Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa
File:                     1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa (raw, json)
Hash identifier:          VXY4jFrl8tA95RnHvmq6jHf8DhcwULAgq5rE1rJ2eWU=
Subject key identifier:   1B:E9:A0:28:43:34:0F:E8:BC:E3:BA:CB:A7:81:2E:FD:31:79:5D:B2
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F5A3302C57AFFAEA8D6155300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     64267
IP address blocks:        199.34.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:02:c5:7a:ff:ae:a8:d6:15:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=51eba3b1-e10f-4907-97d1-8cab25c5771a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1e:18:ff:85:5b:7c:6c:58:de:4d:e8:f7:11:
                    41:bb:ea:35:0f:a3:b7:b1:95:dd:9c:7c:62:75:3c:
                    c1:cc:51:c9:4d:70:09:95:d1:ba:d9:6e:ee:25:b3:
                    f6:fc:8b:64:3f:bd:36:f0:29:89:da:3f:f7:fd:d1:
                    7d:a5:3c:bf:6e:4f:60:53:36:6e:ed:d0:a8:82:6b:
                    d4:c8:04:61:48:07:58:64:22:80:60:b1:0a:ea:1f:
                    2a:a2:4a:04:18:9e:46:c2:a4:5c:62:35:39:f0:31:
                    cc:a0:3a:fd:5d:ff:c4:aa:ed:1a:85:f3:1d:09:ef:
                    18:e6:45:e0:de:f1:17:a8:39:e9:e9:71:2c:a8:84:
                    7e:16:60:9d:a5:81:9c:13:f3:01:00:21:13:46:64:
                    be:e2:7d:8b:8b:ea:13:02:05:9d:83:a8:dc:17:69:
                    ed:94:c7:e4:6b:bb:4a:1c:45:85:63:7e:fb:b0:a0:
                    1b:0a:2b:1f:d6:d7:0b:ac:8c:35:bb:65:d2:c9:d3:
                    37:ed:a9:78:2a:95:d0:be:5a:83:3e:5c:fd:68:62:
                    ec:6f:dc:d7:dc:02:15:19:d3:26:a6:db:1e:1c:76:
                    5a:38:1f:78:04:89:97:9a:25:f6:1a:a9:db:72:3f:
                    88:06:95:70:8b:f3:2d:15:3a:49:64:4a:01:b5:ec:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E9:A0:28:43:34:0F:E8:BC:E3:BA:CB:A7:81:2E:FD:31:79:5D:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:16:47:89:14:c8:54:f4:68:cf:b5:2b:46:3b:fa:3b:bf:c7:
         e6:05:18:07:e9:96:db:1b:84:56:4e:34:46:78:6f:6e:cc:7f:
         be:64:ba:1e:b8:de:1d:9b:18:2a:ca:1a:89:41:21:37:78:ef:
         66:86:09:2b:48:8d:1f:1e:e8:d5:46:ff:74:5d:f6:c6:88:18:
         ce:5d:81:76:b9:e0:78:b1:21:46:5b:04:f5:ec:b3:18:4a:b5:
         58:5a:4a:4d:4d:64:de:17:f7:90:de:8f:cb:76:1d:f6:08:24:
         fa:8e:1e:5b:e4:43:0f:95:ed:64:f8:5a:f4:dc:9e:92:65:7f:
         b3:dc:05:c4:64:5d:93:8d:ea:87:f7:4d:fe:fa:99:da:26:ce:
         5d:1a:0e:77:4f:00:cd:5d:d9:3f:a3:a7:71:9d:f8:1b:e8:cd:
         d7:09:da:e8:f4:c0:73:ca:b9:fe:43:e1:31:c9:98:7b:00:6c:
         ed:9e:8e:67:4b:eb:f8:bd:7f:f4:e2:7c:c5:f9:10:8d:b1:9e:
         a3:86:6a:49:e7:9d:7a:4b:b9:48:09:80:7b:1b:22:ca:09:ce:
         14:12:5e:b0:f6:8a:26:43:97:50:74:5c:6a:7b:3e:5c:d2:c3:
         55:d7:86:f9:60:bc:65:ec:58:28:5c:24:2d:5c:72:fe:2c:55:
         15:39:4c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:39:29 2026 by rpki-client