Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c28eda13-7820-33cb-93bd-31999f58a3ac.roa
File:                     c28eda13-7820-33cb-93bd-31999f58a3ac.roa (raw, json)
Hash identifier:          Pe9x94AatZ3rKH1gpn/BzZ5n6UFbS4cJI3pmBc3aV3A=
Subject key identifier:   37:2D:3D:CB:B9:2B:C9:BB:5B:3E:63:5C:F1:A7:76:7D:99:CF:FD:86
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F4974328F020478E55664E800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c28eda13-7820-33cb-93bd-31999f58a3ac.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        207.254.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:32:8f:02:04:78:e5:56:64:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=31e945b5-1be5-4459-aacd-15a681c6d0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:95:ad:1e:28:74:97:a1:63:ec:9d:ef:bf:b4:
                    19:51:07:4e:e8:a4:bb:4c:e5:9a:73:44:59:b7:6d:
                    a6:b8:89:d4:27:58:41:f9:4a:28:6c:9a:0f:ff:ca:
                    53:0a:7b:8c:2c:e7:cd:bf:ae:20:da:54:da:54:e6:
                    27:2c:e2:2d:f2:23:78:b1:55:ac:8a:b4:c5:d0:40:
                    30:0d:f9:90:4e:5f:72:00:6d:f9:24:3d:95:d6:aa:
                    cf:3e:3e:a3:1a:55:6c:dd:79:20:1c:d6:22:87:d9:
                    fc:c9:f3:2b:b9:70:47:af:42:0d:d2:d0:aa:2c:03:
                    3c:b8:40:16:fe:b9:7f:ce:ca:f3:10:2f:10:69:9a:
                    f7:37:92:e5:ab:93:5e:98:10:74:be:7e:b2:ce:19:
                    da:70:05:16:07:3d:ea:7d:59:2c:ed:fd:a7:d4:3b:
                    7f:0c:f1:e4:98:37:af:97:5a:40:80:e4:b0:15:5e:
                    79:17:6b:3d:c4:85:26:87:4e:30:23:8c:32:d5:d5:
                    33:3c:62:b4:d3:4c:27:6c:10:91:93:4d:7f:3a:48:
                    ac:a4:a0:7c:23:91:33:6e:8a:a3:66:b4:36:b6:99:
                    1e:2a:8c:3b:97:b3:a1:c3:0d:27:24:6d:66:bc:b4:
                    db:5c:30:fd:9f:dd:a7:b4:44:84:94:8e:63:dd:80:
                    f9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2D:3D:CB:B9:2B:C9:BB:5B:3E:63:5C:F1:A7:76:7D:99:CF:FD:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c28eda13-7820-33cb-93bd-31999f58a3ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.254.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:da:24:43:f9:b3:a8:53:d6:af:6f:f6:24:ae:55:f6:79:1c:
         bf:2b:13:56:df:fd:f5:81:1e:2a:f2:ac:bc:8f:55:75:4a:9a:
         9f:85:c2:0b:52:5b:c6:fc:ea:d4:27:0e:ac:23:94:a4:5d:92:
         f7:b9:4d:72:a8:37:53:ba:bf:8b:9f:8d:78:61:fb:67:17:15:
         d4:35:3a:4b:c6:e6:72:2a:34:c8:df:ac:c2:28:7d:e8:43:c3:
         8b:2e:af:1e:d7:02:57:0b:99:05:b5:9d:84:eb:f3:17:8a:2f:
         7c:ee:29:b8:87:38:2e:bb:f7:03:1b:55:de:14:68:87:15:5d:
         df:61:a0:fe:77:93:fe:44:2a:70:24:d2:f6:d4:cf:c2:a3:17:
         8b:4d:63:e9:47:f9:38:ae:ae:f1:d3:c3:92:92:ca:c1:0a:9b:
         fb:d8:12:05:b4:a6:d4:fb:36:9b:d5:64:b8:8b:e4:99:24:67:
         3a:ad:44:9a:00:8d:f8:83:58:0d:28:45:f5:f8:b4:99:e2:68:
         73:7c:5c:b3:15:fe:b7:bc:49:a8:9d:f5:8b:56:4a:2d:47:4b:
         96:25:05:ad:92:60:b5:40:fc:df:af:cb:bf:75:13:24:66:8a:
         21:76:83:78:34:7b:99:12:e9:ef:a4:53:5b:57:c4:75:5c:17:
         20:54:01:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:14:18 2026 by rpki-client