Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/19865837-8848-3883-9293-51f005bce9fd.roa
File:                     19865837-8848-3883-9293-51f005bce9fd.roa (raw, json)
Hash identifier:          WW/6q8arqRGcIkg6/lJVwC/eVB3yBdghEPJt87Eqc90=
Subject key identifier:   94:B5:CE:29:9E:29:D7:A4:DD:B6:20:BE:E7:CA:E8:79:49:9F:17:46
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CE8F77DB50B6E05FEC9050F00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/19865837-8848-3883-9293-51f005bce9fd.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     20001
IP address blocks:        130.254.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:7d:b5:0b:6e:05:fe:c9:05:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=7b4a0e88-597d-4b8e-afd5-4221f9cc7772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:f2:bc:81:6a:0a:f4:ec:2d:22:d9:12:b8:
                    ca:2c:c0:c3:7a:56:de:87:0c:86:93:af:a1:41:5b:
                    fc:45:e9:3d:8d:b1:0b:ed:9f:9a:00:58:45:70:81:
                    24:3a:f5:17:c3:27:f8:5b:25:50:1e:66:75:23:ad:
                    c7:d4:c9:30:8d:96:11:28:fe:60:e9:ea:1d:9c:b8:
                    51:88:61:15:0d:18:b6:d9:e3:f9:cb:07:a4:5f:10:
                    bd:1f:f3:ba:21:83:c1:19:a1:ec:cc:c5:da:fa:1e:
                    bc:01:79:49:ab:22:bf:3a:b6:07:24:d1:9e:62:f5:
                    c9:08:12:f7:4c:d4:6c:90:31:72:df:82:40:91:a8:
                    ea:95:53:bb:bc:14:a7:16:42:e2:88:79:4b:1c:d1:
                    af:89:f0:25:27:b9:9b:e4:67:8b:f3:1f:f2:d9:ae:
                    5b:6b:8e:bb:01:24:66:33:8f:a9:94:27:c2:12:75:
                    ab:f0:55:24:a6:d2:8f:9a:a3:8d:46:b0:52:42:02:
                    b5:40:2b:b9:ca:91:c1:45:78:72:4b:31:74:56:5e:
                    f6:72:39:83:b5:d6:47:58:c1:f2:3d:ef:17:24:99:
                    13:50:d5:f0:d5:85:68:7e:40:d7:6a:f4:f4:78:a4:
                    11:d2:b4:fb:25:a1:7e:04:b6:99:6f:d7:77:51:c2:
                    06:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B5:CE:29:9E:29:D7:A4:DD:B6:20:BE:E7:CA:E8:79:49:9F:17:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/19865837-8848-3883-9293-51f005bce9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d6:49:67:4e:ba:35:9f:be:e9:9a:50:bc:bd:93:9a:2e:06:
         2f:0b:c5:f5:58:36:6a:39:20:4a:0a:a5:26:73:67:da:4f:23:
         a2:a4:c6:ed:56:a1:b8:f6:85:70:f2:89:79:a3:47:a4:df:ed:
         4f:b8:0e:9a:59:f5:82:c6:ea:25:c9:f1:61:f6:c0:ab:60:0c:
         6d:95:1a:c5:75:5b:2b:e0:59:be:94:c7:3b:23:20:e6:b1:b8:
         41:44:fa:f0:f1:57:a1:54:2f:73:ec:43:df:7a:f6:0f:fa:00:
         a7:0e:45:20:8d:ff:b7:f9:05:08:f2:61:14:23:12:ab:65:35:
         f6:e2:5b:4b:44:50:b6:ec:37:1e:33:f7:55:79:72:ae:23:1f:
         a9:a3:fe:23:bb:35:6a:2d:a7:41:27:3c:87:59:a4:02:34:53:
         5e:29:14:79:e5:e0:8e:34:6d:c6:bf:2f:d1:3d:04:b5:e5:f0:
         6d:fe:09:c7:ee:38:a7:a0:c4:e9:ef:64:d8:6c:01:23:a1:06:
         6d:0d:f3:18:f0:e1:aa:14:2f:bd:a9:ef:00:ee:8e:65:b7:29:
         50:c2:24:60:c7:8a:fa:bb:cc:5c:f3:ce:ea:0b:74:56:e2:8d:
         cb:77:92:e3:6e:20:12:86:08:a7:b5:74:d3:7d:46:6d:43:e6:
         5b:64:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:41 2026 by rpki-client