Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/181bce1f-c4d2-3ffb-86bf-9796dd8cf4b3.roa
File:                     181bce1f-c4d2-3ffb-86bf-9796dd8cf4b3.roa (raw, json)
Hash identifier:          xh0aIJaawFjd0DUIlSgfDtc4vo4qQkfHvRFIp2qaq4k=
Subject key identifier:   80:CF:8B:ED:D7:9D:16:AC:0D:AB:4A:F4:53:86:70:2D:0C:4A:E4:C9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B047C15907075F3CEBAAEFD40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/181bce1f-c4d2-3ffb-86bf-9796dd8cf4b3.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     64267
IP address blocks:        130.254.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:15:90:70:75:f3:ce:ba:ae:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=5d5989e6-82f9-4bfa-9cf5-b8f3b3cae98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:87:32:c5:5e:7b:4b:e7:5a:e1:54:9c:4d:61:
                    11:91:28:46:ba:86:38:a5:0c:90:03:7d:7a:ac:59:
                    69:f7:ce:15:c5:55:0c:8e:b8:25:d3:d7:e6:9c:a1:
                    5f:d6:82:e5:f2:8f:07:06:3c:18:d7:ff:68:3d:6f:
                    10:e9:59:9c:90:d6:a8:e2:99:83:12:fa:64:fc:df:
                    03:e3:fc:68:03:f2:3a:75:e9:98:39:25:0b:a4:b6:
                    2c:ff:db:6f:16:d6:0d:f8:6a:5a:ff:cc:55:d4:ba:
                    04:f3:a5:96:fd:c4:b5:50:18:26:32:c3:ff:a2:8e:
                    e6:bf:5b:c4:44:7b:dc:86:ed:07:b6:09:83:6f:cd:
                    5a:bd:f6:7c:34:40:b9:15:96:94:4d:c5:26:24:b7:
                    86:a6:e6:57:b7:81:05:67:51:73:93:a8:f9:a7:59:
                    c2:db:1e:1b:2a:9b:80:9c:a1:ea:ac:49:2d:94:fa:
                    47:10:2e:2a:18:53:28:03:60:cf:df:dc:5d:43:4b:
                    ef:d5:c1:b9:b5:24:78:79:5d:70:f7:8b:7c:78:e4:
                    07:de:6b:5a:7a:3e:3f:c5:57:6f:dd:ef:a0:3b:63:
                    98:05:c7:4e:86:63:80:af:d0:d4:31:c0:99:cc:00:
                    0f:dc:a1:0a:22:a0:7c:12:5a:32:db:a0:07:36:4b:
                    8c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CF:8B:ED:D7:9D:16:AC:0D:AB:4A:F4:53:86:70:2D:0C:4A:E4:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/181bce1f-c4d2-3ffb-86bf-9796dd8cf4b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:f1:3b:2b:4e:28:94:03:6e:f6:62:0c:3f:ed:a0:3d:57:47:
         90:e9:ae:20:0f:34:13:50:12:13:93:31:01:e6:cd:19:a2:be:
         5b:d1:44:a3:b0:4d:e8:7c:8e:fd:0a:48:54:43:07:c9:0e:ab:
         8c:b9:1e:68:6d:cc:47:6a:d8:b4:a4:bf:ba:63:56:ca:13:34:
         bb:41:ee:3f:af:d6:06:86:57:57:81:c6:fe:b1:41:8a:cb:15:
         fd:8f:36:a1:39:0b:cb:19:f0:83:91:ce:be:23:38:54:3e:d8:
         dd:f3:7e:61:c0:f9:ea:da:25:d7:94:64:ef:1d:d7:7d:d3:8f:
         2d:f7:60:73:e2:cc:e5:9c:3d:f2:97:6a:f5:40:1b:e7:68:ec:
         dc:4e:2f:c3:00:29:64:85:02:c3:3b:61:30:d1:b5:c0:29:80:
         40:88:1d:bb:f6:6f:e4:5e:f5:7e:8b:36:b8:fe:50:73:23:4c:
         fc:3e:0c:ea:4c:39:b4:09:ab:17:aa:10:e2:e9:b9:e0:49:c2:
         0a:0c:29:e9:2f:ca:a3:bd:a2:78:46:cc:46:e4:f0:b8:95:cc:
         b8:7f:8d:3a:16:c0:c3:27:2c:6b:f5:de:9d:35:53:41:dd:c1:
         dd:50:b2:ef:08:4e:f2:fc:a8:b7:de:ed:1f:b8:0b:d4:7c:02:
         c5:9e:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:07 2025 by rpki-client