Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8bfe350f-c2d9-3a81-a6c7-f83189858b48.roa
File:                     8bfe350f-c2d9-3a81-a6c7-f83189858b48.roa (raw, json)
Hash identifier:          3/zNdtsW6V2XbhRf6Cuhf25jlaMdmWd1Jw93FDxHp1A=
Subject key identifier:   8C:B2:73:CC:A6:5E:73:3A:C8:CC:0C:3A:43:28:71:F1:77:D7:8E:BE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E1FA9A8B4EAB4C5031DA3BF80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8bfe350f-c2d9-3a81-a6c7-f83189858b48.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     64267
IP address blocks:        141.164.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a8:b4:ea:b4:c5:03:1d:a3:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=089cec2a-1e23-4743-a28a-80cead3bbcdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:31:f4:ed:10:67:1b:04:fc:c2:4b:16:f5:
                    43:ec:37:0b:c8:8c:aa:34:fc:0a:b2:d5:bd:d9:80:
                    dd:f3:44:9c:50:1f:32:66:dc:1c:54:ea:c2:49:31:
                    80:29:b0:62:2b:74:ec:8b:5a:34:a7:7f:31:e2:61:
                    39:76:ec:65:ad:fa:17:ea:6d:c8:ef:b5:06:7b:6c:
                    c3:34:04:ef:ef:80:1c:6d:79:1b:99:f6:8d:f8:48:
                    60:82:1e:09:5d:b2:46:46:59:d1:a8:c6:ca:f5:94:
                    f8:c8:81:5b:32:af:a6:63:ec:ee:95:0b:42:27:42:
                    16:0a:ff:d5:d9:b9:00:40:16:ed:17:66:74:14:4d:
                    7f:27:27:44:22:a4:8d:30:1d:74:6c:3b:bd:2d:68:
                    3d:86:5f:2e:7e:6f:2a:52:3e:17:84:e1:c8:d0:ea:
                    22:9a:b6:8f:75:cc:97:a7:28:a0:c0:94:85:f4:4b:
                    3e:43:f4:c4:9c:3f:6d:31:22:97:d8:cf:5e:29:a8:
                    b8:cc:10:e1:b7:b3:22:eb:42:fa:aa:ac:f7:28:a4:
                    98:32:7a:8d:04:b9:61:7d:0d:34:2b:2c:8d:b9:d5:
                    66:4f:ce:5d:6f:9a:c6:63:d2:a9:20:f6:9f:76:d4:
                    73:21:1a:03:55:3a:5f:59:28:df:66:50:bb:15:47:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B2:73:CC:A6:5E:73:3A:C8:CC:0C:3A:43:28:71:F1:77:D7:8E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8bfe350f-c2d9-3a81-a6c7-f83189858b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:96:6d:eb:1b:79:9a:af:06:3c:93:d7:97:db:1b:4f:31:4b:
         65:1a:61:72:68:a0:5e:01:48:80:3c:e9:19:5d:5e:a1:04:37:
         f8:2f:ed:5b:43:fa:8b:f5:02:f2:94:3b:24:ba:75:47:24:9a:
         ae:fa:99:d8:20:b7:c9:9d:2e:51:66:75:cf:5b:b0:9b:01:50:
         2f:54:56:9c:86:1a:aa:de:7b:e3:67:85:5d:49:44:63:6e:4d:
         6e:f4:21:5c:cf:b6:17:8d:56:5b:ed:c4:40:b9:c2:67:37:b5:
         26:9d:b5:27:4d:2d:c8:aa:5b:44:d8:1f:ee:1e:08:e2:df:fb:
         f9:b3:1f:25:a5:c3:74:ac:01:27:b9:e8:47:c9:3b:c5:af:aa:
         32:56:2f:09:dc:0e:81:70:ad:03:74:93:16:98:d6:5b:dd:9b:
         b6:4d:25:01:bd:08:0b:fa:4e:94:62:02:33:55:57:26:f7:26:
         e0:c7:d7:86:9b:fa:e8:da:f8:99:82:81:9f:14:37:84:8f:15:
         c8:05:a8:b6:96:27:87:08:e1:da:54:f4:43:0f:fb:c4:66:59:
         64:ad:6c:f1:eb:99:59:c5:46:88:3b:3f:a2:37:88:87:ce:9a:
         2d:c2:3f:d7:bc:e5:e2:2b:b8:d4:0e:00:33:7d:15:7f:ee:30:
         e4:1d:8d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:10:34 2026 by rpki-client