmLZJp0XGimavB/cyhJFJK0vNYaeZb44sKTZ65tVv+A=
Subject key identifier:   74:35:11:8F:F3:C6:BB:4C:F6:BB:F7:6D:A9:A5:EE:22:12:5C:3B:61
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584ADAB409E17CF37818601027C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a6c0284-0388-36a7-99a1-fe154f3c5899.roa
Signing time:             Thu 14 Aug 2025 13:49:44 +0000
ROA not before:           Thu 14 Aug 2025 13:49:44 +0000
ROA not after:            Wed 12 Nov 2025 14:49:44 +0000
asID:                     397630
IP address blocks:        130.254.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:b4:09:e1:7c:f3:78:18:60:10:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 14 13:49:44 2025 GMT
            Not After : Nov 12 14:49:44 2025 GMT
        Subject: CN=eb9914df-467a-4641-a493-037f3337c364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:c1:35:e9:5b:66:f1:d6:8a:77:e4:24:43:
                    0a:7c:72:50:3e:47:0c:dd:75:15:6e:3f:2e:e0:49:
                    f5:17:95:5a:69:15:94:e9:37:d4:c8:5f:9f:22:67:
                    6e:c4:29:0c:9c:7b:78:b6:e4:e6:83:ad:65:1f:68:
                    91:b5:de:c6:8a:20:0d:89:28:58:76:99:23:a3:60:
                    e4:6d:0b:ed:dd:b5:b7:e5:31:e2:6d:66:4b:b0:cf:
                    92:7f:de:54:f4:0b:34:9b:be:d8:c4:47:08:32:43:
                    5d:45:74:1d:65:47:76:37:97:7a:e7:0b:74:67:6f:
                    ad:cc:1f:80:62:ab:32:0b:69:ef:a0:ee:e3:78:67:
                    34:57:51:2c:a8:b6:dc:81:44:e3:62:2a:5b:37:2a:
                    e0:d7:61:bb:9b:cc:38:9f:bd:21:ad:04:22:b2:8a:
                    23:3a:6d:69:2a:40:42:2b:79:02:56:fa:a4:8c:68:
                    21:33:70:63:ed:35:d4:09:1c:7d:e2:21:12:21:b6:
                    c9:35:61:c1:7c:90:0b:7a:a0:fe:fd:c6:fc:f6:ef:
                    05:53:8a:58:6d:1d:70:37:d3:f6:18:6e:97:44:76:
                    d4:1f:d0:29:13:2d:dc:65:8d:11:b8:7c:3e:1b:36:
                    ea:1f:35:80:6b:3d:68:69:6d:24:68:c3:c8:f5:ba:
                    9e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:35:11:8F:F3:C6:BB:4C:F6:BB:F7:6D:A9:A5:EE:22:12:5C:3B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a6c0284-0388-36a7-99a1-fe154f3c5899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:68:31:37:49:2e:97:a7:7e:78:5d:f7:6f:50:82:d7:a9:e3:
         92:0b:10:90:21:6e:91:4f:27:e3:78:d2:11:ca:de:3b:c3:57:
         62:0f:7e:5d:a1:bc:3d:fb:04:48:8a:67:14:a0:9f:5d:1a:87:
         c1:6d:6d:e0:fd:4a:cc:09:9b:26:33:a8:23:64:ff:f9:46:f4:
         3d:88:4a:64:03:fd:cd:d0:6d:48:fe:34:03:28:51:e1:d3:3f:
         11:16:d4:7c:e1:b1:e6:31:a7:e0:0e:87:e1:b3:27:b7:e6:13:
         c6:99:34:0e:0a:77:9a:e0:12:cd:79:d3:bb:f5:38:b6:4c:f2:
         40:4a:59:3e:6b:ed:98:d5:93:fb:4b:9a:57:43:79:ad:6c:18:
         55:52:65:f4:da:7a:25:9e:0e:a1:ca:6f:d8:52:04:3c:06:e3:
         c8:b5:17:c5:5d:19:4f:b4:5e:9f:72:ee:c6:05:f2:25:a4:17:
         c7:ba:ef:06:7e:16:d2:61:56:c3:1c:05:aa:9f:18:eb:65:48:
         61:b5:63:c2:cf:0c:ae:73:aa:e9:2c:b4:6b:ab:4b:33:b6:16:
         50:b1:be:c7:5d:bf:45:51:56:54:ab:74:ad:f5:7f:cf:d3:27:
         38:15:0b:62:4f:43:6c:4e:5d:67:97:8d:28:4b:51:b2:d3:e8:
         b1:46:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:12:57 2025 by rpki-client