Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/990b7095-64fc-3160-8b2f-b22cb9bfb782.roa
File:                     990b7095-64fc-3160-8b2f-b22cb9bfb782.roa (raw, json)
Hash identifier:          rqDmpzACxsS8QpuBKA/rmYDPMK9C2yvcRJz+F1huvpw=
Subject key identifier:   26:4C:38:E4:04:D1:88:1F:86:C4:72:00:86:6B:EC:3F:6F:7E:D0:5E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E15E46A9C0EFE7640525AA980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/990b7095-64fc-3160-8b2f-b22cb9bfb782.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     397630
IP address blocks:        130.254.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6a:9c:0e:fe:76:40:52:5a:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=78d38e6a-aab1-46bb-891d-56cc4329cd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:b1:14:78:30:76:f1:e3:5d:a4:6a:98:2c:
                    7b:11:77:7b:3c:7f:fe:c8:fc:bf:e3:ff:51:0e:14:
                    45:dc:34:76:44:d8:24:18:e4:a3:27:8b:2c:ad:12:
                    f3:73:92:5d:ba:28:f7:8c:b9:40:18:40:70:8a:fd:
                    09:f2:72:14:72:40:7b:cc:e4:79:f2:b6:82:03:4c:
                    1a:93:14:29:49:da:66:39:e2:e0:a5:1b:b7:aa:0d:
                    09:4d:c7:81:17:c2:92:0c:d2:7d:36:7c:75:84:17:
                    ae:34:84:05:f1:08:0d:3e:c7:07:e2:43:2a:e7:e6:
                    75:fc:41:d2:26:38:af:dc:0d:b3:03:cf:c9:82:0e:
                    5b:bb:bd:09:cd:7c:e6:97:e6:e3:20:8b:1e:db:81:
                    11:5c:54:cc:82:d4:56:0e:0b:6a:41:f2:a7:21:94:
                    57:1f:d6:cd:7c:22:4e:61:8a:70:81:61:5f:d8:95:
                    40:8a:79:f1:1c:ab:d5:29:53:31:3a:21:da:ff:ca:
                    6d:ce:30:95:c6:49:3d:f4:88:c1:1d:a5:02:61:65:
                    d9:15:2d:e9:4e:cf:02:ca:71:d3:31:40:2d:5e:a8:
                    f0:5a:37:58:4e:dd:e7:28:eb:35:94:8d:2c:6f:20:
                    54:87:b9:0c:a5:ff:47:b6:29:9b:92:e3:1b:8d:e8:
                    f7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4C:38:E4:04:D1:88:1F:86:C4:72:00:86:6B:EC:3F:6F:7E:D0:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/990b7095-64fc-3160-8b2f-b22cb9bfb782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:57:db:18:60:70:65:b6:f2:a4:05:77:ae:76:7a:30:f5:e7:
         46:60:00:f2:37:16:ee:51:33:c9:9a:59:ae:1b:ec:55:0e:b7:
         05:3a:28:44:95:b4:14:00:ce:c9:50:69:c8:6f:ce:58:7b:f5:
         1e:92:40:fe:8c:3f:fa:60:05:eb:40:c6:a9:3f:85:bf:97:23:
         9a:87:02:8a:d5:58:da:1d:84:01:97:82:4b:c2:a5:57:94:c8:
         c0:cd:ed:c9:ce:f4:34:71:b9:db:2f:c8:98:8a:7c:ad:17:d9:
         3c:b4:ea:dc:54:9d:da:2d:14:8d:57:86:8a:ca:44:6a:1c:57:
         aa:33:77:ce:d4:38:63:2e:f0:03:97:5a:7f:cf:ed:f4:fa:5c:
         d1:da:96:9f:3d:c5:b4:c6:a5:5b:cc:1e:5e:bc:6a:50:4a:d4:
         c3:ea:1b:77:f4:d6:38:a2:8a:8c:f6:68:1b:f6:e3:61:0b:61:
         51:69:e4:12:65:70:25:00:0e:39:d0:fd:31:76:f7:49:c8:c3:
         0c:57:0c:5c:b9:88:82:67:ff:e5:3a:20:38:b8:b4:44:64:33:
         7d:c3:d5:c5:8d:2d:e5:33:a9:34:dc:61:5d:7b:33:c8:88:09:
         99:98:64:74:b9:3a:ba:ce:19:2a:b6:8c:e7:96:ed:5a:84:d3:
         89:d7:b3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:05:57 2026 by rpki-client