Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1e67e8ce-1499-3a71-8059-9735cd03342a.roa
File:                     1e67e8ce-1499-3a71-8059-9735cd03342a.roa (raw, json)
Hash identifier:          Jxz1ULrzcMlbjjAG7fdQQYtgqP3DeTdME810IikzdVc=
Subject key identifier:   56:18:B6:32:31:7C:A1:0D:29:76:1B:CC:38:11:AB:88:2D:05:E2:51
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584FA1632658F246621875276A00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1e67e8ce-1499-3a71-8059-9735cd03342a.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     54252
IP address blocks:        130.254.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:26:58:f2:46:62:18:75:27:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=c87e6b5e-6d46-4254-a13b-5bb0f8a95ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:22:22:a5:1a:c7:12:05:25:4a:05:87:e8:e4:
                    3f:b6:d5:f0:71:1c:8f:ba:b8:eb:3e:45:68:30:a0:
                    7d:32:e5:cd:9f:5d:85:a5:a0:4b:81:56:62:2d:c9:
                    c2:2d:33:f3:7c:b0:da:ba:3d:c5:04:f6:dc:96:ff:
                    03:b9:c7:a8:10:11:7e:f3:64:a4:4a:f3:9c:8c:08:
                    39:32:e8:bf:2f:05:5f:25:fd:36:7c:74:17:17:d4:
                    3a:44:79:43:36:dc:85:6b:62:0c:3a:7c:32:0a:36:
                    30:de:22:0e:d3:32:15:45:6b:7c:a6:a3:e7:4b:ac:
                    7f:8c:59:ab:19:fe:69:fa:f0:a2:cf:1d:d6:64:a5:
                    28:d5:43:d7:0f:4b:fa:a3:d1:8a:da:ea:f6:cd:87:
                    a8:99:41:14:31:23:3b:e4:23:24:13:fc:19:ef:ea:
                    6b:eb:fe:2c:2e:95:85:a0:c0:e2:10:bf:97:b1:64:
                    60:71:3d:70:46:f3:59:57:d8:18:50:66:1a:e4:84:
                    cd:47:53:6a:f8:95:4b:6b:d9:27:0c:58:5d:56:43:
                    e4:6b:d1:4c:57:f5:0b:2f:2e:db:26:8e:07:0b:e1:
                    db:5d:27:16:c0:db:e0:bb:67:f7:7a:62:c6:f0:9b:
                    f8:bd:a8:f2:c3:f6:c5:31:21:18:c3:72:64:81:ba:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:18:B6:32:31:7C:A1:0D:29:76:1B:CC:38:11:AB:88:2D:05:E2:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1e67e8ce-1499-3a71-8059-9735cd03342a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:6d:46:9e:1f:c5:43:af:e2:bb:1b:a7:bc:3d:19:f0:f4:45:
         19:6b:e4:2e:54:42:54:95:ed:bd:ea:17:ad:cd:71:3c:f2:6a:
         e5:2f:b6:b8:29:83:fe:4c:69:88:d3:6c:13:d6:ad:d7:4a:52:
         7f:f4:fa:d3:7b:3a:be:7d:90:7e:4c:0f:0b:2e:99:ac:5d:94:
         64:07:1b:f1:44:f5:8a:1b:17:e5:d9:80:7b:f8:9f:15:8d:01:
         59:07:ff:a8:bf:cf:dc:ef:52:8f:74:71:a0:d3:c9:19:42:76:
         1a:d9:12:ea:dc:1f:b1:82:9d:80:57:76:9d:53:92:97:5d:13:
         fe:78:82:1a:6e:36:1b:71:67:f7:b8:d0:88:55:a1:f3:ec:37:
         0a:2e:1e:92:77:57:52:33:b7:7b:f7:17:74:e1:f6:79:11:89:
         6e:fa:63:07:bd:e4:49:e9:10:0e:37:4a:0f:66:4a:2d:87:66:
         53:f5:8d:13:b4:d7:a9:5d:fd:cd:34:48:e0:bc:f6:d6:e8:86:
         33:a5:3d:9e:dc:fc:18:29:59:65:e3:5d:43:69:57:c2:24:3e:
         5a:bb:35:0a:4f:e4:e7:50:cc:41:bb:18:63:bf:4a:d8:ec:6f:
         23:c8:ca:06:88:81:c4:ac:fd:fb:4f:9a:43:f6:88:1f:9e:56:
         90:4a:84:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 18:04:34 2026 by rpki-client