Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3f2618d1-f2ed-38b3-943d-b52aba8bc037.roa
File:                     3f2618d1-f2ed-38b3-943d-b52aba8bc037.roa (raw, json)
Hash identifier:          zZ4hUHhxsBT9VYARWbtcvirhG6m9iflwff9PVKlBQuA=
Subject key identifier:   43:E2:91:8D:76:C9:25:AE:94:42:EE:34:D7:CD:D0:E2:AC:A7:A2:73
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E15E46A85D1006717AA981B40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3f2618d1-f2ed-38b3-943d-b52aba8bc037.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     397630
IP address blocks:        130.254.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6a:85:d1:00:67:17:aa:98:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=50ff3142-206c-40c8-9cbc-5a26a995f875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:ad:f4:c5:11:f1:7b:b3:0d:c9:b3:c7:52:
                    a0:3a:7f:93:7a:2e:58:01:0c:41:7a:d5:9a:60:79:
                    b4:14:8a:44:c5:32:60:e8:64:8d:99:7f:93:3f:13:
                    68:4e:1b:de:ae:dc:ca:1e:a5:01:ba:2e:bc:fa:77:
                    98:7f:43:ad:85:5f:4a:de:29:02:9b:24:d9:b8:df:
                    35:08:6a:43:83:8e:91:ed:75:d2:97:bb:d6:da:65:
                    9e:8b:d8:a5:01:d8:d7:21:62:51:ae:44:c0:f1:2c:
                    3c:1f:c6:d5:82:c2:24:77:2b:12:9b:f9:d6:8a:b7:
                    0f:d8:66:22:4c:fc:5d:66:98:4f:a4:98:f5:3a:79:
                    f6:d9:8c:4e:9c:0f:1d:c8:8f:fb:1a:4a:e6:0c:84:
                    dd:d1:76:9f:1a:77:c5:e9:28:2e:88:db:cb:66:82:
                    5b:b7:53:5f:43:da:82:2a:a0:42:11:66:17:f4:52:
                    1d:2f:b6:dc:8c:2e:60:e3:cc:16:39:e9:0f:8e:ad:
                    64:0e:29:40:d5:02:4a:3f:ac:89:f6:24:9d:4a:fb:
                    db:d8:b3:0a:66:f1:05:28:63:c5:4d:5f:c5:c7:b9:
                    b8:75:95:af:e1:b2:7a:d3:1b:97:59:68:92:9d:f9:
                    a3:b0:f6:a8:40:93:c7:1a:4d:72:af:fa:c7:b7:da:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E2:91:8D:76:C9:25:AE:94:42:EE:34:D7:CD:D0:E2:AC:A7:A2:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3f2618d1-f2ed-38b3-943d-b52aba8bc037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:db:9c:e3:38:56:50:64:d5:8f:06:5d:4a:32:f1:ef:90:64:
         46:8b:bd:69:ac:39:63:72:2c:a4:6a:4f:ab:70:64:ec:a1:d3:
         62:a5:8d:c4:85:17:93:5a:a7:c6:f5:90:fa:fc:7a:32:26:d2:
         04:f8:11:a3:be:23:58:93:72:be:9c:30:ac:20:c6:a9:ba:12:
         e1:c4:a0:c0:24:04:49:84:43:89:0a:be:66:ca:83:79:af:a3:
         47:d0:69:a3:44:37:09:04:a4:a9:61:6e:3f:f5:11:81:c7:46:
         4b:df:de:6e:e0:74:1c:26:72:87:ed:e4:5c:e6:6c:1b:ce:91:
         02:41:21:5a:0a:28:b3:06:5a:c5:eb:ef:84:66:2c:82:d2:0b:
         6c:ed:9a:8a:78:5f:a8:e2:77:13:6c:74:c3:08:39:f0:bf:fa:
         38:77:5e:a0:41:c2:6c:8f:07:19:97:63:00:f3:d3:34:54:7a:
         24:8d:5b:89:ad:29:1d:6d:1c:43:46:a8:94:51:d3:9b:1a:bb:
         37:9b:e1:be:7c:b5:2a:ba:cf:2a:3a:ea:f9:35:18:48:8c:bb:
         3e:bd:42:e6:87:fd:5f:91:fd:07:4b:dc:7e:f0:86:ac:a1:7a:
         07:8d:9f:8e:88:57:cc:89:72:97:96:7b:bb:2d:bd:51:7c:96:
         3a:11:9d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:06:39 2026 by rpki-client