Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1e67e8ce-1499-3a71-8059-9735cd03342a.roa
File:                     1e67e8ce-1499-3a71-8059-9735cd03342a.roa (raw, json)
Hash identifier:          egGTcAL4gmDGQl2knqEfM24UL3xg/sToqHj7KsPF8fY=
Subject key identifier:   8C:59:36:2B:20:DE:32:1A:DC:24:7C:89:02:21:56:4E:C5:9F:F4:E4
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EFF7773EA604D959B0F036200
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1e67e8ce-1499-3a71-8059-9735cd03342a.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     54252
IP address blocks:        130.254.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:73:ea:60:4d:95:9b:0f:03:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=5d9beb4b-b829-4a04-8198-e143d1471ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:4c:98:97:85:6a:15:48:15:19:84:c8:5e:
                    72:76:94:e5:bb:1a:11:fa:15:0d:05:d3:fc:e5:ca:
                    38:5b:ef:f0:15:e9:9b:94:5d:f4:3f:12:cb:a7:97:
                    89:bb:2e:f2:02:31:69:29:86:8b:64:a2:77:e0:d6:
                    23:8f:90:f2:78:38:ba:b2:2a:c0:f7:26:0d:9b:3d:
                    d4:c3:51:32:bb:c2:34:6a:08:07:e7:82:3c:85:be:
                    31:6e:bd:f1:b2:5a:ab:06:52:54:c6:04:b1:73:ca:
                    a6:62:f7:44:5b:3c:09:ca:b7:4a:63:cb:b3:30:b7:
                    90:6d:b5:38:98:d7:d9:38:4a:3c:d1:ce:40:84:50:
                    e8:e9:0d:bf:20:66:c3:ea:77:54:2e:a6:c4:e3:cd:
                    1f:8e:c3:06:89:bd:45:be:c3:9a:45:f1:54:81:4e:
                    e4:2c:a4:5b:eb:27:eb:eb:04:ef:f1:67:d7:a7:51:
                    97:c6:5d:25:ec:76:9d:55:3e:7e:10:ea:a1:3e:81:
                    f8:f3:e6:7c:d3:46:a3:98:76:6a:68:6b:0e:a6:77:
                    c3:86:53:36:15:df:7d:c4:f8:00:f2:bd:69:eb:fb:
                    6a:09:eb:16:ea:0a:e3:41:31:83:3b:49:90:58:c7:
                    92:31:e3:d0:d9:29:55:e0:05:41:cc:d3:02:e6:4c:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:59:36:2B:20:DE:32:1A:DC:24:7C:89:02:21:56:4E:C5:9F:F4:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1e67e8ce-1499-3a71-8059-9735cd03342a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:fb:32:2a:31:26:a7:94:76:de:bf:4b:c7:a5:4e:c1:b7:2c:
         95:f4:eb:b7:9e:46:a0:92:a5:3f:1d:e7:33:28:de:eb:94:e2:
         6d:9a:28:73:bf:04:26:b8:18:a7:fc:7e:c5:02:00:76:d2:28:
         b4:49:2a:e6:fa:d8:81:52:ce:45:a8:ce:97:4b:4a:89:16:09:
         00:08:4a:36:62:9f:50:0a:3e:71:d0:c6:11:64:55:e1:09:3b:
         b9:53:a5:82:69:c3:6b:a5:5a:23:66:df:74:1b:80:04:66:26:
         86:67:0b:2d:86:21:56:f0:ba:b0:41:d9:9c:4e:a6:47:35:6e:
         12:2d:5f:e0:30:5c:f7:00:3f:23:ab:88:ec:e4:29:98:8b:de:
         c7:80:07:d2:a7:eb:2e:50:45:1e:f3:02:0d:9d:8b:0d:7d:aa:
         9d:c2:22:46:8e:a0:e9:65:b3:5f:80:35:0c:ef:2a:84:5e:1f:
         df:ba:47:44:7e:59:38:ef:e8:7b:3b:ec:68:49:e4:3b:af:25:
         af:84:6a:88:22:55:93:0a:44:2b:e4:2f:78:e4:fe:d2:0c:a7:
         f4:64:65:3a:34:1f:11:ee:9d:31:5e:fe:9e:3b:f9:b3:07:98:
         b0:32:7a:24:56:cc:fe:20:d5:ba:b8:70:99:7d:45:64:bd:d6:
         f1:0d:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 18:54:13 2026 by rpki-client