Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/541b7d73-a573-3c3b-9da2-c42562ccb770.roa
File:                     541b7d73-a573-3c3b-9da2-c42562ccb770.roa (raw, json)
Hash identifier:          6J2X/sbX8XQbrD5iifmRLhibwM1fteFLy40JxZFmVBo=
Subject key identifier:   9F:27:FB:79:E8:42:70:B8:D6:1E:CE:01:07:1B:97:5F:BB:DE:78:FA
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EBB11B7D7FCAA6680FA1FD300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/541b7d73-a573-3c3b-9da2-c42562ccb770.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     64267
IP address blocks:        168.91.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b7:d7:fc:aa:66:80:fa:1f:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=0215dcdf-7d89-4968-8b27-42d5938c2083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:20:04:78:d3:27:36:25:cd:9d:d0:1d:5c:
                    24:6a:92:ca:07:2c:72:8a:fb:a2:6b:14:b4:93:dd:
                    95:dc:fd:1e:6c:27:63:2f:86:d7:f3:95:00:d7:0c:
                    60:d1:3c:f2:f5:b0:c9:d7:32:00:74:12:1e:43:b6:
                    e3:27:e8:79:12:c8:85:9c:78:76:16:ae:11:ff:a5:
                    81:02:0d:1a:e4:3c:f8:31:c0:c4:3b:dc:88:eb:94:
                    fd:64:37:f4:10:ac:ec:96:a7:92:f5:06:e0:49:df:
                    35:59:07:41:51:27:f2:bc:78:fb:0a:21:90:5c:9a:
                    d0:15:2d:46:11:57:86:88:9e:af:af:fc:4e:a5:18:
                    0b:5f:7f:fd:07:05:90:97:85:1f:1d:b7:0f:9f:05:
                    e5:bf:32:5b:73:73:a3:54:18:e8:ae:0a:a2:70:b9:
                    eb:48:fd:9e:cc:ca:2d:7c:10:c4:ee:b3:03:50:42:
                    33:08:e1:02:03:34:69:77:45:70:d9:80:13:b4:32:
                    4f:b8:d2:71:af:eb:9c:e9:59:41:0f:3c:3a:75:ba:
                    e5:89:2a:ae:a2:4b:45:55:f5:94:fa:70:9b:e4:9b:
                    34:26:2e:f9:1a:63:8b:a9:a1:b0:51:53:96:ff:8f:
                    84:c0:c1:b8:b3:48:7e:ed:dc:f5:7e:cb:e5:04:9a:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:27:FB:79:E8:42:70:B8:D6:1E:CE:01:07:1B:97:5F:BB:DE:78:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/541b7d73-a573-3c3b-9da2-c42562ccb770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:29:5c:57:66:da:a6:c5:e8:53:98:31:46:50:a6:8c:4e:f2:
         23:28:55:32:f7:bb:d9:26:b1:0a:b3:51:22:a9:84:bd:5a:38:
         f7:c5:c9:66:35:55:c8:99:21:27:61:0c:94:f1:62:97:25:22:
         97:30:b1:04:aa:5c:df:4c:dd:d3:b6:fa:9d:47:23:4a:ef:0c:
         d2:5b:31:50:aa:ee:64:44:5e:3f:aa:9a:c9:9b:98:48:5a:0e:
         19:3e:4b:3f:2a:a1:7c:58:a6:a3:3c:a8:da:5a:25:8f:b6:48:
         12:28:f3:d9:97:e2:d4:fb:86:52:3b:87:95:58:8d:c0:c9:a2:
         6f:67:e7:26:85:13:9b:05:38:ab:ef:97:3e:82:f1:71:21:a0:
         4f:38:cb:02:2b:2e:d0:17:0f:86:5f:52:fb:a9:84:34:59:56:
         31:97:c3:99:bb:19:90:97:b8:48:5c:78:2d:a1:2c:f6:ff:d7:
         fe:b4:e2:2f:c3:cb:a0:60:e7:92:2c:ef:c2:9a:a2:75:6b:9f:
         d0:f5:a6:3d:74:b3:76:d1:4e:e9:c7:0f:2f:11:1b:3a:3c:50:
         63:56:c4:f5:25:d5:a2:44:c6:9d:c0:94:c1:b6:6d:35:24:c4:
         40:45:63:2f:cc:e9:1e:9d:58:f9:a9:74:5a:31:61:10:36:91:
         35:ab:3f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:10:28 2026 by rpki-client