Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd0a9c22-208a-39f4-97ff-6fc2865fc2cc.roa
File:                     dd0a9c22-208a-39f4-97ff-6fc2865fc2cc.roa (raw, json)
Hash identifier:          ugNx2q1e8DRKujDJEZ8gRVqiS1/579DSVG9MW4rg95c=
Subject key identifier:   95:CD:E0:76:C8:65:7B:8C:C6:5A:69:68:48:2C:53:2A:AA:FE:47:4A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F63F82277EBCFA07F5F28FF00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd0a9c22-208a-39f4-97ff-6fc2865fc2cc.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     64267
IP address blocks:        141.164.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:22:77:eb:cf:a0:7f:5f:28:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=0b06753f-54bf-446a-a488-d326dacd1fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:d1:11:ee:ad:b2:fd:e9:2f:68:e9:01:b0:
                    82:af:98:d9:ae:bf:9b:0c:69:26:bc:78:69:7b:a6:
                    27:9e:92:70:72:33:01:f1:d0:e6:42:7b:cf:e4:b1:
                    b3:97:b5:a9:43:61:9a:43:d8:6e:4f:f9:2d:b7:32:
                    2a:9a:7b:e1:48:09:e1:e5:aa:a7:57:fd:55:c7:2f:
                    2a:4d:d3:b2:8c:2b:a9:75:08:66:8d:c1:90:5b:7b:
                    88:2c:cd:4d:51:a0:71:9d:ea:6d:58:3a:af:8e:9f:
                    8f:34:16:c3:4f:76:33:f0:c8:29:55:be:f6:cc:75:
                    04:f4:e4:74:08:34:9c:42:ab:4f:15:d6:54:ba:f7:
                    cf:0f:60:73:4b:11:0a:92:10:aa:d5:e5:2a:46:65:
                    68:a4:74:73:59:64:4a:8d:4e:a4:de:f1:08:be:e5:
                    2f:3d:0a:c9:87:75:80:9b:8f:8d:ac:3a:74:82:f7:
                    99:e9:c6:9a:d3:86:9a:b4:79:be:22:b8:16:09:58:
                    0c:b1:29:7e:92:71:41:b7:f9:45:22:c7:73:28:ef:
                    5a:d8:c7:51:22:db:f6:97:56:60:5a:3e:d9:87:80:
                    fb:b0:4c:0e:4c:78:df:78:f0:37:af:ab:20:b3:9b:
                    83:01:3f:d1:2f:d7:17:e4:1b:8b:31:a1:16:d1:38:
                    f9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CD:E0:76:C8:65:7B:8C:C6:5A:69:68:48:2C:53:2A:AA:FE:47:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd0a9c22-208a-39f4-97ff-6fc2865fc2cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ee:38:35:06:b2:8c:51:1b:81:31:9c:7a:4f:63:cc:53:b8:
         52:3a:d2:a3:f2:7a:cf:65:3e:df:dc:71:fa:a1:e5:64:89:20:
         48:0c:b6:3d:59:32:2f:ca:e4:01:81:9e:18:fa:c2:3d:48:39:
         9f:69:49:db:af:12:3b:5b:b6:a6:88:6c:3e:7c:15:62:2c:63:
         b0:04:52:e7:ea:bc:02:0f:c4:d1:25:c9:7a:96:34:61:57:46:
         f0:40:fb:06:a6:66:2e:b0:ce:e3:73:9d:37:8c:35:7a:60:41:
         96:88:09:b5:a8:3c:4a:b2:a6:92:a6:c6:c3:9a:27:93:c4:97:
         f6:ec:e4:c2:d7:a8:ba:09:6d:42:2d:ef:99:4e:93:a0:da:d1:
         f0:8f:3f:4f:49:12:64:60:ba:bd:3a:40:e7:03:4d:e0:f7:23:
         70:a5:cc:3e:79:18:5c:8d:60:36:9b:a1:97:2a:4a:14:b8:ee:
         a7:f0:48:16:01:12:97:18:d3:6c:d6:ab:56:88:eb:47:28:14:
         6b:ba:8c:ae:b3:62:99:a5:3b:87:fa:95:33:13:1c:9c:67:fc:
         20:a8:e9:a5:a3:af:57:60:c0:0e:a6:24:c9:62:a0:58:b7:68:
         4f:75:f3:68:fc:4a:6a:b1:b6:97:ac:21:63:db:c7:15:41:09:
         40:f2:08:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:10:23 2026 by rpki-client