Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/47c4902e-e589-3343-855d-8bdb20df3ee3.roa
File:                     47c4902e-e589-3343-855d-8bdb20df3ee3.roa (raw, json)
Hash identifier:          9StKHuQmx+4PZdm7VbHFylbdLRE3CUcdmPX3eOAlVEI=
Subject key identifier:   42:55:33:56:A3:A4:E5:CB:FF:24:64:5F:7D:C9:72:04:2F:22:66:CE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE296CAB24A6D5E7C8F8600
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/47c4902e-e589-3343-855d-8bdb20df3ee3.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        216.230.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:96:ca:b2:4a:6d:5e:7c:8f:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=f73edf0c-330b-4f51-8ce3-31903baf7bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9b:2a:c8:fc:39:6f:0b:92:7d:11:ef:8d:66:
                    b8:8e:ca:fb:e3:5f:ee:4c:bb:0e:7a:2f:5b:a5:c1:
                    60:3d:8c:9b:1f:88:1f:99:17:6a:90:8b:d7:f1:16:
                    c0:99:bc:83:02:b1:34:6a:a2:27:9e:12:79:59:ba:
                    0b:df:4e:d1:28:07:5c:7c:e1:1a:6b:46:6c:6d:3f:
                    93:ee:6d:10:50:f4:9c:12:84:7b:22:ac:ae:4d:04:
                    ef:80:5c:f4:4c:35:3f:49:53:9a:d1:f4:17:a3:77:
                    99:19:ee:70:44:ca:60:f8:78:2b:f7:cd:9c:e9:58:
                    ca:0f:5e:32:4d:6d:b7:6f:f3:c0:a9:55:7d:16:ac:
                    48:74:54:80:62:17:f9:42:b7:4e:02:aa:ca:c3:12:
                    a6:71:30:98:a1:3a:e6:c5:fe:87:8b:2f:7e:93:5b:
                    2f:fe:bd:e6:c0:e3:c0:04:1f:98:ae:25:06:95:e1:
                    a3:2b:68:dc:08:47:2a:71:e2:ae:d7:31:96:7b:b7:
                    11:82:6d:05:e9:2e:9b:50:34:cc:97:79:fa:83:da:
                    d7:35:0e:79:73:e9:37:f7:a6:95:92:8e:b4:f4:f9:
                    77:05:1f:ad:a6:9f:ab:4e:c1:ab:b2:07:05:fd:f2:
                    10:3f:ab:84:54:8a:a1:cc:af:fe:67:09:f5:fc:ee:
                    2a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:55:33:56:A3:A4:E5:CB:FF:24:64:5F:7D:C9:72:04:2F:22:66:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/47c4902e-e589-3343-855d-8bdb20df3ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:59:0d:2b:3d:f5:e5:ee:d5:82:53:9f:dc:86:04:81:49:
         21:52:e4:db:8a:59:f6:5c:b9:65:2f:b9:33:81:02:88:6a:ea:
         1b:4d:2e:a7:a4:c4:1b:db:6f:b9:d0:68:3b:8c:93:38:0e:3a:
         ca:f4:d0:39:22:9e:91:8f:5d:52:c2:0e:95:1a:01:96:12:2d:
         bc:9b:f2:9e:8f:a4:0b:23:f1:53:a9:ee:cf:28:4a:d2:ce:bb:
         e6:46:63:e0:cd:56:0c:b8:d9:14:ea:20:85:32:f5:a7:77:64:
         d9:7a:b8:63:fd:1d:01:15:27:3c:5b:c1:ef:5f:2d:dc:f6:ad:
         87:fe:51:d3:85:22:0a:50:0e:a5:f6:2b:c7:3f:ae:44:d2:78:
         a6:86:16:c9:68:ac:84:20:0c:7a:b7:cc:25:56:30:d4:f3:6a:
         d6:e9:e0:22:be:88:08:2b:26:ff:9c:ff:9f:05:91:0b:97:79:
         fe:d2:c1:3a:1f:ca:b5:ed:02:46:27:d5:df:dd:86:3d:bd:fe:
         ea:72:42:7b:0f:e2:d0:ef:f4:56:66:c6:b3:9a:bd:e1:9d:57:
         e9:78:6d:d1:c4:73:22:55:74:e6:a5:b4:3f:76:bf:d3:72:f5:
         2f:93:d0:83:8a:53:28:20:be:c5:ef:42:3e:f6:36:70:7e:73:
         54:93:23:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:40:47 2026 by rpki-client