Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6ad17c32-a250-366c-aa2a-30c3f8dbd953.roa
File:                     6ad17c32-a250-366c-aa2a-30c3f8dbd953.roa (raw, json)
Hash identifier:          ECUIeXfwtvoYWYP7N4BSxPVKqD84oSVVjMlKb9w4sWM=
Subject key identifier:   76:8E:41:90:4F:4E:0D:19:5A:4F:74:B9:34:3A:5C:6A:EB:9D:B9:C4
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584ADAB540BA23BD9AB016842600
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6ad17c32-a250-366c-aa2a-30c3f8dbd953.roa
Signing time:             Thu 14 Aug 2025 13:52:11 +0000
ROA not before:           Thu 14 Aug 2025 13:52:11 +0000
ROA not after:            Wed 12 Nov 2025 14:52:11 +0000
asID:                     54252
IP address blocks:        130.254.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:b5:40:ba:23:bd:9a:b0:16:84:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 14 13:52:11 2025 GMT
            Not After : Nov 12 14:52:11 2025 GMT
        Subject: CN=4d8f096c-f4b3-4622-a7f1-0b124d3e1ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:ac:67:d0:03:ce:70:8e:17:09:f6:64:fd:
                    93:8a:56:f1:a8:e3:dc:08:f8:6e:83:48:17:c1:a6:
                    ae:53:92:de:bb:15:e8:19:06:51:06:6f:76:20:f8:
                    da:66:a6:61:f2:cd:a8:20:90:8b:8d:25:22:e1:ea:
                    a2:8c:e5:8a:18:95:ec:79:a1:d4:c1:84:c8:10:e0:
                    90:8a:22:be:83:72:79:64:ce:78:04:f9:21:96:fd:
                    77:7e:fe:02:81:ea:1b:1c:6b:de:07:6d:5d:b8:2f:
                    0a:f8:b9:5b:d4:29:fb:17:2e:61:23:b2:fe:97:8d:
                    65:2d:28:5e:d8:d2:26:f3:85:64:66:42:e5:44:d9:
                    97:90:9e:bd:e4:db:d1:c2:fd:6f:50:5f:f6:46:af:
                    51:69:93:ee:6b:b8:2a:63:ea:ed:04:33:57:88:3a:
                    85:dd:79:cd:48:91:54:39:9a:0f:98:da:0a:55:b6:
                    56:ff:87:23:7d:1c:59:83:dc:e7:4a:b3:60:21:1f:
                    53:99:f9:2a:95:1f:0f:63:67:20:76:93:a6:e5:65:
                    9c:94:e1:a8:34:5e:54:43:7b:e8:33:44:f7:61:5e:
                    21:d0:1d:60:a9:ce:39:28:e5:27:d8:62:b1:e0:27:
                    9f:ae:05:1e:3f:f1:fc:da:3b:30:25:f8:17:a3:0c:
                    9c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8E:41:90:4F:4E:0D:19:5A:4F:74:B9:34:3A:5C:6A:EB:9D:B9:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6ad17c32-a250-366c-aa2a-30c3f8dbd953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ab:ee:d1:ac:0e:0e:f4:97:c5:30:e2:10:80:c3:9f:a4:c6:
         89:32:2e:4f:16:a6:e5:67:6b:cd:da:d7:98:70:c1:91:b2:f7:
         74:f3:2e:81:cd:35:c0:28:24:56:d9:c5:89:2b:c9:d8:bd:11:
         de:92:84:3e:28:ee:64:ab:7c:78:fa:b8:31:70:13:f4:ff:91:
         f0:f6:e8:63:9a:db:14:f0:20:f4:4b:23:2d:99:11:0f:b6:21:
         49:00:df:7b:0a:a8:b9:17:48:3f:d6:ac:61:a3:a1:b1:6c:63:
         fb:6b:3d:27:8a:0f:06:16:96:ee:7c:6b:33:07:16:a5:4b:a5:
         15:4b:89:51:6d:74:00:66:d0:b9:f4:39:45:d5:1c:d7:f5:b2:
         00:90:20:ed:7f:4f:11:ac:e5:e6:3e:55:ca:cb:9f:7c:ef:44:
         49:f2:c4:68:d2:88:16:a2:a3:1b:c5:1d:7d:1f:12:03:11:b4:
         d1:9e:35:4b:67:98:bd:ad:bb:13:4e:c9:bc:c7:f0:23:0b:96:
         9f:4d:4e:1b:cb:f1:c8:a7:4d:30:1a:75:32:55:94:c2:47:54:
         74:b1:62:30:de:7d:89:a0:be:0f:7a:ab:20:35:16:38:9b:a7:
         e8:2f:2f:d9:7c:c0:ed:db:99:9f:13:b6:31:2e:7e:1b:e9:46:
         8a:2a:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 21:33:07 2025 by rpki-client