Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d42d81df-78cb-3705-9865-564dd4db794a.roa
File:                     d42d81df-78cb-3705-9865-564dd4db794a.roa (raw, json)
Hash identifier:          iFYA6vOpzk7gs4hdMyxVjuUjnIP+3NnkuixsFRUAFvQ=
Subject key identifier:   79:A5:D3:90:B4:A6:0E:34:F4:AA:73:3E:5D:2A:27:B4:C8:A1:0B:1F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EA787208AD01B213378E905E0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d42d81df-78cb-3705-9865-564dd4db794a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20001
IP address blocks:        130.44.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:20:8a:d0:1b:21:33:78:e9:05:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=55249754-63f2-4483-84cd-45beeee34aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:65:b4:ab:e2:94:ed:6e:e3:3f:2f:f8:5e:
                    ba:d2:c4:fe:51:98:58:73:e9:45:3f:42:d7:12:a4:
                    96:ba:7d:81:f0:db:5a:0b:6c:8d:2a:aa:15:f9:38:
                    9f:20:3d:d1:ed:ee:51:79:b0:10:ef:25:21:ed:9e:
                    30:ec:2a:94:9e:eb:37:28:ff:34:a3:06:c2:e6:f9:
                    1d:85:0d:2d:41:db:70:12:40:c6:b1:c0:bb:1d:2a:
                    a6:d0:a7:f2:eb:66:9d:6b:4d:2b:ca:8f:50:86:a8:
                    79:68:73:d0:74:ce:cd:b4:42:bc:46:07:0f:41:64:
                    ac:6d:24:a6:ff:61:1d:91:82:44:47:90:2e:e1:6e:
                    14:35:c3:2a:40:aa:63:14:b9:da:14:f5:0e:5b:25:
                    57:01:4e:25:3d:42:d3:9d:b3:8b:48:c8:e1:38:c1:
                    52:59:81:84:a8:fd:49:32:ca:63:2d:05:54:c9:49:
                    45:97:f0:6a:cd:06:b9:6e:7b:56:50:07:58:ec:c3:
                    70:70:ce:77:4c:ca:d1:41:83:8d:dc:06:22:32:fc:
                    a2:22:9f:c1:b2:8c:bc:7f:d3:21:d9:f7:75:cc:31:
                    07:ba:af:65:0b:72:a7:3f:5f:82:40:ea:42:36:0e:
                    f0:cb:b9:61:bf:e2:e6:8e:c3:32:8b:39:fd:d4:cb:
                    02:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A5:D3:90:B4:A6:0E:34:F4:AA:73:3E:5D:2A:27:B4:C8:A1:0B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d42d81df-78cb-3705-9865-564dd4db794a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.44.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:da:6e:3b:f9:fb:12:38:51:1d:4c:c5:f6:25:6c:5d:13:c6:
         58:7e:49:2b:24:8e:51:a7:ae:0b:f2:ec:90:79:2d:1a:07:10:
         29:26:b4:66:68:6d:a5:cf:6e:c3:44:bd:e0:c1:f5:e1:b6:95:
         b5:9a:83:f9:da:42:4f:4c:50:24:26:23:6c:da:6d:14:52:2a:
         bb:40:6a:59:02:58:37:42:b3:7d:9f:ad:7a:eb:23:93:66:81:
         52:e1:08:4e:13:4a:59:02:77:3e:65:37:87:5a:05:9a:a2:10:
         4f:70:9e:02:38:66:f3:89:84:9e:f0:c8:49:e8:65:d3:5d:13:
         f0:a9:6a:44:f7:4a:b6:b3:03:7e:6f:bb:bd:c4:0d:0a:6a:04:
         a4:28:ed:fd:10:03:a0:39:c4:ac:f0:58:13:45:bc:c5:44:b8:
         4a:67:e9:c7:a2:fa:cc:98:1a:e4:0e:1d:9e:cd:b3:58:d5:4b:
         f7:9d:09:f9:4d:df:47:c5:fe:47:a2:d1:88:18:0c:df:b7:18:
         ec:77:63:c0:24:73:5a:ee:e1:20:8d:5a:75:0d:91:bc:89:0d:
         6c:e7:63:84:42:65:95:ed:9e:92:18:d6:2f:09:55:17:ff:0c:
         11:b2:05:fe:a6:60:72:62:be:f3:20:8c:3b:ac:e0:00:b8:92:
         e3:32:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:36:15 2026 by rpki-client