Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5a4f281d-171a-3680-9731-5916d55e5c87.roa
File:                     5a4f281d-171a-3680-9731-5916d55e5c87.roa (raw, json)
Hash identifier:          rNa7CCaKqJhkq+A0Vedupkgxj7tDw1kHkVMaaHHmzL8=
Subject key identifier:   EA:B1:6D:38:39:BF:8B:0A:2B:B7:5F:8C:21:26:F8:12:92:CF:B8:B0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EBB11B72A8266EBD3F8E37680
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5a4f281d-171a-3680-9731-5916d55e5c87.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     397630
IP address blocks:        130.254.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b7:2a:82:66:eb:d3:f8:e3:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=ba643eec-fbf4-4a65-8add-905483349159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cb:14:f0:2d:b6:34:fa:c0:6d:2d:f9:a9:fe:
                    c0:18:d5:63:cc:76:48:9a:bf:28:9d:a0:31:fd:45:
                    aa:ac:cc:0c:f7:eb:5b:e0:be:43:c3:60:7c:46:c2:
                    9e:b4:c4:b4:f1:d7:28:00:e5:84:49:e6:21:33:3e:
                    b1:e3:67:1b:94:32:d8:73:41:94:ac:0e:d3:f6:55:
                    fa:58:dc:b4:78:c4:21:87:0d:10:1e:d0:7b:29:94:
                    48:8d:ed:b5:b0:41:b6:99:00:bd:8f:86:b4:d0:46:
                    49:b6:18:d2:7f:d9:6f:12:33:86:4f:93:32:30:ba:
                    53:18:0d:64:e3:91:85:31:50:95:ef:56:32:79:99:
                    54:ff:10:a8:77:b6:99:30:72:46:b4:ff:12:c7:e4:
                    14:ae:ca:85:51:ba:cc:b3:5c:22:39:b5:eb:c4:8d:
                    c8:70:7c:40:88:67:d7:e6:99:63:87:21:e3:0d:3e:
                    d6:9a:24:d2:43:b1:c3:5f:c1:90:ae:47:f4:1b:a3:
                    e6:22:dc:93:ea:58:b8:e7:e7:82:07:6c:19:a2:61:
                    0b:1c:ec:de:c8:61:a7:cc:6f:86:66:04:d1:56:7a:
                    18:5e:78:0e:e1:f2:7c:e7:1b:ba:8e:fc:66:22:c4:
                    f1:3b:73:4c:03:00:76:44:ff:78:f4:60:72:fd:89:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B1:6D:38:39:BF:8B:0A:2B:B7:5F:8C:21:26:F8:12:92:CF:B8:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5a4f281d-171a-3680-9731-5916d55e5c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2b:34:a1:e6:46:d7:34:dd:65:a5:8b:8b:6c:5e:ea:eb:97:
         0d:18:0f:61:d2:25:99:21:9d:57:d1:67:88:c8:47:25:06:79:
         e1:1d:39:f3:f3:91:4f:39:40:53:f1:52:6c:3e:a5:45:9a:3c:
         7c:aa:0a:66:4b:59:d3:d6:a9:7e:75:90:20:6d:22:a5:85:e2:
         d1:b4:27:43:7b:13:df:a0:71:1d:25:de:f0:fe:d2:e9:eb:19:
         42:f0:5d:89:3b:f8:01:6b:d6:0d:87:bf:96:b1:75:05:fa:26:
         99:d6:7d:83:8e:6a:2e:a7:f8:11:f5:d5:0b:36:06:bb:52:d4:
         2d:f3:e9:ef:f3:77:ff:a8:2a:1e:d3:06:7d:e1:d4:10:c6:53:
         a6:c7:25:1d:c1:4d:ef:6d:dc:22:0e:c7:ef:e8:fb:c4:c4:10:
         7a:24:06:f1:e9:c3:27:32:be:d0:4f:69:31:f7:15:a0:f5:2f:
         39:c7:26:d6:6f:db:a6:d8:d6:04:ce:08:6a:4c:cf:fc:0d:57:
         18:a6:36:2c:7b:c1:1b:14:a6:d7:74:34:be:88:35:80:95:5c:
         80:d9:c0:8c:0b:82:8b:ab:62:6d:11:b4:b9:f7:1f:02:9d:86:
         37:9c:ea:f9:80:a1:a6:bb:c6:5b:61:03:b1:39:dd:88:b9:03:
         ec:4a:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:29:32 2026 by rpki-client