Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a86603d-73f1-31f6-94b4-26851b1018be.roa
File:                     7a86603d-73f1-31f6-94b4-26851b1018be.roa (raw, json)
Hash identifier:          SBnej/WoqjfnqDlERwHOJiQVv7FoknFNpIWio1aS6nw=
Subject key identifier:   7E:DF:87:76:81:30:C2:D1:5D:06:98:00:E5:04:E6:E1:D3:54:17:A9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E5E79F5AE4DFB054E908F7100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a86603d-73f1-31f6-94b4-26851b1018be.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     20001
IP address blocks:        139.180.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:f5:ae:4d:fb:05:4e:90:8f:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=dae542ce-9da2-44b3-951c-cf42c4d03602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ee:d5:33:cb:96:4c:09:b7:57:c9:57:76:08:
                    69:22:7c:ee:6f:4b:86:52:ad:53:a0:31:17:2f:fb:
                    af:a9:58:f0:50:2f:94:09:92:1d:60:dc:df:2f:ef:
                    28:b4:8f:b9:f7:65:a8:78:78:b3:f8:32:02:e7:71:
                    31:40:5a:e1:d4:88:4e:46:e9:ff:2a:00:2b:87:3b:
                    4b:f4:fe:45:46:69:43:1f:9a:f0:5d:cf:5c:71:04:
                    cc:93:25:29:f2:30:fe:98:60:e8:09:ba:2c:a3:15:
                    4a:aa:90:80:19:67:8c:1b:8a:5d:f6:0b:3a:a8:0d:
                    64:de:67:3a:a2:8a:87:38:07:2c:04:1d:11:67:01:
                    32:7f:38:ff:0f:ed:cc:67:ac:30:74:b2:3d:cd:91:
                    c4:fc:85:d6:03:9f:ed:c7:f7:ca:c9:77:e7:e8:7d:
                    a3:20:4a:9f:7b:5e:19:cf:4b:1f:f2:47:7e:10:10:
                    43:07:7e:29:d4:38:9f:2b:34:94:9a:0c:e9:ea:c6:
                    b8:b9:ca:01:1f:c4:68:88:1a:b9:74:b7:bb:fa:b1:
                    ff:6b:fa:42:3e:49:fc:e4:ce:0d:ab:72:fb:b3:e3:
                    5c:a4:2a:da:ce:ff:cf:46:13:a1:98:19:44:fd:91:
                    c1:12:3f:b8:13:99:1d:6a:52:1e:46:63:af:9e:cf:
                    f8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DF:87:76:81:30:C2:D1:5D:06:98:00:E5:04:E6:E1:D3:54:17:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a86603d-73f1-31f6-94b4-26851b1018be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:e4:af:9e:fc:ab:30:4a:d3:b7:6d:88:5f:e4:01:fe:c5:38:
         3f:bc:db:33:8a:b1:85:cb:26:fd:9f:03:85:50:6e:2d:4b:bf:
         14:a6:d0:87:b2:3a:ee:17:88:c9:90:54:d2:f7:c5:41:92:e1:
         d2:c6:a1:26:17:b7:81:83:20:70:af:b2:29:40:b2:76:c1:c6:
         1a:af:b3:37:32:2e:cf:e3:b9:10:44:6c:5c:1b:22:6e:b6:28:
         e0:9f:d1:27:b7:cf:1a:b4:6f:40:bc:f6:e4:31:7a:02:6b:77:
         26:39:75:59:e5:49:b8:2b:c1:ec:0f:a4:97:72:4d:47:f3:66:
         de:1d:a9:2a:ae:85:50:cc:96:f5:cf:d0:7c:de:15:c1:ab:38:
         f2:9e:f2:a1:42:f2:96:bf:e3:e7:21:69:d6:97:78:c6:45:b2:
         4d:2e:da:30:ee:de:b0:8b:82:24:96:02:b3:41:28:40:87:7e:
         e6:b0:a7:7c:2e:56:61:3d:43:7d:38:bc:49:f8:a9:d3:0a:1a:
         25:ad:d0:f5:0a:f2:f2:6f:ec:8a:8b:dd:f9:07:c7:32:b7:75:
         82:00:e0:52:37:ae:94:9a:bf:24:e1:c3:5e:5b:95:a1:70:cb:
         63:0b:3b:32:04:95:d1:85:02:71:ec:49:70:1c:10:2f:44:66:
         86:b0:86:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:25:41 2026 by rpki-client