Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8bfe350f-c2d9-3a81-a6c7-f83189858b48.roa
File:                     8bfe350f-c2d9-3a81-a6c7-f83189858b48.roa (raw, json)
Hash identifier:          WBdC3Cv2yCi66P/IricQo2iGfc8qJN+H2GbbT19iO7I=
Subject key identifier:   17:5A:A2:94:86:B9:E2:BA:E2:FA:9B:58:55:59:C0:DB:16:92:40:C3
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F63F8226BFF98B95FAD237380
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8bfe350f-c2d9-3a81-a6c7-f83189858b48.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     64267
IP address blocks:        141.164.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:22:6b:ff:98:b9:5f:ad:23:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=fe788781-f6db-4018-9383-be4cf277de0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:04:6e:52:76:f0:d5:1f:00:fd:a8:b2:d6:f8:
                    24:f6:a7:06:7f:28:33:a3:c2:c1:d4:c4:5c:0d:a9:
                    6b:21:b7:1b:11:86:ee:ad:83:80:dd:62:9c:b2:61:
                    03:98:30:dc:f7:a9:27:95:c7:b8:f8:41:23:0c:84:
                    93:77:c7:48:27:3e:c6:36:2e:84:e9:e9:c6:5f:0f:
                    33:53:fa:c6:3d:d6:68:0f:83:a3:31:4e:d3:83:37:
                    3c:33:49:9d:41:25:de:ae:4a:7d:1d:27:c3:f0:85:
                    af:18:41:88:38:03:06:36:5e:f3:c7:32:73:b2:dc:
                    f6:3c:22:32:da:74:3b:37:d3:6c:57:ed:2c:8c:7b:
                    5b:80:8b:0f:b4:99:0e:01:f9:8b:2b:f8:d8:9a:e2:
                    cc:62:b7:52:fd:06:20:56:36:76:0e:63:d9:6b:6b:
                    63:d8:06:b8:45:0f:16:6c:1a:a3:51:72:67:d4:8f:
                    ac:6e:17:7a:00:dc:27:69:f2:07:ac:3c:b2:b8:4f:
                    dd:49:ad:55:bb:e0:f9:36:46:22:36:b3:22:ec:b7:
                    c2:15:d2:99:31:65:eb:c0:04:6e:4e:ca:be:e5:10:
                    02:88:4b:c1:af:3a:a3:d9:d2:26:b2:a8:a2:23:81:
                    6b:3f:f8:49:92:ca:36:93:03:1b:85:f2:ad:e0:63:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5A:A2:94:86:B9:E2:BA:E2:FA:9B:58:55:59:C0:DB:16:92:40:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8bfe350f-c2d9-3a81-a6c7-f83189858b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:b9:99:cf:40:34:b4:3a:a0:a8:8e:ef:62:1a:3e:a4:f2:54:
         34:34:b3:29:86:55:07:01:08:fe:2f:3e:97:3e:5f:2d:da:59:
         f6:34:32:d5:f5:94:0a:d8:c4:37:84:96:7d:a9:28:8e:a7:c4:
         b9:5c:6a:ef:76:3e:52:b8:4e:17:72:fe:d0:9f:c5:06:f2:d5:
         3f:2e:30:a5:8a:c0:68:ed:50:17:f7:68:5e:a8:bc:b2:ec:bd:
         19:22:f5:53:da:bb:57:b2:4a:35:f1:df:de:9a:18:9f:20:61:
         21:1a:e2:11:9a:b7:0c:0e:57:31:ab:85:b2:1a:c5:e3:f7:52:
         18:7b:a5:f2:7d:ee:34:70:e5:09:02:2b:2b:dd:67:13:fc:f0:
         dd:0b:42:74:ed:3a:5a:68:af:f2:23:1c:3b:cd:5d:2d:7e:5b:
         9a:80:9f:85:9c:2f:b7:71:bb:9b:c4:64:c6:28:90:64:c6:4b:
         3e:99:9d:ca:11:b0:30:df:86:18:c5:fa:1c:05:92:d9:ba:1e:
         d3:02:43:ef:59:63:88:35:02:5e:36:7a:7a:b1:eb:74:0a:72:
         3a:16:98:d2:bd:23:3d:14:2e:33:6a:8a:d7:ae:f5:7a:1f:08:
         e7:3a:f9:6c:10:85:9f:71:8a:9a:e0:13:d4:3d:ee:21:cf:d5:
         8c:c0:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:34:09 2026 by rpki-client