Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c132c9d6-da91-3521-aefb-99babafe31db.roa
File:                     c132c9d6-da91-3521-aefb-99babafe31db.roa (raw, json)
Hash identifier:          gsvjGt4Ax7tWxa2l/AvIz25BMFPOqwhEbe8G24QvjyQ=
Subject key identifier:   41:97:26:0D:95:D1:44:09:29:81:87:16:04:3A:1B:23:24:77:17:16
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EA78724E33685EB4289B51800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c132c9d6-da91-3521-aefb-99babafe31db.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20001
IP address blocks:        199.101.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:24:e3:36:85:eb:42:89:b5:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=82c3ee41-7763-4ef8-9506-35ffec3a128b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:86:78:03:0b:ec:bd:b3:c8:b0:d0:06:ed:
                    6c:8a:76:be:16:63:33:15:c7:4a:47:73:9f:dc:3f:
                    43:f9:bb:26:08:97:09:6d:37:47:39:e6:a1:18:d9:
                    0d:8d:98:02:cb:d3:97:aa:7d:06:eb:9a:aa:c2:28:
                    ce:96:be:78:a6:a2:6d:fb:76:1b:25:a0:03:fa:5b:
                    99:31:7a:c7:23:2c:96:0c:cd:cd:3c:93:f6:ad:e1:
                    17:99:d2:60:b6:f1:6c:72:43:38:52:3a:a9:46:98:
                    3a:a3:92:18:2b:6d:ac:dd:9f:00:7f:2b:bf:3e:0a:
                    e6:e0:72:93:e8:98:fb:92:f4:30:a4:08:aa:36:f8:
                    c3:53:9c:0c:f3:13:39:3b:71:eb:a8:87:70:b1:65:
                    bd:db:91:ca:29:08:8a:cd:a7:af:17:93:77:0a:d0:
                    ac:ac:52:27:00:09:46:14:f5:c0:4d:06:f9:11:63:
                    19:c6:ec:a2:c6:75:fd:bf:4f:34:87:54:5b:02:26:
                    6f:fc:31:4e:76:b2:1e:4d:7b:ed:8b:6f:65:50:9f:
                    e6:4e:81:8c:63:9b:39:80:8f:31:d0:e4:88:04:d3:
                    59:ff:98:70:84:dd:0c:99:2c:a2:4e:bf:b0:53:a6:
                    72:8c:48:64:55:27:eb:54:88:79:21:fc:b5:13:fc:
                    6b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:97:26:0D:95:D1:44:09:29:81:87:16:04:3A:1B:23:24:77:17:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c132c9d6-da91-3521-aefb-99babafe31db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:7e:60:ec:a7:be:80:00:c5:68:6d:4c:f0:86:91:0c:7e:eb:
         07:09:45:2f:56:0b:d0:c8:29:fd:4e:3c:e3:74:5f:fb:6c:6b:
         fb:7a:a7:6b:2a:76:33:1f:3b:2b:2c:9c:f7:99:21:92:a0:6d:
         48:6a:0e:4d:bb:c3:a4:19:11:23:33:2e:94:8e:eb:b8:26:c9:
         56:8e:87:24:cd:1d:ce:16:ec:51:97:82:7b:92:cb:5d:53:93:
         f1:ee:b0:81:41:9a:49:89:3c:c8:11:15:27:41:c2:3b:8d:c8:
         ed:c3:2c:bf:96:bd:d4:37:1b:00:93:45:0d:a2:4a:04:d3:e7:
         5b:fd:c2:d2:2f:b5:af:73:89:ee:aa:11:67:85:06:68:cb:42:
         81:8c:39:54:ea:42:6b:49:c7:07:23:19:61:ef:8f:7a:a4:a7:
         55:3e:91:35:f3:bc:ec:78:e7:94:0b:d4:36:e5:d2:7b:5e:60:
         a3:62:a0:19:6e:ab:b4:b9:b8:5d:d2:64:be:f0:d4:41:d0:23:
         55:af:e2:2b:ff:7a:3f:15:13:cb:04:80:50:29:48:14:2b:2f:
         8f:a2:df:55:0c:4f:55:57:f0:ee:4b:51:cc:17:4e:a5:77:3b:
         cb:7b:a2:fd:a8:ce:64:d2:7c:93:e7:c5:13:61:4b:97:d5:60:
         0f:e2:4d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:45:52 2026 by rpki-client