Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9531fbe2-a1ec-329a-868e-3b3da5126459.roa
File:                     9531fbe2-a1ec-329a-868e-3b3da5126459.roa (raw, json)
Hash identifier:          no2dMCCdhWo3v2nHIuasWhxw8Jp7Nksh7ybHnxdyZ8Y=
Subject key identifier:   80:6A:DF:EE:0D:59:08:64:0E:82:37:16:1D:7A:46:A5:10:AA:7C:8E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DBA3B128D2FFC16C59CFB3380
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9531fbe2-a1ec-329a-868e-3b3da5126459.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     22516
IP address blocks:        130.254.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:12:8d:2f:fc:16:c5:9c:fb:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=c1198b84-6ec9-413f-95a8-9382cced5aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:ff:71:5e:80:da:c0:0e:72:22:9d:bf:7d:
                    2e:c6:b4:fa:66:fd:6f:73:ae:43:c6:1b:c1:82:80:
                    65:45:5d:6f:23:6d:01:6d:b6:a3:b0:59:22:47:f7:
                    db:d9:b8:ab:6e:83:e3:1a:e1:aa:bb:20:8b:57:12:
                    df:4e:48:8a:e1:90:7b:e0:f9:28:5a:c5:9b:93:f1:
                    40:d3:72:96:e1:2d:9f:a2:31:41:3e:d9:6a:b1:72:
                    42:5c:15:a8:85:76:e4:61:2e:f2:e1:1d:d2:56:b4:
                    98:2b:0a:d7:18:83:53:52:28:59:3f:5f:87:be:b9:
                    8d:54:95:a5:3d:7d:f0:eb:3b:d5:f4:a2:78:d3:bd:
                    79:8a:bd:b1:48:9b:24:77:19:f5:7a:16:b0:cb:68:
                    b4:04:17:8e:2a:a3:23:dc:8d:58:c9:6e:dd:e0:42:
                    b0:14:68:e7:7a:ba:77:7c:ea:22:cd:5b:02:85:81:
                    30:d7:fc:7c:ee:58:1b:94:ba:78:46:39:c5:da:fc:
                    33:54:9d:0c:6a:df:dd:dd:02:19:dc:48:64:97:d2:
                    1e:07:4d:c2:ac:a3:ab:8e:85:d7:34:58:b9:2d:d4:
                    3a:cd:25:4d:13:9d:33:fa:eb:66:99:75:5d:c9:df:
                    41:e1:b3:cc:5b:1a:2f:85:a8:e4:d1:52:ce:60:33:
                    c4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6A:DF:EE:0D:59:08:64:0E:82:37:16:1D:7A:46:A5:10:AA:7C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9531fbe2-a1ec-329a-868e-3b3da5126459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:25:08:1f:94:5b:1c:ff:f9:78:73:d7:54:9e:4d:17:ec:da:
         ea:e6:5f:e1:91:b0:70:ac:fe:61:d2:50:00:74:31:13:c6:1d:
         ec:5c:b4:c8:b2:19:a9:77:60:05:8a:ff:ea:b1:83:53:5e:ab:
         58:f6:02:f5:b0:cc:2d:7a:db:d2:15:b1:ec:3c:c5:36:56:58:
         c1:bc:05:ba:bd:3c:11:08:7d:9c:17:b8:55:68:b5:32:56:a7:
         55:5d:f3:3c:34:12:8b:4b:fa:4b:4d:8e:d1:a4:cf:a9:ba:7f:
         46:8e:36:fa:a7:8a:25:b6:11:07:56:13:37:e6:c0:55:81:c7:
         95:c4:8a:3c:bf:b3:26:ae:d1:e4:32:79:cb:a0:15:ce:f0:6e:
         60:cb:16:e7:e3:48:2c:e8:78:33:b9:df:45:25:f6:75:e6:bf:
         52:ea:60:97:7b:a9:f4:9a:a0:e3:0c:12:16:c4:27:17:67:bf:
         56:03:d3:0a:e6:6c:8e:19:bb:6c:45:b7:f2:58:61:3a:f8:d5:
         82:f1:d1:bd:9a:97:6b:d6:2e:4f:2b:36:a4:e4:a4:c3:a6:37:
         15:07:42:ba:fc:74:23:f7:c4:a4:a8:6b:cd:6a:79:b0:51:f8:
         5d:07:1f:fa:2d:1f:16:48:e0:f0:96:17:b5:7c:67:81:41:1e:
         a6:c2:67:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:43 2026 by rpki-client