Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/326b7aff-38d9-3854-aba7-7949860f445f.roa
File:                     326b7aff-38d9-3854-aba7-7949860f445f.roa (raw, json)
Hash identifier:          pEZwT7s1TnQ7QSWq8TUJCIsQePyyeWDw2eC3ZhirTWw=
Subject key identifier:   8C:B5:26:DB:DD:22:71:FA:5D:A9:28:0C:02:63:D2:04:BA:D3:A6:3D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584ADAB56E707E78FAA3B24AF180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/326b7aff-38d9-3854-aba7-7949860f445f.roa
Signing time:             Thu 14 Aug 2025 13:52:33 +0000
ROA not before:           Thu 14 Aug 2025 13:52:33 +0000
ROA not after:            Wed 12 Nov 2025 14:52:33 +0000
asID:                     54252
IP address blocks:        130.254.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:b5:6e:70:7e:78:fa:a3:b2:4a:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 14 13:52:33 2025 GMT
            Not After : Nov 12 14:52:33 2025 GMT
        Subject: CN=67348bbc-8709-4f98-9a2c-bed0fabe8ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e5:61:02:f6:60:18:76:85:50:12:95:ef:46:
                    71:54:2d:b2:88:63:f3:2c:85:fa:13:29:7b:6c:86:
                    8c:3d:99:f5:0f:36:c4:b3:9e:d7:90:25:90:31:1d:
                    28:0f:e6:e9:d8:ec:ed:72:40:0b:a0:a8:70:6a:d6:
                    a5:f2:9e:88:05:cd:6d:cd:87:fb:d2:3e:04:20:c0:
                    f3:39:3a:32:17:b6:56:d4:70:85:50:50:cb:00:49:
                    b2:d8:dd:31:41:dc:00:4e:58:7c:30:91:f6:80:03:
                    7a:76:3b:7c:4f:9d:01:fe:28:83:06:9d:2d:3b:a1:
                    ae:4a:41:57:fb:cd:8c:df:f6:70:66:31:69:8a:db:
                    a5:23:5a:d4:8d:d9:7a:68:29:0c:e5:00:6d:e7:0d:
                    37:09:63:2a:34:d3:58:17:25:80:cf:1e:1c:d1:64:
                    f8:9a:48:34:b2:46:4c:c1:33:01:e2:5f:f5:c6:03:
                    fa:de:fd:e1:5c:a7:94:24:6d:df:85:95:3d:84:2f:
                    32:1e:c0:95:a8:79:3b:81:05:c6:59:f6:4a:d1:bf:
                    00:90:28:af:0c:0a:b1:d8:1e:bd:eb:6a:fa:49:bb:
                    50:d2:c8:d8:1d:25:75:8e:50:d8:16:ed:cb:25:85:
                    53:3e:50:cb:fa:3b:15:ca:da:db:e2:09:95:c2:d1:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B5:26:DB:DD:22:71:FA:5D:A9:28:0C:02:63:D2:04:BA:D3:A6:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/326b7aff-38d9-3854-aba7-7949860f445f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ab:80:12:17:cc:d1:a2:31:0e:cf:58:28:0b:9c:c2:5b:fb:
         59:46:ae:8d:a5:6f:72:70:c3:9f:97:e4:72:4d:14:cd:a4:bc:
         08:6e:9c:74:95:a9:67:58:09:0a:35:47:8f:b6:cc:00:e8:70:
         a6:06:14:87:a5:99:da:89:a0:af:bb:9f:39:7f:b4:6f:32:7c:
         bd:15:72:8c:e5:ea:ef:b7:cd:2e:1a:3b:93:84:d7:cf:5c:ff:
         0d:81:d0:2b:48:ec:44:ad:c9:8d:2b:d0:5a:ea:d8:fc:39:c9:
         60:70:04:8b:c0:76:5a:98:7b:0c:15:30:64:d4:cc:7e:18:24:
         a2:b3:c1:51:0c:cd:18:11:ec:b6:73:3a:38:a9:53:cb:7d:f1:
         ee:b1:ce:da:64:90:9c:bc:a8:75:88:13:f2:99:84:19:6d:9f:
         0e:51:f6:d7:19:3a:1d:39:99:b2:6f:67:b5:06:05:c7:0d:7e:
         b1:7b:6e:82:41:3d:ba:d8:01:69:fe:da:11:ac:fd:4f:19:6d:
         c2:ad:48:a9:9d:04:fd:97:d1:26:5e:23:e1:c4:1c:0a:17:f7:
         fa:4c:fe:37:44:9e:d2:3b:9b:1f:63:4c:d8:30:1e:0c:b5:69:
         f6:dc:07:e3:a9:d8:21:81:7a:30:aa:60:4d:fd:d2:4c:45:29:
         3e:91:6d:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEratW5wfnj6o7JK8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDgxNDEzNTIzM1oXDTI1MTExMjE0NTIzM1owLzEtMCsGA1UEAxMk
NjczNDhiYmMtODcwOS00Zjk4LTlhMmMtYmVkMGZhYmU4YWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOVhAvZgGHaFUBKV70ZxVC2yiGPzLIX6Eyl7
bIaMPZn1DzbEs57XkCWQMR0oD+bp2OztckALoKhwatal8p6IBc1tzYf70j4EIMDz
OToyF7ZW1HCFUFDLAEmy2N0xQdwATlh8MJH2gAN6djt8T50B/iiDBp0tO6GuSkFX
+82M3/ZwZjFpitulI1rUjdl6aCkM5QBt5w03CWMqNNNYFyWAzx4c0WT4mkg0skZM
wTMB4l/1xgP63v3hXKeUJG3fhZU9hC8yHsCVqHk7gQXGWfZK0b8AkCivDAqx2B69
62r6SbtQ0sjYHSV1jlDYFu3LJYVTPlDL+jsVytrb4gmVwtFsFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIy1JtvdInH6XakoDAJj0gS606Y9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMzI2YjdhZmYtMzhkOS0z
ODU0LWFiYTctNzk0OTg2MGY0NDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKrgBIXzNGiMQ7PWCgLnMJb+1lGro2lb3Jww5+X5HJNFM2kvAhunHSV
qWdYCQo1R4+2zADocKYGFIelmdqJoK+7nzl/tG8yfL0Vcozl6u+3zS4aO5OE189c
/w2B0CtI7EStyY0r0Frq2Pw5yWBwBIvAdlqYewwVMGTUzH4YJKKzwVEMzRgR7LZz
OjipU8t98e6xztpkkJy8qHWIE/KZhBltnw5R9tcZOh05mbJvZ7UGBccNfrF7boJB
PbrYAWn+2hGs/U8ZbcKtSKmdBP2X0SZeI+HEHAoX9/pM/jdEntI7mx9jTNgwHgy1
afbcB+Op2CGBejCqYE390kxFKT6RbSY=
-----END CERTIFICATE-----
Generated at Wed Aug 20 21:36:17 2025 by rpki-client