Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c21afaab-be50-3b57-ba91-da332dfb82c7.roa
File:                     c21afaab-be50-3b57-ba91-da332dfb82c7.roa (raw, json)
Hash identifier:          JyZjF5/GsFfgFPn13ddHuo9Mond5fMc8KbnY52f/pek=
Subject key identifier:   BC:55:19:41:6D:8E:1F:08:75:60:58:EE:7F:E9:B7:2F:7C:AD:F6:6E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E5E7A03F528CB8588C52F9B00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c21afaab-be50-3b57-ba91-da332dfb82c7.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     20001
IP address blocks:        139.60.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:03:f5:28:cb:85:88:c5:2f:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=1fa0f001-cd0c-49f4-ab8f-2217c11fc31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:ae:22:e1:52:79:91:22:3b:d5:37:d0:b6:
                    24:b3:13:42:53:f7:1e:6f:83:f9:70:58:a5:5b:05:
                    98:e9:f0:65:8c:51:6e:86:f1:aa:01:05:11:e0:77:
                    51:c9:d7:ea:37:89:f1:0b:66:c1:12:4c:e1:74:9b:
                    b6:a7:31:91:d1:f6:24:c6:93:f1:03:2f:59:54:6f:
                    9a:74:27:e4:7a:f6:36:27:b1:de:25:9d:af:2d:d2:
                    2c:b9:79:be:ee:64:f9:13:3a:2e:50:34:cf:a3:50:
                    4f:26:87:25:02:8b:17:b6:0a:1e:ba:81:8b:44:86:
                    9d:bf:cb:87:e0:4c:e1:a8:68:55:23:94:26:8b:c5:
                    c8:0a:c4:4c:25:cd:fb:2c:c0:ec:58:53:77:e5:6e:
                    48:2e:62:89:4b:af:25:5a:6b:ea:6b:29:ec:08:33:
                    ec:d4:f5:02:f2:b5:aa:a7:2b:43:80:63:82:d6:90:
                    b3:83:b8:bf:92:b4:24:1e:29:ba:bd:d3:33:b9:ec:
                    ea:9d:73:93:0e:4e:50:f7:3b:c9:2a:00:18:e1:21:
                    b2:d0:34:2a:91:7d:63:a2:53:1a:32:e1:a9:f5:23:
                    e1:12:c1:70:20:c8:97:a1:5c:79:35:fc:fa:84:4a:
                    ed:7b:e4:ba:b2:f5:d1:e9:6a:2a:c4:41:fb:70:92:
                    3c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:55:19:41:6D:8E:1F:08:75:60:58:EE:7F:E9:B7:2F:7C:AD:F6:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c21afaab-be50-3b57-ba91-da332dfb82c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:85:25:fc:42:62:d6:2b:da:6a:92:7b:bc:1e:89:48:41:74:
         25:cb:4b:43:94:0e:d8:1c:b1:87:4f:cf:9d:dd:8a:3b:a3:b4:
         d2:3f:12:37:db:15:9e:ca:39:65:05:4a:4c:d6:5f:10:20:39:
         78:02:55:71:64:63:e4:c2:a7:d4:8d:8d:fc:a8:d5:96:5e:b4:
         a1:66:18:7b:4d:75:24:ca:f4:ee:2f:39:b1:2c:c3:08:a1:f5:
         67:7a:bc:30:7f:eb:6e:99:18:1a:99:21:23:c0:0d:d8:45:43:
         63:19:48:73:ce:b0:05:0e:38:7b:19:a5:86:af:14:8b:2d:2f:
         8e:0d:ee:de:d5:4b:d1:98:a1:d3:6d:17:a4:c4:b4:5b:b5:46:
         9e:91:a3:32:7f:cb:9a:32:15:81:21:b2:e9:2f:b1:b9:5d:8e:
         2e:13:ad:4a:76:6c:48:ba:3c:f9:2d:b9:c4:26:3b:d7:29:3b:
         ff:55:d4:09:c7:a8:97:88:81:dd:e5:d1:f1:67:3f:07:57:5f:
         09:4d:6b:0b:8b:8f:29:66:5e:18:fc:74:ab:12:b3:e8:5b:39:
         00:09:a6:a8:21:1a:a4:d4:e1:e3:03:cf:52:f7:bd:fe:32:f3:
         36:e5:34:6b:8d:87:41:1b:73:3e:1e:e0:0a:93:16:9d:73:ce:
         94:b0:99:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:23:14 2026 by rpki-client