Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a1552dad-7146-3f7b-b166-5796e1c8f068.roa
File:                     a1552dad-7146-3f7b-b166-5796e1c8f068.roa (raw, json)
Hash identifier:          M7sDpSAa8EehczYBzj1U9JbbKTqW9v9U1PjcxARxxMw=
Subject key identifier:   61:98:0E:C3:BC:D5:E0:4B:44:1B:B4:72:A2:3E:A1:8F:DB:7C:93:ED
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F5A32FEF637B1FDD9AFFE4FA0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a1552dad-7146-3f7b-b166-5796e1c8f068.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     397630
IP address blocks:        130.254.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:fe:f6:37:b1:fd:d9:af:fe:4f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=510a14a6-bdfd-4f17-a641-f806f11e4b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:3b:09:f2:1d:fb:b6:77:0f:31:e1:5a:2e:
                    7c:84:64:16:5b:32:2b:50:55:81:44:18:98:9f:bd:
                    91:9d:ef:a7:b0:97:da:d9:3d:8e:0c:9f:de:9d:96:
                    95:fc:84:32:99:e4:1e:4b:b1:cc:32:c2:db:da:2e:
                    dd:b6:8d:81:81:d6:8a:a3:a2:8c:a9:d6:4b:75:92:
                    fb:3e:8e:69:e1:7e:81:77:c2:9a:ce:96:67:14:74:
                    53:94:f0:a0:d4:df:3a:92:56:e4:f9:2b:59:eb:95:
                    13:98:dd:a7:70:b0:15:e4:49:8c:fe:06:29:da:f2:
                    91:a4:d4:9c:52:39:6e:41:92:db:97:b8:bf:47:30:
                    48:dd:bb:bc:40:29:56:7d:70:a1:74:5d:85:d9:75:
                    7c:f9:5e:b1:9e:5a:ae:72:bf:ec:fc:c6:eb:dd:3b:
                    13:a0:c5:43:9e:4b:d8:d2:6c:a2:91:de:9b:77:2c:
                    b1:00:e2:38:ef:01:74:84:fe:82:64:37:15:45:82:
                    fc:38:57:f0:85:90:e2:36:87:8b:35:1d:ad:8b:71:
                    2f:0e:fb:72:54:29:4e:b6:e5:d2:e3:67:d4:65:aa:
                    cd:e5:1a:66:6a:f4:84:25:e4:99:39:28:00:98:dc:
                    d2:e0:65:1e:12:4f:bd:3b:8e:90:8b:62:7b:45:d1:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:98:0E:C3:BC:D5:E0:4B:44:1B:B4:72:A2:3E:A1:8F:DB:7C:93:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a1552dad-7146-3f7b-b166-5796e1c8f068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:de:53:23:b3:97:07:35:8d:73:f4:ec:8a:fe:5c:37:6c:
         0a:05:eb:ef:7b:c3:0d:f8:3c:ac:c1:2f:7b:bf:b9:28:68:5a:
         64:03:03:43:10:d4:85:e3:01:41:f6:f1:b2:82:c4:59:20:ed:
         05:8c:0a:75:a6:06:13:c2:11:f0:74:a7:9d:38:cc:51:7c:55:
         25:47:c0:aa:24:65:c4:47:98:46:e6:4c:0f:00:7b:a1:70:82:
         56:a1:23:89:99:96:c3:ea:0e:9d:c0:74:12:95:34:53:82:07:
         fc:5c:d1:8e:07:70:f7:8d:81:7b:fb:74:0a:48:c7:7f:ed:c2:
         09:33:ad:61:9d:33:54:9c:36:a7:7d:7e:ea:fe:0d:70:8b:2f:
         6d:bc:d6:a8:8c:a9:1a:59:36:2b:b3:8a:b8:a6:7e:25:64:cb:
         f9:36:63:ce:66:1f:8f:e4:75:ac:66:d3:1f:be:f1:ac:8b:8f:
         9f:ad:de:18:82:7b:1a:47:12:8b:b7:79:ef:fa:d9:31:17:f2:
         0d:78:f7:9b:7c:90:ae:45:bd:cb:21:76:52:50:28:0a:b1:b9:
         ca:e8:00:d2:bd:9e:c2:c4:16:ea:a5:8b:ce:ac:cb:90:30:de:
         d0:f0:52:0c:0f:ad:2f:e6:93:63:be:c6:8f:bc:7f:f3:2a:5d:
         4d:10:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:13:29 2026 by rpki-client