Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61fa2b10-b8f4-3f89-8c1e-a1baeb3932f7.roa
File:                     61fa2b10-b8f4-3f89-8c1e-a1baeb3932f7.roa (raw, json)
Hash identifier:          ql4SdYKd8pmXHBahdUObrJ9btzhJ2SrPBa2liloqx3I=
Subject key identifier:   23:5E:AD:1C:63:A7:D0:E5:37:C2:63:6C:4F:B8:0E:CE:61:99:AE:19
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D7CCFD061ADAEFF7241D4DA00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61fa2b10-b8f4-3f89-8c1e-a1baeb3932f7.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     397630
IP address blocks:        130.254.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d0:61:ad:ae:ff:72:41:d4:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=16b78249-b16e-45e3-b513-960ca3ccd20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d7:d6:7b:b9:90:b8:cb:19:83:dd:cc:16:7c:
                    00:20:d8:5a:77:63:d8:e3:f8:ad:81:01:62:ec:04:
                    06:33:ba:b3:86:dc:97:14:84:3e:63:be:97:be:5d:
                    69:95:e7:01:5f:8c:4e:e2:01:0d:9f:0a:7d:b4:d4:
                    2e:6f:e3:f1:c2:0a:8d:3c:55:6f:77:c0:68:e3:58:
                    19:b1:e2:c6:fc:9b:c4:d1:0b:f2:1c:9f:e2:07:7c:
                    22:91:62:51:da:90:50:51:d6:61:f8:38:a9:9a:d1:
                    68:78:af:a7:0f:64:3d:35:a1:35:3d:1b:eb:aa:8f:
                    a3:69:d6:bb:d6:3e:4e:d3:d6:47:ef:2d:9c:5f:68:
                    98:05:8b:88:6f:5f:5d:82:fa:18:56:a8:7f:e8:fe:
                    3c:f8:d9:4b:1a:35:68:bd:61:6c:cc:1f:bb:68:da:
                    68:9d:94:a1:4e:c5:a8:10:bb:98:db:6e:75:aa:ba:
                    14:e8:56:9a:b2:f1:26:81:f9:d2:66:e7:46:4c:a7:
                    4f:a9:8b:02:e0:36:76:1d:2c:5a:6e:c4:65:25:fa:
                    95:b2:89:bf:48:f7:62:6a:bd:ba:3a:cb:1c:59:6e:
                    52:63:4d:f9:d5:a9:36:1b:54:f5:15:41:16:00:ab:
                    0a:f3:58:37:e7:0d:79:60:80:fa:43:c3:02:98:f9:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5E:AD:1C:63:A7:D0:E5:37:C2:63:6C:4F:B8:0E:CE:61:99:AE:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/61fa2b10-b8f4-3f89-8c1e-a1baeb3932f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:f2:52:bf:39:71:ec:ff:11:fc:b1:88:d1:db:52:a5:5d:
         26:db:66:68:a2:e1:f1:f0:e2:4b:df:21:71:5f:c3:5d:37:55:
         7b:6f:63:bb:75:ba:c5:61:be:ac:de:f2:4a:b9:bf:86:2c:91:
         64:aa:e1:37:95:04:49:d8:68:8b:ea:31:39:97:53:eb:18:dd:
         81:85:39:83:9e:5d:68:69:74:b9:c5:13:55:9a:25:a9:29:e5:
         4f:86:b8:de:15:dc:f3:8d:54:df:5e:17:8c:d9:6c:65:58:19:
         85:b0:89:02:3c:26:19:8c:7f:dd:df:ee:f7:b9:ff:a0:50:c8:
         9b:a8:ff:f0:49:3f:59:48:5e:a1:22:4e:a7:37:70:a7:f9:cb:
         74:7b:35:d5:69:66:e7:35:39:ae:fc:d9:5a:e7:f8:05:64:c0:
         25:9a:11:5a:c3:15:d1:50:77:b2:0a:9d:da:ea:b4:9c:1e:da:
         de:b7:1a:4f:4c:73:70:88:c2:53:fa:11:5f:9c:79:f8:09:f9:
         7d:26:3d:dc:9e:fd:de:81:18:a8:3f:a5:5f:d3:f1:32:72:a5:
         59:d3:2d:84:6d:b6:5c:ae:80:bc:b6:9f:08:61:a1:a6:bd:30:
         0c:1a:bd:ae:bb:89:22:58:29:bc:fd:e5:07:40:9c:b7:48:07:
         10:75:37:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9Bhra7/ckHU2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk
MTZiNzgyNDktYjE2ZS00NWUzLWI1MTMtOTYwY2EzY2NkMjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitfWe7mQuMsZg93MFnwAINhad2PY4/itgQFi
7AQGM7qzhtyXFIQ+Y76Xvl1plecBX4xO4gENnwp9tNQub+PxwgqNPFVvd8Bo41gZ
seLG/JvE0QvyHJ/iB3wikWJR2pBQUdZh+DipmtFoeK+nD2Q9NaE1PRvrqo+jada7
1j5O09ZH7y2cX2iYBYuIb19dgvoYVqh/6P48+NlLGjVovWFszB+7aNponZShTsWo
ELuY2251qroU6FaasvEmgfnSZudGTKdPqYsC4DZ2HSxabsRlJfqVsom/SPdiar26
OsscWW5SY0351ak2G1T1FUEWAKsK81g35w15YID6Q8MCmPl3XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNerRxjp9DlN8JjbE+4Ds5hma4ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjFmYTJiMTAtYjhmNC0z
Zjg5LThjMWUtYTFiYWViMzkzMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuD8lK/OXHs/xH8sYjR21KlXSbbZmii4fHw4kvfIXFfw103VXtvY7t1
usVhvqze8kq5v4YskWSq4TeVBEnYaIvqMTmXU+sY3YGFOYOeXWhpdLnFE1WaJakp
5U+GuN4V3PONVN9eF4zZbGVYGYWwiQI8JhmMf93f7ve5/6BQyJuo//BJP1lIXqEi
Tqc3cKf5y3R7NdVpZuc1Oa782Vrn+AVkwCWaEVrDFdFQd7IKndrqtJwe2t63Gk9M
c3CIwlP6EV+cefgJ+X0mPdye/d6BGKg/pV/T8TJypVnTLYRttlyugLy2nwhhoaa9
MAwava67iSJYKbz95QdAnLdIBxB1N9E=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:48 2026 by rpki-client