Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/330ecad5-6a30-32e1-afc4-ae4abde22673.roa
File:                     330ecad5-6a30-32e1-afc4-ae4abde22673.roa (raw, json)
Hash identifier:          iNBoD+l38lEQMy2yRBpx1gm89nLkPF0ZTmbTbEjtY84=
Subject key identifier:   53:9B:23:DA:36:86:D0:A8:09:E9:81:A5:A5:EB:D8:67:41:4F:A5:F3
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D7E353A3D70E3BFFA380D9F00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/330ecad5-6a30-32e1-afc4-ae4abde22673.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     20001
IP address blocks:        149.20.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:3a:3d:70:e3:bf:fa:38:0d:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=048b3df4-c00f-4385-a7fa-0358f918b19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:b3:62:02:3e:cb:61:24:2b:fb:02:fb:af:
                    ae:f8:7e:21:ce:9b:c8:83:2f:20:0b:76:51:66:39:
                    18:d9:e1:5d:e1:85:b3:3a:fd:ce:15:d5:62:8d:0b:
                    8e:15:2a:f4:bf:08:1f:9e:9d:eb:07:7e:a1:bb:17:
                    73:b3:c5:69:03:8b:99:68:88:b2:cf:25:21:80:df:
                    3a:71:2e:a9:e6:33:73:56:c3:9b:b6:79:04:e9:51:
                    72:21:0b:40:11:61:a4:a2:de:bd:20:37:1e:f9:13:
                    b1:2d:03:23:e7:9d:15:56:62:dc:28:c6:95:ac:10:
                    15:84:c5:78:b6:57:39:db:0c:93:2b:10:0d:0e:51:
                    7d:5e:cb:d6:ad:6a:cd:b0:a5:32:58:e4:6f:ad:f6:
                    b8:ca:aa:b5:09:2d:84:47:3b:88:83:91:d8:a7:8e:
                    e6:f7:7b:75:00:d8:ff:b6:e8:89:d6:51:d3:c1:ff:
                    ce:82:11:4b:c1:c2:02:8e:17:0e:b2:2a:95:3f:7b:
                    53:18:ff:a9:e9:74:ce:57:7c:e0:66:c2:f8:b7:23:
                    bd:af:8b:c3:e9:78:21:e0:bf:df:97:b8:b5:0e:36:
                    ca:a2:81:40:eb:69:3c:68:23:76:f8:c1:51:e2:6c:
                    c7:b1:2a:ba:aa:38:bb:08:37:8d:54:c0:6a:7c:44:
                    f2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9B:23:DA:36:86:D0:A8:09:E9:81:A5:A5:EB:D8:67:41:4F:A5:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/330ecad5-6a30-32e1-afc4-ae4abde22673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7c:57:03:11:0c:31:70:b0:d4:14:60:90:bc:b1:00:94:fd:
         3d:5a:19:d5:61:d1:04:b2:86:f1:11:3d:95:19:43:01:6c:3d:
         b8:f6:0d:92:a1:01:0a:2d:b1:b7:4d:a5:69:bc:9e:2d:58:65:
         90:8a:38:ae:8e:2d:99:c4:21:d7:8d:cf:cd:b0:14:ea:de:db:
         92:8b:f8:ec:03:a1:fd:1c:fa:c4:f0:c2:6d:b5:c4:d2:5e:2f:
         28:45:63:f9:d4:72:6a:2b:45:4a:c6:ce:17:ac:fc:80:1c:ef:
         fe:a8:3b:d7:56:40:bc:08:6b:9f:8c:b8:80:e7:8f:7c:c7:60:
         ba:67:2d:b4:a7:aa:ed:bb:ac:3a:5d:b6:10:e6:43:cc:fb:d3:
         06:d3:82:87:1b:8c:77:f1:02:4b:62:ce:64:f0:93:0b:66:8e:
         c5:ac:20:a4:d1:15:42:92:f4:67:ca:a5:ee:c1:49:32:0b:0d:
         72:94:a7:70:9c:ca:06:cd:53:b1:71:0b:71:a3:6b:28:9f:e5:
         74:0c:7d:51:ce:f6:b6:b7:50:6d:6b:6b:db:01:57:cf:ba:ca:
         a6:5e:eb:d0:24:81:f5:c3:88:19:df:64:dd:f4:d5:c2:52:a8:
         15:d4:65:49:40:8b:e9:d7:e0:b7:a5:4e:38:82:f8:54:d0:d3:
         a3:30:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:57:53 2026 by rpki-client