Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b61d3517-f426-3f28-a78b-1ba4163f018e.roa
File:                     b61d3517-f426-3f28-a78b-1ba4163f018e.roa (raw, json)
Hash identifier:          n6vUHG72vTV0wPnhJ9axlzoKFoAmDox/N809H9g2h5I=
Subject key identifier:   18:84:B3:FC:C6:5C:16:15:0C:FA:C8:3B:F6:AF:10:E8:BE:07:43:92
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD99CF64A41F2DC576891F500
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b61d3517-f426-3f28-a78b-1ba4163f018e.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        130.254.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:f6:4a:41:f2:dc:57:68:91:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=9f99173f-8f70-46ea-9f3a-3084796b3d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:09:15:9c:45:92:9f:da:cb:24:1b:73:d0:c2:
                    6e:8a:19:e4:d1:3e:62:76:90:fa:c4:8b:54:6c:66:
                    20:c8:50:8b:83:67:86:00:f6:72:14:c4:fd:24:05:
                    43:85:f2:56:28:70:1c:7a:2c:db:8e:ad:b8:a0:23:
                    cd:51:9e:d4:6e:2f:20:56:8e:85:cd:42:21:a4:b0:
                    62:2c:22:54:61:07:2f:49:58:45:8a:35:45:a3:8b:
                    48:83:00:1a:cf:e9:8d:dc:67:24:b2:d9:97:85:e9:
                    cd:2c:b2:30:61:9a:9f:ee:3d:56:f3:cf:c8:74:62:
                    0f:57:2c:cc:45:cb:cd:14:25:c4:15:db:87:17:ca:
                    f6:09:90:38:f4:40:7e:6c:c8:30:b3:5b:c7:d4:38:
                    ef:cb:5d:ef:bc:69:46:7b:e7:e4:71:01:b4:ad:78:
                    98:2c:50:b2:59:42:98:65:1b:cd:56:18:cf:6c:24:
                    68:48:06:85:aa:2a:39:c8:63:1c:b9:c6:21:a6:d4:
                    36:52:16:97:70:9a:44:af:f0:de:dc:0d:cf:28:ec:
                    f3:fa:d3:6a:d8:87:3b:7e:11:13:51:7e:71:30:e9:
                    09:da:64:10:23:6a:ee:0e:1d:a4:a1:b6:8c:1e:6d:
                    57:32:f4:2c:c0:c7:01:0a:ee:7f:fc:a3:f3:b0:76:
                    3c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:84:B3:FC:C6:5C:16:15:0C:FA:C8:3B:F6:AF:10:E8:BE:07:43:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b61d3517-f426-3f28-a78b-1ba4163f018e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e6:40:05:45:1b:ad:32:a9:32:fe:af:33:cc:a7:93:75:53:
         f4:97:97:b3:8b:12:e8:38:36:30:b9:d7:ed:75:f2:30:3c:64:
         01:33:94:b6:34:48:34:33:c7:37:c6:03:fd:30:e0:47:b6:64:
         cb:1f:b8:81:99:23:16:03:29:1f:e9:c9:24:14:06:2b:46:f1:
         cb:9f:5d:5a:53:8a:23:fd:4a:ec:b3:08:f4:dd:9f:13:4d:a6:
         03:82:68:ef:82:6b:ae:54:ad:6e:2e:b7:1f:1a:12:3d:45:d4:
         97:e7:ed:eb:73:98:7c:f7:74:54:cf:3e:5d:b5:e5:a8:c0:c7:
         78:b7:15:e4:ac:5e:5b:9e:b9:0d:7e:65:77:51:31:5e:61:bb:
         d9:0d:ab:39:98:f3:18:34:49:0d:fc:4c:35:b0:2b:c1:b9:70:
         0d:ee:3f:f6:df:39:3f:a7:1e:91:38:ee:47:c4:52:9c:02:6a:
         4b:94:97:ce:fd:00:f7:29:52:32:24:66:45:52:18:a9:9f:a4:
         02:8e:fd:ad:98:26:64:b9:6d:85:d0:77:bf:3f:51:46:24:eb:
         0c:a7:ac:42:d9:a3:2b:a1:e8:3c:e0:46:af:f4:c8:ad:e1:f9:
         77:75:9f:2f:7e:97:e1:bc:3f:45:a5:42:db:3c:23:22:92:a1:
         b2:af:d8:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnPZKQfLcV2iR9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk
OWY5OTE3M2YtOGY3MC00NmVhLTlmM2EtMzA4NDc5NmIzZDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQkVnEWSn9rLJBtz0MJuihnk0T5idpD6xItU
bGYgyFCLg2eGAPZyFMT9JAVDhfJWKHAceizbjq24oCPNUZ7Ubi8gVo6FzUIhpLBi
LCJUYQcvSVhFijVFo4tIgwAaz+mN3GckstmXhenNLLIwYZqf7j1W88/IdGIPVyzM
RcvNFCXEFduHF8r2CZA49EB+bMgws1vH1Djvy13vvGlGe+fkcQG0rXiYLFCyWUKY
ZRvNVhjPbCRoSAaFqio5yGMcucYhptQ2UhaXcJpEr/De3A3PKOzz+tNq2Ic7fhET
UX5xMOkJ2mQQI2ruDh2kobaMHm1XMvQswMcBCu5//KPzsHY83wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiEs/zGXBYVDPrIO/avEOi+B0OSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYjYxZDM1MTctZjQyNi0z
ZjI4LWE3OGItMWJhNDE2M2YwMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv51MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjmQAVFG60yqTL+rzPMp5N1U/SXl7OLEug4NjC51+118jA8ZAEzlLY0
SDQzxzfGA/0w4Ee2ZMsfuIGZIxYDKR/pySQUBitG8cufXVpTiiP9SuyzCPTdnxNN
pgOCaO+Ca65UrW4utx8aEj1F1Jfn7etzmHz3dFTPPl215ajAx3i3FeSsXlueuQ1+
ZXdRMV5hu9kNqzmY8xg0SQ38TDWwK8G5cA3uP/bfOT+nHpE47kfEUpwCakuUl879
APcpUjIkZkVSGKmfpAKO/a2YJmS5bYXQd78/UUYk6wynrELZoyuh6DzgRq/0yK3h
+Xd1ny9+l+G8P0WlQts8IyKSobKv2Ik=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:48 2026 by rpki-client