Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c8f96a79-d6e6-3b64-83b4-7b754c62ee26.roa
File:                     c8f96a79-d6e6-3b64-83b4-7b754c62ee26.roa (raw, json)
Hash identifier:          Zb0WsusxM1ltxBBHfqOsgZYXWit5pWfM29QaoLiALgM=
Subject key identifier:   6C:25:69:69:D3:16:88:48:77:F5:2F:9D:57:23:52:8E:DC:C0:16:35
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B1806F0D8188D946810379BF0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c8f96a79-d6e6-3b64-83b4-7b754c62ee26.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     7029
IP address blocks:        130.254.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:f0:d8:18:8d:94:68:10:37:9b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=0a7ee060-c93e-4d0a-bc45-809811cefff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d9:61:af:bd:c8:95:53:4f:65:8c:fb:1a:6a:
                    00:92:88:c2:ba:42:e7:61:6c:49:74:35:58:ad:ff:
                    07:33:c5:ad:f7:1e:80:6c:b6:f2:5a:2f:12:10:17:
                    03:bd:52:b8:05:e5:6b:81:2e:30:a2:89:bc:ce:89:
                    e2:43:de:20:29:76:72:26:3e:7e:a5:32:46:74:50:
                    0c:0c:93:9f:cf:4f:9d:82:b9:8b:2b:09:6e:8a:5b:
                    71:d7:95:8d:ec:e6:2e:15:2c:60:cb:45:55:1a:d0:
                    9e:de:bd:3e:29:69:de:2b:11:12:a9:f7:90:f3:9c:
                    56:05:91:02:59:71:ee:8f:ca:b8:08:df:16:23:ce:
                    d3:53:24:c9:a0:7b:f1:07:b4:cd:b6:f4:52:14:c1:
                    72:24:e9:2c:9e:be:cc:ba:84:2d:c2:73:2a:5c:e6:
                    01:35:c6:9a:47:4f:67:6e:e1:0b:86:7c:a7:ed:b3:
                    1e:e2:a8:ba:1a:f6:19:04:9a:96:79:94:e5:cf:16:
                    84:3f:c1:83:7a:5a:ae:0c:3c:e9:cd:8c:9c:61:24:
                    2f:c8:34:04:a7:ee:bc:92:7b:43:6f:46:53:c5:18:
                    f5:90:9f:80:7d:a2:92:28:9c:00:e2:5c:fa:f4:3c:
                    7f:a1:01:da:79:22:32:1d:b0:7e:cf:15:5d:99:19:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:25:69:69:D3:16:88:48:77:F5:2F:9D:57:23:52:8E:DC:C0:16:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c8f96a79-d6e6-3b64-83b4-7b754c62ee26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d0:01:71:c8:b4:5e:c6:e7:51:9e:87:1c:26:d6:7c:22:f4:
         a5:4a:67:41:fc:74:0a:92:75:68:4b:f4:df:d8:1b:9b:bd:8c:
         2c:74:f1:5f:6b:f8:8d:29:a4:5f:6c:a9:18:d2:79:8b:31:e0:
         38:df:44:8a:9f:7a:93:26:e4:ed:5c:8f:02:4a:79:fe:65:66:
         44:f6:20:44:2b:aa:16:9a:54:3d:44:ec:8c:c4:c2:02:3d:74:
         7a:b8:fc:24:e1:dd:84:8a:00:68:9d:00:49:fb:e5:77:9f:d5:
         58:db:56:2e:e7:37:ca:12:6c:7b:c9:66:a9:27:84:ae:08:c6:
         fe:eb:c7:8e:7b:ec:0c:40:f5:e8:c6:23:58:1d:00:b4:4c:68:
         ad:3f:83:14:bf:3e:09:f4:b5:14:47:ac:a8:ab:4d:4e:56:62:
         f5:96:56:6c:e3:bb:1e:77:e9:77:27:b1:2d:60:94:41:4f:6c:
         7c:2f:8d:47:a9:18:12:57:14:a1:8b:35:91:52:d5:16:56:42:
         6c:d6:31:cc:c0:b7:77:66:f6:7a:12:ed:aa:c1:5b:c3:09:35:
         7d:06:40:ca:60:1e:5d:39:78:7b:29:24:f8:b1:b5:f8:c9:26:
         30:5f:bd:3f:93:0a:3d:79:74:ed:7b:2d:b3:69:51:bc:00:87:
         3f:a7:af:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:02 2025 by rpki-client