Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dde0c73c-5504-3f6b-a4a6-4ab416b79162.roa
File:                     dde0c73c-5504-3f6b-a4a6-4ab416b79162.roa (raw, json)
Hash identifier:          z+sJObPBSf4wH5Y/g5KnQe/d/GHTKaW4SRvh5aH6hiw=
Subject key identifier:   D8:2D:19:9E:CD:05:6D:15:C5:3F:41:66:AC:1C:D7:A4:2B:51:2F:7E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B28C6F1F1C435D00873E66300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dde0c73c-5504-3f6b-a4a6-4ab416b79162.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     20001
IP address blocks:        130.254.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:f1:f1:c4:35:d0:08:73:e6:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=abdab8c3-1bbe-42ab-b70f-360ca98ecf78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:28:a3:b6:72:78:ec:2a:34:63:e9:ac:05:
                    2a:bc:8b:bf:ff:d9:e4:bd:c6:6b:01:68:8e:dd:1f:
                    38:e3:62:54:4b:72:e6:5b:bd:9f:69:c3:72:d0:8c:
                    a0:ed:fe:c2:98:91:f3:83:6f:ea:5e:c0:76:6c:96:
                    ee:52:7a:40:1c:50:d9:25:09:24:78:09:68:e7:61:
                    d8:f0:8e:29:e8:0a:9f:b9:90:ff:6f:9c:e7:a4:aa:
                    4f:07:df:0a:ff:17:3f:2b:50:b8:0e:13:60:41:2a:
                    ca:82:e7:f9:53:24:48:4b:b6:85:cd:6f:3d:c3:0f:
                    4c:f4:d4:a3:d1:c3:5d:9f:eb:51:02:cb:03:68:14:
                    e6:a7:dd:ca:5c:3d:c9:7d:c1:ea:f1:8b:fa:1e:ea:
                    45:90:1b:d4:e4:65:f8:44:54:dd:62:ac:1c:e3:07:
                    b3:90:2b:87:60:12:68:b5:00:c9:83:de:f8:bc:0c:
                    0d:ec:bd:b9:41:49:10:dd:df:f4:d1:95:6d:7b:8a:
                    e8:88:7e:87:ce:87:ee:ca:71:bc:04:82:31:be:ee:
                    14:fc:ed:eb:3c:10:75:a8:e5:ad:a5:8b:cb:c8:1f:
                    25:7c:7c:62:80:37:33:02:12:55:1c:bc:99:5d:3f:
                    e6:8c:72:ca:04:b8:67:a4:bc:0c:40:49:4a:5c:fa:
                    f9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2D:19:9E:CD:05:6D:15:C5:3F:41:66:AC:1C:D7:A4:2B:51:2F:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dde0c73c-5504-3f6b-a4a6-4ab416b79162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ec:f9:a1:d2:db:2e:bf:8b:51:85:08:60:21:cc:b7:b2:6f:
         28:04:96:b3:dd:90:80:7b:9f:25:2a:76:80:6b:74:26:3b:97:
         92:52:b1:51:e4:b2:41:09:77:a2:6e:5e:d5:28:56:1e:37:48:
         6e:35:a5:09:37:66:30:e6:63:3f:0c:3d:22:6c:5d:f7:47:3f:
         21:96:d1:c9:0f:51:3b:ae:cb:9b:39:93:9b:ce:fd:26:12:47:
         a4:93:f0:0d:b1:73:42:a5:18:82:c6:c0:a7:a8:99:de:2c:3d:
         92:65:e7:a6:ef:b4:92:a0:ce:35:df:7a:24:e5:ec:c1:79:a9:
         38:cf:3f:46:6e:1a:30:d0:bc:4d:5d:bf:dc:2e:29:79:7a:dc:
         8d:a9:2f:d3:db:5f:b4:10:a8:37:8b:11:5f:82:c4:14:0e:ce:
         a9:b0:51:70:6d:bc:dd:f0:43:3f:e1:20:c1:92:bf:62:b4:d7:
         b9:38:36:38:70:49:05:3d:0e:9d:3e:f7:63:31:a9:5e:2c:5f:
         bb:af:45:c2:4f:f5:ae:d2:10:6e:6e:b4:a3:8b:91:46:20:8e:
         a3:f6:76:c4:06:59:b7:b9:d8:31:da:1d:d4:44:2c:bc:fe:5c:
         e2:82:40:85:c9:03:50:cb:d4:99:26:2a:57:a2:50:41:73:ba:
         6a:d3:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:56:30 2025 by rpki-client