Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c753aca4-2293-31df-a2e0-09caff20f8b7.roa
File:                     c753aca4-2293-31df-a2e0-09caff20f8b7.roa (raw, json)
Hash identifier:          GhBeVuUZgwcbf/j76g6VMZxBKex/7mqts/+uiG8mySg=
Subject key identifier:   F1:34:4D:AF:D5:D0:06:F1:C4:DA:FD:16:A1:74:FE:AF:65:84:DC:FE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E5BAF460DCF03AC26B53EE180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c753aca4-2293-31df-a2e0-09caff20f8b7.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     64267
IP address blocks:        141.164.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:46:0d:cf:03:ac:26:b5:3e:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=878d2569-954a-46c4-884b-09ee116cbbb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:48:6f:3b:72:2c:4d:1d:73:da:f6:bb:80:
                    5a:6c:18:d5:bd:5d:97:28:25:11:e3:97:cd:cc:b3:
                    e7:3b:5d:a5:ed:45:f7:9e:b0:6c:4d:1a:32:67:91:
                    82:4f:9a:90:22:a8:74:f0:d8:c9:75:1c:2c:df:b9:
                    94:c6:f6:28:3b:44:3f:49:9a:50:8e:dd:57:c9:ba:
                    35:27:8b:fc:a5:e0:a8:63:5b:5d:eb:38:05:d9:a8:
                    d5:a9:fc:80:0a:e3:ba:fd:01:35:1d:77:5f:19:0e:
                    81:f0:80:e8:31:11:56:b1:0d:5c:76:5e:a2:a9:9c:
                    d1:74:9d:91:20:c6:1b:49:83:0f:0c:1b:de:c0:ef:
                    62:72:1b:c1:42:5c:e0:c4:65:6b:c8:34:4a:43:52:
                    fe:25:53:41:ea:8f:2d:56:67:b8:e2:43:64:5f:22:
                    68:7e:1d:3f:10:fc:7c:2e:01:e2:5a:12:ce:ac:58:
                    93:cf:1d:d9:45:13:26:63:60:c8:9e:8d:bc:c2:10:
                    2d:b7:d5:7c:c2:d5:8a:66:53:2e:8d:69:64:f9:97:
                    85:93:88:5a:9a:3a:1d:6a:c7:3f:28:ab:19:4f:4d:
                    67:66:de:e8:20:a3:e1:15:6d:91:6e:ca:03:36:f7:
                    05:da:90:08:d4:9d:24:86:9c:13:67:24:9f:84:5c:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:4D:AF:D5:D0:06:F1:C4:DA:FD:16:A1:74:FE:AF:65:84:DC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c753aca4-2293-31df-a2e0-09caff20f8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c6:e2:4f:3c:ce:89:53:b3:ce:dc:07:99:d5:a3:19:fb:62:
         c4:f3:b6:47:37:e2:87:db:0b:b1:9f:5e:a4:7f:59:6b:c1:c4:
         4a:94:b2:a3:42:5a:74:01:c0:1d:b6:84:6b:a9:3d:29:7a:33:
         2b:d2:a8:04:07:cb:ca:76:3c:67:f4:25:12:8d:6e:71:74:ed:
         03:ef:bb:4d:37:5d:40:8b:6e:99:fb:e1:12:d8:41:4b:d3:7d:
         80:3a:fb:47:30:e9:b1:1b:8a:b4:34:73:0c:7d:6b:f1:65:66:
         cc:3b:37:99:13:fc:b4:fc:c4:81:c4:c4:89:27:7c:c7:e6:fc:
         c5:8d:d0:fd:d0:7b:64:0d:c0:80:38:6e:8d:c8:a6:34:08:df:
         67:37:cb:55:11:38:63:0c:57:26:2f:c1:95:21:c3:50:dc:42:
         0a:67:b2:b3:3f:a3:de:9d:71:f0:2f:d4:ca:af:83:8a:53:4f:
         2e:4e:58:7a:de:c4:06:17:63:c6:1a:09:f2:36:c2:73:85:eb:
         e4:df:2f:54:af:78:23:d3:b4:4d:e0:9b:aa:cc:85:ce:31:77:
         a9:7c:bd:1a:35:41:c2:b6:ff:21:1b:02:b0:62:42:27:4f:a9:
         49:84:8d:6d:08:11:db:a5:a0:d2:64:4a:65:d5:3d:4c:c6:9d:
         51:7b:79:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 16:12:38 2026 by rpki-client