Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/03bd337f-f3c0-3826-804b-8dd09e9e7827.roa
File:                     03bd337f-f3c0-3826-804b-8dd09e9e7827.roa (raw, json)
Hash identifier:          FipbazUKsBx11cuibuuo5FPavX2DTjKoKWBlG3a77v0=
Subject key identifier:   A5:5E:3A:D7:BD:40:84:22:62:B6:83:3C:53:34:E4:4F:5B:7D:BD:6D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CC61204B1EFD417BD95AD9100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/03bd337f-f3c0-3826-804b-8dd09e9e7827.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     64267
IP address blocks:        130.254.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:04:b1:ef:d4:17:bd:95:ad:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=fd75ec35-d720-4265-83e1-40bba6543b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:7f:ae:d4:74:99:3d:ee:f2:dd:c5:cf:66:
                    58:30:39:dc:08:ff:ba:bf:d1:48:e9:42:49:b0:ce:
                    15:cf:cf:99:6e:dc:c5:57:4a:ad:5c:44:55:6d:b5:
                    66:9a:ef:16:44:ea:12:c3:35:24:9e:90:2e:b6:db:
                    6a:03:5f:9b:a1:28:da:08:d7:20:c2:e9:83:f3:80:
                    31:b4:31:b8:58:cf:40:52:8a:51:b3:03:7e:4a:d8:
                    93:80:75:3e:94:25:fc:75:6a:01:42:6d:7f:f5:58:
                    20:b2:d4:28:1a:98:59:06:dc:92:13:81:e1:61:d4:
                    99:b6:d2:eb:52:89:ec:9b:cc:dd:0c:fb:80:ef:ce:
                    52:94:5d:f0:07:11:a1:42:51:14:2e:ea:ba:5b:3b:
                    dc:5d:19:a2:8b:b4:11:dd:10:5d:e2:83:a8:59:2f:
                    53:ba:a9:16:9a:b4:21:ed:c2:6d:a5:ab:5f:43:1d:
                    86:bc:d0:26:83:94:53:a8:c8:67:6b:e1:89:4c:04:
                    12:15:0e:7d:f4:e1:56:e8:1e:aa:75:84:85:e3:14:
                    4f:8e:24:0d:28:e8:15:bb:ef:09:f5:a6:01:97:d6:
                    a5:3c:e9:20:99:d0:e6:45:1b:cf:49:8d:af:12:25:
                    80:40:3c:34:6c:dd:9b:a2:cb:5a:97:05:94:f8:4b:
                    ea:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5E:3A:D7:BD:40:84:22:62:B6:83:3C:53:34:E4:4F:5B:7D:BD:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/03bd337f-f3c0-3826-804b-8dd09e9e7827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:7e:84:16:88:fe:18:15:fc:77:ae:9e:61:f9:25:a3:a3:b6:
         e2:94:11:ed:c6:ff:60:26:72:ee:37:72:55:72:a1:a6:c7:e1:
         46:3a:de:35:bc:a3:0f:ff:90:02:a3:81:c0:84:90:d4:6e:90:
         43:5d:e1:e8:7e:09:6b:cc:da:ed:7b:e3:54:05:25:37:71:97:
         5d:5a:29:ab:85:ed:65:30:e1:3e:69:ae:cf:7e:bb:fc:01:c1:
         7a:9a:c9:8c:4c:70:3c:63:9f:d5:dd:fe:76:8c:ec:a1:4e:bc:
         3c:48:58:8a:17:f5:66:a9:98:a4:4e:7e:06:48:71:4c:4b:a6:
         20:dd:34:1d:c6:c1:ab:fc:34:41:8a:a2:94:71:16:de:50:04:
         21:7d:b2:12:11:75:2a:19:3f:0a:f0:03:39:4e:79:15:d7:c4:
         ec:7b:8d:7e:5e:9c:d4:a8:02:6a:62:37:43:45:fb:71:5d:db:
         18:25:9c:0e:ef:09:70:e2:a4:98:f5:c8:35:87:f1:a8:f9:12:
         01:6e:3b:de:07:63:41:a2:da:34:48:f2:7f:56:30:96:09:46:
         d7:c1:bf:dc:91:14:2d:a2:c1:b1:fa:e7:b6:19:3b:55:06:c6:
         14:59:35:1d:c9:5e:b1:af:84:c8:78:d3:ad:62:87:93:e3:ec:
         9a:6c:63:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:06 2026 by rpki-client