Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0d624bbc-41a0-3f83-a2a7-7d6d28a466d8.roa
File:                     0d624bbc-41a0-3f83-a2a7-7d6d28a466d8.roa (raw, json)
Hash identifier:          LhnXxm5aUwufCQych4x2/god1Izww+PQY/SoNkIlrL4=
Subject key identifier:   C4:8A:5B:3B:2A:E2:E0:50:E4:41:0E:74:90:1D:02:31:D8:E4:47:DF
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D7CCFD2A6D41F225BAF4C1C00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0d624bbc-41a0-3f83-a2a7-7d6d28a466d8.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     397630
IP address blocks:        130.254.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d2:a6:d4:1f:22:5b:af:4c:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=bc263ce3-6a17-4731-a56b-4c3c7ad7695e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b4:a8:b5:53:f4:96:ee:a3:b2:6f:25:85:24:
                    e5:57:fb:67:4d:eb:ad:8c:36:af:8b:31:a9:49:51:
                    87:e7:fd:4e:7f:23:4a:a3:25:89:00:e3:af:a9:14:
                    38:ec:57:62:ec:eb:d9:c3:4a:4c:3a:a6:d9:ac:38:
                    d9:87:a9:15:ef:a9:f0:ea:11:e0:8e:99:52:55:d3:
                    0d:f7:0c:de:95:52:95:13:ac:27:f5:b8:c6:e7:bf:
                    3b:ba:19:d0:5b:04:95:f5:d7:22:cf:e0:4f:8f:41:
                    9b:a9:8e:2a:8a:6e:f1:0a:2f:18:ad:13:15:4e:61:
                    76:23:17:41:53:f2:1d:67:f8:cb:1f:57:f4:ed:40:
                    28:ae:c9:81:a0:19:6d:13:6c:fc:16:0e:58:bd:ff:
                    c7:9f:fd:68:0a:ec:21:87:49:87:70:c9:d5:9a:87:
                    cb:30:4a:57:1a:68:9d:2c:23:9e:5f:d1:7d:ec:1a:
                    3a:31:9d:2f:22:1e:9d:da:96:b4:3e:cc:f8:46:ba:
                    f4:bb:6e:38:e7:ff:68:92:06:96:a9:ba:a1:2e:d7:
                    27:44:e2:5b:3e:cb:5c:8c:10:a6:a1:97:c0:22:30:
                    04:1e:b6:eb:0c:eb:1f:3d:14:25:69:76:52:90:da:
                    5d:08:45:4a:01:0d:b1:2d:df:96:aa:c6:7c:83:12:
                    3e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8A:5B:3B:2A:E2:E0:50:E4:41:0E:74:90:1D:02:31:D8:E4:47:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0d624bbc-41a0-3f83-a2a7-7d6d28a466d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:57:ef:03:d6:0c:3f:d9:16:ed:db:d2:a3:d5:6b:98:d6:ae:
         f3:b6:f8:44:9b:07:d6:93:c7:4c:9a:93:29:74:ae:9e:85:74:
         11:d7:65:96:67:80:b7:e7:a1:a8:b4:15:a0:6e:ef:44:11:ed:
         71:ad:ab:40:9a:ef:ae:01:73:94:37:12:a0:e3:02:98:f8:b1:
         b4:a1:cd:66:6e:1c:ad:37:b3:fb:f8:a2:bd:24:dd:50:b5:8a:
         e6:fb:64:ab:dd:08:73:ed:9c:2b:5c:e7:b0:f5:ac:4a:41:7c:
         29:1e:94:1f:9e:53:c0:82:f8:36:32:ac:66:55:4a:45:38:10:
         e3:bd:95:ce:b4:b5:c6:b1:17:0e:74:5d:2d:2d:3b:31:5c:0b:
         07:d5:40:a7:60:19:d9:28:40:7b:20:ca:57:ce:08:95:4d:fb:
         86:cf:2b:fa:3b:c1:ce:1a:c4:82:b8:70:85:72:93:f7:45:23:
         79:b7:e8:80:5b:a4:dd:f1:4e:cf:43:9b:78:1d:ee:13:a5:9f:
         ba:e8:44:3e:cf:01:80:a7:53:b0:e2:91:11:66:ea:b5:50:02:
         26:03:a7:3b:9c:7e:e8:4a:e6:75:48:0e:5e:66:80:42:d0:98:
         18:29:63:99:b9:09:7e:1a:2d:4b:35:33:62:18:03:67:af:4a:
         7c:0b:56:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9Km1B8iW69MHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk
YmMyNjNjZTMtNmExNy00NzMxLWE1NmItNGMzYzdhZDc2OTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLSotVP0lu6jsm8lhSTlV/tnTeutjDavizGp
SVGH5/1OfyNKoyWJAOOvqRQ47Fdi7OvZw0pMOqbZrDjZh6kV76nw6hHgjplSVdMN
9wzelVKVE6wn9bjG5787uhnQWwSV9dciz+BPj0GbqY4qim7xCi8YrRMVTmF2IxdB
U/IdZ/jLH1f07UAorsmBoBltE2z8Fg5Yvf/Hn/1oCuwhh0mHcMnVmofLMEpXGmid
LCOeX9F97Bo6MZ0vIh6d2pa0Psz4Rrr0u2445/9okgaWqbqhLtcnROJbPstcjBCm
oZfAIjAEHrbrDOsfPRQlaXZSkNpdCEVKAQ2xLd+WqsZ8gxI+0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSKWzsq4uBQ5EEOdJAdAjHY5EffMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMGQ2MjRiYmMtNDFhMC0z
ZjgzLWEyYTctN2Q2ZDI4YTQ2NmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKNX7wPWDD/ZFu3b0qPVa5jWrvO2+ESbB9aTx0yakyl0rp6FdBHXZZZn
gLfnoai0FaBu70QR7XGtq0Ca764Bc5Q3EqDjApj4sbShzWZuHK03s/v4or0k3VC1
iub7ZKvdCHPtnCtc57D1rEpBfCkelB+eU8CC+DYyrGZVSkU4EOO9lc60tcaxFw50
XS0tOzFcCwfVQKdgGdkoQHsgylfOCJVN+4bPK/o7wc4axIK4cIVyk/dFI3m36IBb
pN3xTs9Dm3gd7hOln7roRD7PAYCnU7DikRFm6rVQAiYDpzucfuhK5nVIDl5mgELQ
mBgpY5m5CX4aLUs1M2IYA2evSnwLVpM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:35 2026 by rpki-client