Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9873d002-de27-3a76-9f37-ecb2af66380e.roa
File:                     9873d002-de27-3a76-9f37-ecb2af66380e.roa (raw, json)
Hash identifier:          p7qIy6gSae1JdvZL+I4KpvAEOkpVmp6+t9JABPLM2jg=
Subject key identifier:   F5:78:D7:B7:E2:FE:09:48:71:B7:98:36:2B:7C:D5:6B:5F:B1:FD:D8
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE2AB87791249A88BC2D540
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9873d002-de27-3a76-9f37-ecb2af66380e.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22516
IP address blocks:        130.44.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:ab:87:79:12:49:a8:8b:c2:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=657f4a5a-e258-4924-9889-f1dea3ca8191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:5d:de:0f:bd:33:d6:7a:cc:33:59:c0:82:
                    9b:eb:88:8d:c8:33:a8:00:1e:43:78:e0:38:45:00:
                    21:76:4f:95:24:7c:94:2f:56:c2:02:11:e8:c9:8a:
                    f2:0f:e3:bd:06:10:92:43:17:d5:80:ae:12:44:6d:
                    02:33:a0:ba:cd:ae:5f:c7:2f:7e:e6:ad:c5:5a:b3:
                    69:d0:80:43:8a:7a:0b:24:9d:b8:9d:be:f8:20:23:
                    e9:56:28:16:10:17:a0:e3:6c:7d:ed:5c:a8:3d:1b:
                    63:9d:ff:c2:58:ed:e4:9c:21:72:ad:7f:cd:fb:44:
                    8c:41:51:26:e1:e2:c7:ee:a1:3d:ef:bf:6d:47:ee:
                    c8:22:d9:1a:73:c1:54:02:0c:22:b9:57:b2:a1:c7:
                    fa:de:5e:b9:05:ee:73:e1:9c:22:23:ce:c7:1d:45:
                    2b:56:1b:1f:89:74:01:88:b8:e9:04:48:b3:97:f2:
                    01:24:c1:28:93:18:40:bf:67:03:1c:1a:81:f9:55:
                    e8:73:6f:bc:82:34:be:67:02:95:40:fe:10:2d:04:
                    f1:8f:fe:95:5b:80:01:e4:d8:53:72:4f:7d:a8:b6:
                    dc:9d:a2:36:89:69:3b:e2:f2:61:e9:15:b1:20:bb:
                    22:6b:cd:3d:28:46:43:4e:19:19:70:9b:95:5c:bd:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:78:D7:B7:E2:FE:09:48:71:B7:98:36:2B:7C:D5:6B:5F:B1:FD:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9873d002-de27-3a76-9f37-ecb2af66380e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.44.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:a4:c0:86:65:a8:74:87:e3:52:6b:07:cc:8e:af:a3:f0:1e:
         db:a8:fe:84:30:ab:e5:01:ed:44:35:c2:76:97:7f:60:b1:a8:
         75:09:92:cc:88:45:85:c5:90:e2:64:6a:78:8f:fd:cb:8d:07:
         e5:71:84:b6:27:ff:55:ed:d2:7d:5f:eb:1f:95:eb:5f:03:fd:
         66:6f:09:bc:19:53:da:17:38:67:93:9f:da:fc:5d:d6:f1:67:
         de:78:fe:d1:37:87:51:a3:a9:74:24:ac:e7:0b:c5:70:8e:26:
         51:8c:4d:49:55:8c:64:5f:b8:7f:33:d5:19:33:d4:7c:87:16:
         94:b3:de:ae:2e:5d:1a:7d:02:66:44:6b:da:d0:be:0a:44:8b:
         8f:83:15:8d:fc:10:54:91:19:26:d1:5c:92:fe:ff:75:20:07:
         05:64:ce:0c:b9:f5:5d:1d:17:a3:ff:4a:23:db:a2:cf:6d:8e:
         30:ff:4b:9e:60:8b:af:b0:4f:1a:e9:59:db:8e:95:12:4b:cc:
         31:30:01:74:6e:f5:db:18:7b:d8:58:d7:06:57:01:4e:4d:72:
         55:63:02:b4:f1:66:eb:9e:a7:47:67:16:b5:cb:61:a9:a7:e1:
         80:62:f4:39:4d:39:fb:c7:d8:b1:a5:3e:5e:69:e4:d9:8b:db:
         f6:8c:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:01:33 2026 by rpki-client