Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6adc3411-8ac3-3c07-94de-262d7701c722.roa
File:                     6adc3411-8ac3-3c07-94de-262d7701c722.roa (raw, json)
Hash identifier:          Vjcb5D6lkfPCYl8q33y0lHa2j9voIXByuK0J5vCyanc=
Subject key identifier:   DB:1F:ED:AB:EB:FA:3C:07:85:90:09:46:28:85:4C:08:D8:2D:66:85
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EA798E2388826F1266CBC4A40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6adc3411-8ac3-3c07-94de-262d7701c722.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     64267
IP address blocks:        199.34.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:e2:38:88:26:f1:26:6c:bc:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=749c4e38-4266-442d-aaf6-08227908504e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:70:22:7f:88:90:ad:9c:be:97:ed:c2:31:aa:
                    0e:b3:d6:25:14:1a:86:1a:eb:3d:d6:e2:d1:62:c5:
                    14:54:3f:7a:95:2e:eb:5c:83:9f:7d:24:60:72:d0:
                    f8:5a:0d:2b:92:42:1d:42:47:b5:ac:3f:b3:46:83:
                    18:5e:37:58:09:31:bc:9b:7b:13:13:6b:35:2a:d3:
                    46:9a:9b:3e:24:65:6f:70:bb:56:f2:a6:69:53:88:
                    e9:2d:13:e1:ab:7d:ce:24:bf:dc:8b:60:cd:7e:3a:
                    3a:63:36:9c:17:3a:25:08:ec:fe:63:a9:f1:e4:35:
                    14:5d:e8:9f:de:ec:7d:13:90:e3:25:b9:a4:c5:89:
                    b1:67:56:87:af:02:bf:89:8b:6a:5d:97:35:9c:76:
                    1d:31:a7:8e:14:ca:bd:ef:8a:e1:e0:de:34:c0:08:
                    f2:42:0a:23:2f:cb:7e:e4:59:48:64:e4:a9:c1:1d:
                    7f:f9:ce:20:a1:33:04:cc:14:ec:54:d6:24:f6:32:
                    e2:16:c1:2d:e5:7f:b0:e7:2f:d2:8d:27:4f:bc:d2:
                    5c:ea:e4:fb:88:25:b0:a3:33:97:ca:37:3b:92:8b:
                    ee:95:19:c1:1a:6a:5e:a6:41:8d:dc:9b:d4:42:78:
                    bc:69:30:22:b7:15:cf:e7:d5:6f:5b:aa:43:d6:0a:
                    ce:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1F:ED:AB:EB:FA:3C:07:85:90:09:46:28:85:4C:08:D8:2D:66:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6adc3411-8ac3-3c07-94de-262d7701c722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8e:61:c4:89:db:05:ed:85:ec:fa:fb:37:03:72:ba:52:c2:
         60:61:c9:1d:ea:50:84:f1:01:f2:ce:83:e5:21:24:49:ab:f0:
         3b:18:e3:d4:8f:49:3c:ee:7f:d6:32:3e:7e:aa:c4:a8:e9:e3:
         01:dd:2c:4e:33:99:49:6f:22:64:19:f5:57:06:14:88:46:b7:
         d5:ff:b9:67:12:fa:62:82:79:df:8b:b9:dd:9b:2a:ed:84:e9:
         82:cf:09:52:af:50:b9:90:0f:32:94:9a:e6:36:89:34:ec:5c:
         5c:99:d1:af:6f:c6:f0:df:54:a0:c9:d7:eb:b9:ab:51:95:e5:
         43:d9:62:0d:36:f2:4a:eb:12:33:86:03:11:32:77:d6:2f:d3:
         2c:30:e0:ef:82:74:d3:02:8c:7a:25:b0:51:0a:8f:59:5b:4d:
         1a:5e:31:3c:3c:47:2b:dd:08:cd:56:0b:79:f4:4b:fb:2c:86:
         30:34:7b:2d:40:e8:87:a5:25:cc:df:f6:94:aa:12:d1:f9:06:
         c1:5d:d4:1a:55:09:25:ba:ab:b5:34:26:4c:3a:45:79:45:34:
         c6:0b:f3:a2:85:51:b1:5c:55:79:df:07:c0:61:a5:03:c1:d9:
         81:f6:7f:18:39:e2:28:a0:1c:a5:51:5b:c4:74:7b:1b:92:9d:
         7b:bd:ff:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:45 2026 by rpki-client