Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ba922fa-5dcb-3b9b-bb8d-914f614bde6d.roa
File:                     9ba922fa-5dcb-3b9b-bb8d-914f614bde6d.roa (raw, json)
Hash identifier:          v9w1n+bTtUyWd/f//CUlvdSIoSK5Tp+8waobsX3OWdM=
Subject key identifier:   43:0E:9A:F4:F3:55:F0:E0:5E:30:1E:F4:B6:26:5A:6F:CD:16:7C:F1
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EFCACC9A4D667F73BE9144840
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ba922fa-5dcb-3b9b-bb8d-914f614bde6d.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     64267
IP address blocks:        152.44.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c9:a4:d6:67:f7:3b:e9:14:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=597e58db-0567-4920-9a7b-c46ef7837a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c3:cb:9d:47:68:db:11:c9:fb:fc:d1:38:7a:
                    00:cb:bb:0c:46:e9:49:29:c0:a5:60:f7:eb:ef:b6:
                    40:48:7d:9e:80:91:5c:dd:ac:51:ff:ca:7d:64:c1:
                    ea:e9:4f:23:9d:57:c8:91:21:1a:5d:b8:de:89:c0:
                    68:1a:a6:81:cb:81:6e:72:11:ae:83:8c:d4:41:8f:
                    43:23:47:ea:34:94:89:e2:c0:51:6a:1d:2f:d4:b3:
                    1e:7d:5a:ce:53:45:ca:ec:d6:3e:af:85:15:ed:b7:
                    3e:c3:0d:14:06:4b:2b:07:a2:7e:67:55:74:8d:de:
                    7f:f0:78:1f:72:fb:c0:c5:bb:dc:dd:88:04:11:4c:
                    07:81:56:57:af:34:62:2e:e8:ed:15:95:17:e8:3c:
                    86:0a:9b:99:bd:c5:41:23:cc:d7:2a:dc:7e:82:80:
                    35:25:3e:6b:7e:11:6d:97:9e:68:de:e7:bc:9d:73:
                    3f:9b:45:89:c7:21:69:d7:c3:97:b7:11:ba:38:59:
                    25:70:33:fd:e9:0c:ab:4d:0e:ca:9a:33:33:f6:b7:
                    2b:05:44:26:7a:8a:bd:7d:5d:8a:2b:0a:72:49:73:
                    af:73:50:a0:9d:aa:49:bf:91:88:34:c5:04:85:c9:
                    13:d4:cb:ec:f2:98:07:e4:44:04:81:fd:a1:fa:ea:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0E:9A:F4:F3:55:F0:E0:5E:30:1E:F4:B6:26:5A:6F:CD:16:7C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ba922fa-5dcb-3b9b-bb8d-914f614bde6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:d9:b8:8a:d9:84:94:65:30:76:2c:28:74:8e:c0:28:7f:35:
         6b:ee:67:07:d4:a3:4d:85:25:43:45:6b:38:35:36:35:0d:11:
         f7:e6:ac:d9:8c:4d:77:b4:ca:d0:eb:bc:1a:91:8a:66:78:06:
         a3:bb:87:2a:17:81:f4:f0:4c:29:47:d0:ba:1f:28:d5:f6:5b:
         92:de:7b:94:80:c3:e1:a6:25:49:7a:a9:8e:96:b9:3b:3c:8f:
         d0:3c:29:b1:07:11:a0:fc:60:76:1b:af:85:7a:55:37:bd:68:
         6f:7d:23:63:3d:dd:51:a7:3b:64:e5:14:c4:d5:7c:92:c8:79:
         b2:b6:42:38:b6:7c:37:eb:09:4f:95:73:4c:08:e1:e9:01:c2:
         5d:0f:66:fe:d2:e1:1c:49:f3:cf:f8:40:c8:f9:a2:af:4d:76:
         ca:ce:e2:15:ab:5d:68:6e:ea:8f:ca:06:32:a5:61:a8:1d:97:
         ef:d9:da:ac:8e:70:59:6b:90:e3:16:3b:c9:9d:fb:e1:47:c0:
         dc:85:94:72:df:87:f9:d6:c3:e2:6b:f5:1a:cc:77:c7:13:b0:
         2e:52:3b:af:19:de:78:4c:33:e5:ed:1f:71:1f:19:e8:ca:99:
         0a:77:33:47:58:38:7f:a8:92:3c:85:cd:4a:37:40:9c:b8:b3:
         fc:6e:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:57 2026 by rpki-client