Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9898e808-7103-31c9-88a2-b12fa0a7339c.roa
File:                     9898e808-7103-31c9-88a2-b12fa0a7339c.roa (raw, json)
Hash identifier:          G0ol35TD4/DBENmsR2+yYVxTcSzi2BXYOzo8H5rd7o0=
Subject key identifier:   D2:F0:E6:51:13:EC:AE:ED:57:6F:B4:DD:16:87:DF:21:9F:55:58:E6
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EFF776C759B2A215D4EFD6810
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9898e808-7103-31c9-88a2-b12fa0a7339c.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     397630
IP address blocks:        130.254.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:6c:75:9b:2a:21:5d:4e:fd:68:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=cdbba90e-758a-4023-bc85-80ac68c79640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:d1:47:86:c6:03:4b:3d:fd:9a:33:98:3b:
                    6d:d3:fb:6a:36:d8:44:85:b6:60:19:97:9e:86:21:
                    c3:64:45:77:9b:ee:89:5b:ae:6a:b4:f7:2f:6e:b7:
                    e5:44:c2:ae:d0:b5:98:f8:d5:3d:cb:c6:24:1b:13:
                    30:c9:c5:bf:fb:45:07:2f:5b:7e:33:94:b1:cf:13:
                    46:91:6d:1f:61:ca:f9:bc:39:15:90:25:f9:1a:a8:
                    20:48:f0:88:1b:d2:a5:ad:28:dd:c3:2d:c0:b3:74:
                    10:95:09:97:a3:6f:0f:64:4d:f1:bf:99:92:10:e7:
                    ee:d0:1c:ac:95:2f:50:a6:1c:76:ba:d5:10:6a:8a:
                    82:00:07:8c:ad:63:e2:c0:d7:d2:16:44:1a:82:c6:
                    60:08:23:6b:c6:e5:73:7a:2e:83:1e:60:45:63:7b:
                    88:fa:e5:84:7a:0c:34:e6:22:f4:71:d5:55:9c:c9:
                    6e:9e:9a:f7:14:c1:57:7d:0b:32:fe:31:7d:88:75:
                    73:fd:81:10:d9:ba:ee:7e:17:31:8e:b8:09:f6:04:
                    2b:14:a3:ac:64:ef:7f:d0:00:6e:a2:cf:bb:f5:07:
                    81:c7:d0:45:26:44:85:f8:6f:be:a2:1d:28:13:10:
                    cb:90:96:a3:83:e6:0a:4f:e8:17:4a:15:03:d1:23:
                    c3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F0:E6:51:13:EC:AE:ED:57:6F:B4:DD:16:87:DF:21:9F:55:58:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9898e808-7103-31c9-88a2-b12fa0a7339c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:cf:a3:2a:5e:6e:cb:b8:cd:71:1b:93:bf:c8:93:9c:d3:44:
         3c:0b:32:94:a6:2b:5c:fe:f4:46:14:60:38:72:2e:f3:f5:ca:
         0c:f8:f4:97:27:90:c0:da:67:b2:47:90:36:27:2c:1e:09:9a:
         09:3f:df:98:0c:af:95:7b:ad:15:4b:a6:ef:e4:35:a2:d7:c6:
         83:cd:99:1d:33:4f:49:69:e3:9d:45:b1:4b:1e:b4:46:9b:97:
         e4:76:cb:f1:c0:62:5a:c0:e6:c3:a4:6d:a9:2e:f9:29:56:82:
         5e:bf:0e:43:4c:2c:20:b3:a1:1f:73:09:37:0a:5f:61:b3:04:
         ce:ff:f5:e4:e6:68:50:59:52:88:a9:2d:15:46:cf:10:28:f7:
         97:ff:dd:aa:b4:18:38:64:47:11:be:77:55:e9:be:6c:c3:72:
         e9:1f:7f:47:f2:dc:ce:82:f9:b9:b4:23:4a:1b:3a:d3:01:d4:
         a4:f0:d8:2c:51:8e:5e:c8:5a:7d:e4:ea:5b:1d:2c:2b:18:fd:
         a5:db:2f:c5:e2:9b:b1:5e:86:58:10:5c:88:19:e6:17:49:42:
         bc:08:36:29:b3:a2:3b:c2:97:1c:fb:60:e5:e2:af:e7:93:77:
         dd:a5:2f:bc:d8:14:31:7c:3f:7f:b8:76:e8:28:6d:9f:a2:7e:
         72:52:a0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 18:23:09 2026 by rpki-client