Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dfa57c91-7ce1-3b06-98c7-25185fed3525.roa
File:                     dfa57c91-7ce1-3b06-98c7-25185fed3525.roa (raw, json)
Hash identifier:          LVFuhRPAFDZrWO0BVRLGZHqnnMDiTkwCOdF28qvFsFc=
Subject key identifier:   01:39:2C:6B:B2:52:28:ED:F5:CD:31:43:A8:97:D7:48:E3:BE:8A:F2
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FE5FFD42F6758A7981500
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dfa57c91-7ce1-3b06-98c7-25185fed3525.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        199.250.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:e5:ff:d4:2f:67:58:a7:98:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=1af88d4e-b369-4de7-8f99-bb7beb10d492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:80:f4:fe:ac:50:1c:18:07:c1:bb:34:74:
                    c6:ac:21:40:2d:a7:3f:4c:74:0f:3a:30:8d:d7:a8:
                    33:bb:dc:28:ac:e7:a0:8b:02:e2:de:c7:49:62:0e:
                    06:0e:af:0a:83:53:aa:5d:fd:5b:b4:ef:72:22:15:
                    b2:52:46:81:4f:2f:18:dc:52:49:24:4b:08:c2:66:
                    e1:2e:bb:d8:e7:57:07:2f:48:51:df:6b:f2:3e:4a:
                    b5:f9:9b:46:5f:ed:da:ed:b2:f8:24:a9:84:46:45:
                    82:8a:d9:d7:56:63:ad:3e:6d:e6:1f:79:df:d2:d5:
                    8d:a5:4c:21:3d:0e:8f:8a:6a:4d:c7:8b:92:da:a6:
                    75:97:00:75:cd:6b:a8:d6:49:b6:35:0f:70:c4:a5:
                    68:ee:61:1b:df:03:77:34:d6:5e:e9:4f:f7:33:2b:
                    f7:b3:55:4e:d1:ae:fb:e5:b2:f2:9c:b7:e9:6f:fb:
                    8e:af:21:d6:74:67:a3:63:e0:83:20:a7:e1:66:b8:
                    e3:f6:98:52:64:7c:e5:e4:7f:14:c2:38:0b:a9:e3:
                    7f:ca:77:41:aa:94:f1:23:a1:57:3c:cb:0e:65:27:
                    40:88:2c:41:7b:63:51:f3:37:4a:5f:06:44:6c:9f:
                    60:fe:ee:fc:30:4f:5d:ec:c2:db:22:fb:6f:f3:68:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:39:2C:6B:B2:52:28:ED:F5:CD:31:43:A8:97:D7:48:E3:BE:8A:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dfa57c91-7ce1-3b06-98c7-25185fed3525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:74:e8:4c:35:cb:7e:66:88:30:6b:6f:03:8c:2c:fe:1c:02:
         b4:a4:ca:b6:72:b9:24:c6:d6:a9:4c:0c:ad:36:c0:70:26:1c:
         50:47:02:48:cf:99:b9:71:00:80:83:f7:4d:0e:52:6a:44:d4:
         73:52:08:3d:27:1e:8e:57:dd:aa:7e:49:85:e5:a7:81:7a:d5:
         ae:51:54:99:f3:79:fa:d2:5c:ae:3e:d5:f3:d8:a8:ce:57:bb:
         cf:d9:35:79:41:88:67:41:b5:f1:08:50:91:8d:56:0f:d7:3c:
         b1:7a:a9:67:af:45:27:22:1d:67:71:93:dd:84:fa:27:a0:95:
         0c:a1:7b:ba:56:f3:b0:05:0a:d6:1b:9e:4c:7b:41:3b:7f:a4:
         0a:49:6a:94:d6:58:a4:de:4a:b0:89:4b:62:03:57:9f:13:21:
         3d:b5:b6:20:df:dc:96:3a:60:71:c1:e0:64:3e:dd:c7:ac:43:
         f8:ca:32:25:15:d7:b5:60:8d:41:5f:8a:ee:98:5d:87:a3:8a:
         59:c2:ca:e7:b1:3d:7a:7b:07:58:ed:10:a9:d3:7a:04:88:e6:
         a6:50:87:51:08:be:4c:48:ed:96:e7:31:e9:21:c7:9c:8f:11:
         e2:2c:ee:e5:c3:3f:21:e5:8a:23:ae:45:22:65:9a:be:36:6e:
         cc:f4:20:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:54:49 2026 by rpki-client