Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0002bd40-fba9-3b8a-90be-d06e2aae82fb.roa
File:                     0002bd40-fba9-3b8a-90be-d06e2aae82fb.roa (raw, json)
Hash identifier:          NzP/5VdjBXcIOzPxLwVA0h8GrePvixEmTY3hrql7YRw=
Subject key identifier:   C4:4D:58:63:B6:95:A2:8B:E4:B8:6A:1E:76:A4:F3:59:3B:C5:98:3B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FED2D8C2077733DEA0D00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0002bd40-fba9-3b8a-90be-d06e2aae82fb.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        138.229.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ed:2d:8c:20:77:73:3d:ea:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=da352284-19c4-4b00-9511-1acfbeab4d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:64:b2:ca:34:77:54:85:98:16:61:ac:12:cc:
                    57:ee:2f:dd:fc:e9:42:e9:86:5e:15:2a:23:f3:25:
                    a1:12:12:7b:4f:9b:87:cb:6b:66:fd:02:06:10:32:
                    5a:61:af:13:75:eb:83:7b:d5:e0:89:67:5e:10:1a:
                    e1:93:94:7e:86:f3:2f:96:7d:bc:b4:58:51:ad:27:
                    a8:25:82:22:95:03:00:66:c2:f6:24:d0:2f:e4:06:
                    6d:b7:26:18:01:78:29:d4:b3:bd:2c:78:e0:62:2e:
                    63:86:53:c0:41:85:b8:5f:06:4a:bf:de:ff:a6:7f:
                    81:b7:56:b2:49:e9:5b:f5:60:39:a4:7d:6b:5d:30:
                    1e:11:f5:fd:12:48:73:a6:2b:e1:7b:2d:82:3e:52:
                    a2:6f:4e:4a:b2:26:6f:ff:0d:d9:34:91:a9:74:3a:
                    bb:4c:bb:4b:a6:1d:13:b2:01:c5:02:87:ce:e9:db:
                    98:bc:e4:6b:d5:9d:b8:71:d5:8c:27:f2:df:f8:ab:
                    60:db:0b:d8:89:12:50:5c:be:3f:ca:8c:1a:ab:97:
                    6b:1e:f1:ad:8a:20:fb:fb:fc:33:3f:61:8b:c2:da:
                    d1:e4:d7:f8:da:2b:aa:81:94:69:a1:cb:5d:9d:e6:
                    da:a4:cb:a3:95:f4:a3:1c:88:cc:2f:a4:d8:0e:fe:
                    4f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4D:58:63:B6:95:A2:8B:E4:B8:6A:1E:76:A4:F3:59:3B:C5:98:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0002bd40-fba9-3b8a-90be-d06e2aae82fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:f0:91:24:8c:80:04:54:ca:10:ae:73:76:93:d6:0b:3a:04:
         fd:18:be:a3:c1:eb:44:65:7f:c5:5f:ed:9b:29:70:8c:cd:dd:
         7c:83:dd:72:3d:67:b6:29:a0:90:9a:dd:76:02:eb:cc:2a:1f:
         21:94:28:36:71:d1:f1:ad:58:68:d7:31:36:e2:d2:44:bf:a9:
         57:36:1f:c2:0a:ef:e5:86:7c:5f:af:ce:3e:cf:32:39:60:11:
         f0:36:5c:fc:fd:0a:f1:5d:6c:24:38:ce:75:40:25:85:f5:19:
         be:32:4c:c8:af:d1:a1:40:73:28:52:9b:69:7e:ad:42:ef:9f:
         15:32:55:48:6b:57:90:a4:71:d5:66:9b:68:dd:96:93:90:25:
         75:31:de:c6:d2:75:5d:3b:18:fe:ad:98:5c:9d:56:4e:32:08:
         c4:12:6a:59:c2:8b:aa:e1:4b:b0:0c:3c:d2:b4:b3:66:cd:b1:
         41:7b:16:97:37:45:6f:ab:93:35:d6:2f:d5:ef:fb:be:fa:ba:
         66:71:84:9d:e4:77:c4:17:46:f0:ff:8d:13:51:95:eb:92:0f:
         87:35:4b:a0:3b:37:40:d1:b4:e8:8c:65:33:48:79:6a:c9:88:
         17:f2:4a:18:f9:11:d2:05:02:0a:20:1b:d8:23:c3:64:9a:6d:
         5f:e5:20:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:07 2026 by rpki-client