Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f837fe9-50be-3106-a11b-4e7940a01172.roa
File:                     1f837fe9-50be-3106-a11b-4e7940a01172.roa (raw, json)
Hash identifier:          GgiYt6Tt+lR7H+pRNt919lNXGR7VW8ba4tAeOPyIizY=
Subject key identifier:   1E:90:C4:CF:55:EB:AE:C4:83:86:8F:46:11:7A:ED:FF:E2:48:2B:13
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B047C155703B2BD24ADD7AD00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f837fe9-50be-3106-a11b-4e7940a01172.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     64267
IP address blocks:        130.254.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:15:57:03:b2:bd:24:ad:d7:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=2b6533bb-a705-4a4d-bc57-6a39419d3c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:d7:74:ef:03:cb:01:c3:8d:54:fb:49:f0:
                    b6:6e:dc:b9:bc:75:58:53:af:0b:d2:c5:1f:7c:8d:
                    2d:ef:1f:c7:54:23:28:f2:5b:75:38:f5:d5:25:43:
                    67:54:09:fb:1b:4d:4d:57:34:68:91:24:07:60:9e:
                    45:2a:af:37:15:55:16:56:21:fb:19:2c:b8:09:85:
                    2d:0b:24:f3:02:2a:89:35:2d:a0:9e:bd:c3:88:d0:
                    0a:36:20:41:7c:25:c5:0a:8c:6c:cf:e0:cd:50:a1:
                    59:34:b1:76:71:49:13:40:55:37:96:60:b7:01:0d:
                    ae:30:84:e7:50:37:3d:47:2a:33:0f:53:cd:da:df:
                    f5:bf:49:7f:7f:2b:89:ff:5d:4e:cf:9c:c3:0d:47:
                    ff:ed:22:e3:09:31:c7:a8:e3:c3:66:a4:b0:b4:03:
                    b4:df:7b:47:3a:7e:8d:75:e5:3f:d3:40:31:68:7f:
                    70:fe:2f:04:1c:0b:41:0e:86:ba:33:ed:5c:79:6c:
                    bb:38:f5:f1:c2:1d:90:95:26:db:13:08:4e:38:1b:
                    7f:fd:6b:7e:71:c7:e1:fe:58:b3:9c:bf:ca:7e:3c:
                    e3:b2:6f:e4:5c:55:bf:92:33:6d:3e:7b:e9:a4:7a:
                    2b:5f:4f:26:2a:9f:7f:55:b6:bd:18:02:74:0d:dc:
                    91:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:90:C4:CF:55:EB:AE:C4:83:86:8F:46:11:7A:ED:FF:E2:48:2B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f837fe9-50be-3106-a11b-4e7940a01172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:cb:26:87:94:cb:df:b3:2f:b8:2c:20:06:f0:23:fe:e8:18:
         7d:80:da:f3:40:a7:30:ec:9b:30:3f:5b:ec:00:41:43:33:e7:
         81:e8:1e:ed:9a:8d:39:0f:70:14:70:db:26:5b:1e:d1:1f:a1:
         06:26:95:bf:eb:dc:a7:c3:21:b9:11:13:7a:56:11:ed:e3:7f:
         89:e4:a9:6e:d8:45:64:b4:ad:d6:1e:07:a9:a0:a2:98:d5:bc:
         55:55:31:7d:de:31:00:df:04:a2:53:8b:5c:bf:30:ae:1a:00:
         e3:de:60:3f:e4:9f:77:8c:20:0e:d6:15:b3:ce:8c:e0:fb:b5:
         05:b8:1a:83:46:e2:3d:9a:1b:37:99:ea:27:2b:8c:b4:d3:45:
         0c:5b:bf:a5:32:25:b7:08:a3:33:10:be:cd:7d:f9:9e:8a:b8:
         a5:a4:8c:60:aa:bb:1c:23:3b:22:70:84:b0:3b:d8:20:40:87:
         50:ca:96:74:8d:8e:a1:a2:7f:45:3b:80:56:17:84:71:6c:68:
         a8:d9:d3:d8:f3:ed:23:7a:bd:2c:c1:93:df:37:b4:4c:f0:75:
         8f:a5:97:a6:0c:6a:0c:31:0a:b2:04:10:25:3f:7a:55:e4:30:
         39:a0:d0:05:3b:be:c8:51:e6:da:71:bf:d9:b8:9c:f9:07:48:
         fa:62:8b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:52 2025 by rpki-client