Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/326b7aff-38d9-3854-aba7-7949860f445f.roa
File:                     326b7aff-38d9-3854-aba7-7949860f445f.roa (raw, json)
Hash identifier:          QHixEnGVZOhrAxdwcT55xlXnGT7TNLkPDZmgSuqvNs0=
Subject key identifier:   21:E2:A3:43:E1:34:40:7E:4F:BE:17:37:E2:75:59:C1:8F:F8:41:4F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584FA16339449E8B1578C94F5D00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/326b7aff-38d9-3854-aba7-7949860f445f.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     54252
IP address blocks:        130.254.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:39:44:9e:8b:15:78:c9:4f:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=35132a8a-9f5f-43b2-ad74-255dbfd9bff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:06:a8:9f:48:5e:7f:90:df:11:7e:8c:78:
                    1d:a2:0e:b1:60:9c:fa:c3:a5:f7:d4:c2:67:5b:99:
                    bb:a6:11:8c:43:92:fd:22:15:af:ce:45:c6:ce:e1:
                    21:2a:0e:c1:1a:60:ea:bf:9e:6b:23:20:db:ef:88:
                    87:22:01:59:87:f4:65:e3:39:bb:82:0e:91:19:41:
                    e0:31:04:67:50:1c:5c:a9:0d:e1:99:74:22:ff:79:
                    5a:54:eb:f4:97:38:a8:43:5b:03:fe:38:31:0e:ef:
                    92:fc:fd:6e:96:46:57:f5:86:e3:cb:9f:23:42:45:
                    5c:d1:0e:f2:0a:83:2f:04:43:59:e6:79:2c:47:84:
                    d6:13:01:4b:b6:ba:7b:da:c6:a9:51:31:4a:d3:07:
                    34:a1:94:e1:5c:f6:62:e1:0c:17:f4:8d:59:52:74:
                    0e:d7:9b:d6:f2:71:d9:fa:e0:0d:6f:cb:c0:df:0c:
                    27:fe:11:50:01:35:1a:1b:08:c8:e8:70:21:63:5e:
                    3d:2a:0a:dd:8b:9e:c7:f0:5a:2c:3e:b2:66:dd:31:
                    4a:f2:7d:19:9e:a7:ac:97:39:5a:61:77:9e:16:1d:
                    26:5b:8b:64:27:1d:b4:b5:f4:ea:cb:e2:a3:98:cd:
                    b3:ff:5e:d4:eb:8e:c9:12:95:fe:cc:4e:ba:1b:aa:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E2:A3:43:E1:34:40:7E:4F:BE:17:37:E2:75:59:C1:8F:F8:41:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/326b7aff-38d9-3854-aba7-7949860f445f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:70:65:97:1f:73:56:5f:49:a3:a4:f9:c1:36:b2:ea:99:
         a3:1a:ff:95:d4:34:bf:54:77:11:cf:e3:7a:a3:86:dd:45:87:
         da:66:27:e2:87:cd:96:00:33:6f:13:53:1b:7e:81:0a:14:10:
         f6:55:8a:2f:65:e3:04:23:60:7e:06:98:00:8b:29:51:68:a5:
         5f:14:8c:a6:47:46:53:87:33:34:9c:a0:ae:a2:c1:e8:b8:c8:
         3c:5a:1b:77:77:8f:5a:5e:4f:f2:2c:22:3b:80:e8:4c:63:6e:
         63:c4:98:ab:51:9a:39:2c:0d:66:53:43:61:a0:93:7c:32:29:
         af:88:67:72:74:47:2d:21:57:68:ce:3e:1e:c0:cf:3e:c4:26:
         07:12:40:6f:0d:b6:04:95:d1:25:50:4e:34:6e:9c:9e:d4:98:
         1c:42:93:3b:a7:cc:8f:f9:2d:b7:77:32:08:b2:bd:63:1b:3d:
         0f:2a:0e:94:8b:85:e7:92:ca:d2:db:d4:b2:75:60:fc:e3:b4:
         31:4b:4b:77:11:4b:16:fe:f6:0d:6f:dd:2d:fb:a4:41:41:dc:
         2e:b8:aa:6a:1e:6a:88:af:ea:0c:6a:24:40:fe:53:fd:40:ee:
         b1:b6:f1:16:ed:ce:5c:56:83:cd:4b:ff:4e:0a:ec:23:5f:6f:
         9b:d6:35:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:14:26 2026 by rpki-client