Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c1308d02-8bb8-3bae-8236-ad169043b158.roa
File:                     c1308d02-8bb8-3bae-8236-ad169043b158.roa (raw, json)
Hash identifier:          g1UoKG21wiNH8jjOjSisfm4MfEBEQtH6Ir/Ek6MyvGk=
Subject key identifier:   46:2D:9F:03:7B:0A:75:FF:90:A4:42:BA:9A:5E:39:0A:16:90:C0:0B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E18AEEC719DD3916A13001000
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c1308d02-8bb8-3bae-8236-ad169043b158.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     64267
IP address blocks:        168.91.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:ec:71:9d:d3:91:6a:13:00:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=b04ea1ee-88df-4bfc-ba21-bde093634c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:4c:a7:fd:d5:d7:1b:a1:4f:fa:5c:a1:da:
                    eb:74:dd:67:dd:b9:f5:92:40:4e:d6:3b:86:1f:eb:
                    8e:1e:ce:74:c3:c6:e5:ff:53:ba:cc:1b:3e:7c:a7:
                    8c:f0:f0:bf:21:7e:d4:69:b3:0d:7a:4f:b0:c3:49:
                    af:df:3c:33:66:41:0c:a4:62:f0:f4:08:4d:28:5f:
                    3b:86:d3:6a:b1:90:56:d9:71:f3:48:1e:6b:aa:f6:
                    31:df:b7:41:49:b3:8e:29:b0:44:be:11:16:8c:f3:
                    e3:2a:b6:f7:fd:c8:a3:56:3c:7e:b7:f3:be:bb:15:
                    61:37:40:4d:b0:d4:8a:ac:84:e8:ce:a6:0f:c6:b2:
                    11:14:61:8d:0d:df:ae:59:ed:a9:df:66:fa:38:f1:
                    01:1d:8c:55:43:fd:36:06:af:5d:0e:85:57:ca:db:
                    ce:47:5f:a8:f4:cd:01:88:39:93:97:06:26:72:a9:
                    fb:10:54:1c:4e:fa:ce:86:91:66:e5:65:25:c1:a5:
                    a8:43:69:52:ce:4b:9f:ac:e7:bf:19:d2:7c:71:a7:
                    30:fb:67:15:87:30:56:bb:a1:94:f1:cb:b6:62:2c:
                    ce:ef:38:97:70:fb:5b:2a:d3:fd:d2:06:98:72:ea:
                    5c:a0:8c:61:2c:db:1e:22:06:c3:68:8c:eb:2f:f4:
                    04:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2D:9F:03:7B:0A:75:FF:90:A4:42:BA:9A:5E:39:0A:16:90:C0:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c1308d02-8bb8-3bae-8236-ad169043b158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:dc:a8:9d:ef:13:0c:90:69:d2:87:1d:71:c1:35:4f:de:d5:
         70:89:20:60:e0:f7:ca:23:23:df:a1:0a:54:df:b7:c3:7f:cd:
         7a:1d:dd:9b:78:f3:c8:2b:4a:1e:75:24:65:f7:c8:f6:0f:f4:
         0c:5d:fc:55:87:db:f1:52:53:cc:96:17:35:7a:08:f8:3b:8b:
         83:1a:d8:85:5e:c3:00:7b:58:7a:ca:81:b7:61:81:a3:d5:1b:
         9d:27:0d:6c:8c:93:ec:f6:b6:29:c4:c6:47:47:b3:91:b7:4c:
         ef:8f:af:e9:94:2c:d6:25:c6:a7:9f:81:7b:6b:ad:52:41:f9:
         9b:e9:f8:44:9a:ab:47:fc:7a:65:8a:f6:cc:99:1b:a8:92:9a:
         b1:79:a5:f7:c3:94:1a:f0:bf:08:e5:1a:af:d0:dc:a2:13:bc:
         03:7d:e3:1e:24:f9:21:f4:82:87:dd:66:26:a6:b0:8e:0c:f4:
         c9:14:9f:48:7f:3d:f1:07:ce:17:00:ca:c6:2a:8d:85:95:eb:
         4e:70:e8:ad:77:ae:b2:78:b9:a3:27:4d:0c:86:db:f3:61:d8:
         f9:55:c1:7e:27:0d:b8:ed:0a:bc:36:08:24:57:00:75:da:bb:
         f4:56:a2:ee:e3:f2:2c:6e:b4:a2:d4:ab:55:34:c8:9d:09:72:
         c7:32:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:14:24 2026 by rpki-client