Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d54f124-b32f-3943-a574-7341b6879d7a.roa
File:                     3d54f124-b32f-3943-a574-7341b6879d7a.roa (raw, json)
Hash identifier:          icDsaJta4+6xr/vmcXL6IUjxYF4uA3sSqa72DcZNR/c=
Subject key identifier:   9D:3E:BE:95:27:49:B9:CD:CD:8F:97:CE:E5:64:44:14:8B:18:2B:22
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F49737A2738DE008DEA021280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d54f124-b32f-3943-a574-7341b6879d7a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        138.229.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:7a:27:38:de:00:8d:ea:02:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d36674b8-d36b-4dba-bd91-bebff7c66810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:52:11:97:30:05:ed:b0:91:d9:cd:9f:b6:1b:
                    1b:92:6d:f2:e8:32:31:39:bc:36:40:87:27:5a:4d:
                    27:7c:00:31:e7:39:53:de:b6:d4:40:06:91:2d:0d:
                    39:b2:bb:c1:47:c4:bb:88:65:da:b3:ce:47:8f:2c:
                    1f:05:8e:7f:80:d4:79:8e:61:8c:9b:66:58:16:8d:
                    b0:46:93:d3:7a:22:34:72:84:41:a8:2f:9a:9d:a5:
                    c8:9c:62:0c:05:5a:ca:74:e9:45:ba:f4:2d:f8:f8:
                    e0:63:1e:52:4c:31:bd:cc:5f:77:f0:11:2c:1e:9c:
                    75:11:de:44:b3:be:7e:9f:19:35:f3:de:88:91:78:
                    e4:60:de:c0:c1:13:d5:06:fb:a2:16:db:51:9c:e3:
                    b4:e3:18:cb:38:89:36:dd:98:09:5f:f2:c4:67:bd:
                    44:3f:05:cd:b8:56:ef:c3:3e:79:96:3d:b1:c6:77:
                    aa:30:14:c5:11:52:55:61:85:30:86:32:0c:32:75:
                    19:fe:7e:e1:a9:9f:35:97:70:22:ae:dd:08:0d:63:
                    8c:a4:78:e0:b4:17:bf:50:47:12:45:bf:58:cf:dc:
                    d6:80:4c:17:7b:7c:23:93:cc:14:75:71:19:80:4f:
                    ab:a6:cb:f1:7d:41:e8:02:68:21:41:f1:0b:4c:0e:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3E:BE:95:27:49:B9:CD:CD:8F:97:CE:E5:64:44:14:8B:18:2B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d54f124-b32f-3943-a574-7341b6879d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2b:d5:47:a5:bc:d2:d4:8c:da:64:30:dd:e2:ce:91:95:3b:
         d1:13:14:e0:f7:50:61:37:56:4b:45:8d:94:70:b2:89:de:b7:
         f2:c0:38:44:32:a8:c9:97:1d:0e:69:3f:09:ba:24:a0:ff:fd:
         23:68:86:12:28:ec:b2:9b:c6:d7:ca:a7:66:3f:3d:77:56:a9:
         11:82:01:ac:ca:44:61:23:27:2c:2e:7b:09:d9:18:24:bd:78:
         7d:80:0a:6d:ec:1b:3a:b9:b1:34:ce:29:63:62:0e:87:83:e9:
         46:e7:17:ef:cc:4a:6f:3e:d0:68:c7:a6:c5:86:a3:74:53:30:
         ea:3c:fa:9e:6f:c4:c5:53:75:b8:ba:b6:0a:e7:af:d1:de:d9:
         07:6f:19:13:5b:10:3e:83:54:f9:e8:84:d4:d6:12:e0:94:33:
         30:93:b4:4f:98:73:94:02:df:e3:bf:16:3b:09:2f:d0:d1:7f:
         e1:92:c1:d4:f4:c1:12:ff:7c:30:bc:b0:e1:c5:af:c1:bb:24:
         40:f4:8f:a0:52:3f:98:ac:d6:35:08:e5:7e:cb:ee:dc:1d:80:
         2b:66:dd:4a:da:c9:93:e2:67:cb:59:12:1c:17:60:88:71:d4:
         cf:ad:7f:f8:85:47:d7:c9:dd:de:68:55:5c:e6:5d:52:0d:72:
         3e:e0:f2:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3onON4AjeoCEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDM2Njc0YjgtZDM2Yi00ZGJhLWJkOTEtYmViZmY3YzY2ODEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFIRlzAF7bCR2c2fthsbkm3y6DIxObw2QIcn
Wk0nfAAx5zlT3rbUQAaRLQ05srvBR8S7iGXas85HjywfBY5/gNR5jmGMm2ZYFo2w
RpPTeiI0coRBqC+anaXInGIMBVrKdOlFuvQt+PjgYx5STDG9zF938BEsHpx1Ed5E
s75+nxk1896IkXjkYN7AwRPVBvuiFttRnOO04xjLOIk23ZgJX/LEZ71EPwXNuFbv
wz55lj2xxneqMBTFEVJVYYUwhjIMMnUZ/n7hqZ81l3Airt0IDWOMpHjgtBe/UEcS
Rb9Yz9zWgEwXe3wjk8wUdXEZgE+rpsvxfUHoAmghQfELTA7wvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ0+vpUnSbnNzY+XzuVkRBSLGCsiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2Q1NGYxMjQtYjMyZi0z
OTQzLWE1NzQtNzM0MWI2ODc5ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsr1UelvNLUjNpkMN3izpGVO9ETFOD3UGE3VktFjZRwsonet/LAOEQy
qMmXHQ5pPwm6JKD//SNohhIo7LKbxtfKp2Y/PXdWqRGCAazKRGEjJywuewnZGCS9
eH2ACm3sGzq5sTTOKWNiDoeD6UbnF+/MSm8+0GjHpsWGo3RTMOo8+p5vxMVTdbi6
tgrnr9He2QdvGRNbED6DVPnohNTWEuCUMzCTtE+Yc5QC3+O/FjsJL9DRf+GSwdT0
wRL/fDC8sOHFr8G7JED0j6BSP5is1jUI5X7L7twdgCtm3UrayZPiZ8tZEhwXYIhx
1M+tf/iFR9fJ3d5oVVzmXVINcj7g8tE=
-----END CERTIFICATE-----
Generated at Wed Sep 30 21:12:54 2026 by rpki-client