Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fbf4daab-d6c7-3d7a-a8a1-cec07beb9ea2.roa
File:                     fbf4daab-d6c7-3d7a-a8a1-cec07beb9ea2.roa (raw, json)
Hash identifier:          /3czAR3ayExv+Ve5xTm+CEwA1ds9Z5qqQwLMAJN6uZc=
Subject key identifier:   07:A8:84:29:21:D6:81:93:BF:E3:DC:FE:39:9E:B0:08:F0:80:D5:3B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F5A32FEBD4E291F5D40E7FFC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fbf4daab-d6c7-3d7a-a8a1-cec07beb9ea2.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     397630
IP address blocks:        130.254.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:fe:bd:4e:29:1f:5d:40:e7:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=24c7afd2-3946-4443-bca3-17c0bf52214d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:ee:99:45:a3:c5:ba:f4:bf:fb:6a:09:de:
                    1a:25:c7:07:6f:cd:c7:ba:de:6e:20:5c:91:e7:bc:
                    e0:63:94:c8:c1:87:dd:2c:04:88:f9:b5:70:cb:4c:
                    e2:67:13:5d:ca:74:30:81:8a:bf:e0:1e:e4:6d:3b:
                    e1:7d:f2:a4:5e:9a:d9:03:fa:a2:49:71:2b:9b:de:
                    9c:e7:ab:a8:02:33:d0:56:b2:fe:96:98:f2:86:49:
                    7b:39:96:54:f2:b2:5b:06:d5:d5:1e:c7:c8:c8:a9:
                    f6:b1:94:15:93:87:72:24:42:40:bb:47:4c:00:07:
                    4c:c1:c8:b5:14:aa:56:bc:86:99:69:ce:c7:48:b2:
                    61:a9:09:4e:a2:ad:9d:79:60:dd:b3:92:d3:1e:04:
                    0e:84:a4:5f:db:65:82:22:a5:02:f7:af:b5:1b:8f:
                    5c:2a:22:9b:0b:4e:ac:b4:a4:b9:6f:b2:3a:e8:4b:
                    15:c9:fa:f3:17:fc:d2:3b:0b:9c:e0:08:22:86:58:
                    35:71:1f:01:01:cd:eb:cb:69:f1:a3:fd:e6:93:be:
                    46:41:0b:5e:ff:25:85:88:40:ea:03:4c:b0:48:52:
                    52:8a:5e:03:32:0a:6b:a5:6a:8f:8c:a3:4d:e3:23:
                    01:a9:a4:cb:c9:f9:f3:ee:35:d5:a2:a4:3c:29:ee:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A8:84:29:21:D6:81:93:BF:E3:DC:FE:39:9E:B0:08:F0:80:D5:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fbf4daab-d6c7-3d7a-a8a1-cec07beb9ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:75:d7:79:77:c8:b5:71:e5:71:02:a9:bc:f4:1c:24:b5:6e:
         99:20:74:90:1e:f8:ff:a5:5a:33:ce:c9:35:2d:8c:1b:cf:04:
         f8:a0:6b:b6:d5:33:c9:d4:80:58:0a:91:c5:31:8d:d2:68:d6:
         99:5c:3a:af:8b:cb:5f:95:80:76:8c:8f:b4:4c:30:da:29:1c:
         3f:dd:57:9c:9b:9e:19:b4:ef:4e:11:8f:dd:e1:14:09:6d:22:
         b5:c9:7e:bd:80:b2:e3:99:63:14:54:ac:b6:4f:46:cb:c8:3e:
         13:7b:48:44:a6:02:6f:3b:da:c8:38:43:fd:1a:54:fe:dd:a9:
         22:95:b6:7b:f6:46:36:3c:36:a7:f1:f9:a1:93:59:83:f9:4a:
         fe:32:c2:f0:dd:e4:73:77:c3:af:e4:4e:43:aa:94:9a:75:50:
         07:3f:eb:f0:1b:25:5d:d9:a9:ee:8c:c2:11:57:25:ae:a5:c7:
         e5:c9:a7:f9:7c:86:8c:d1:01:65:58:30:30:78:b5:25:39:55:
         06:f7:5f:fa:30:7b:72:99:3d:52:7c:e4:8d:d9:69:7c:4c:53:
         a9:24:06:87:62:46:aa:ce:48:84:dc:d1:9f:39:55:a1:f2:bd:
         97:0e:35:68:fd:21:8d:df:33:5e:24:7c:a4:25:ae:2c:34:d6:
         7b:fe:2f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:58:48 2026 by rpki-client