Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5d4dd262-19f2-384a-b4ec-081085b9d538.roa
File:                     5d4dd262-19f2-384a-b4ec-081085b9d538.roa (raw, json)
Hash identifier:          lhR2tTsZ1Ijl2/wgDX/yCBhtI/rzsCiH9sKS4ei60vI=
Subject key identifier:   2F:D9:44:56:A1:6B:11:D7:2C:99:BC:79:8F:B5:48:EE:E0:7B:8D:69
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DBA3AD99EC0D9FBE786D6FEC8
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5d4dd262-19f2-384a-b4ec-081085b9d538.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     22516
IP address blocks:        138.229.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:d9:9e:c0:d9:fb:e7:86:d6:fe:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=d3b15198-8527-41a3-a0b5-9618114d4f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:69:bb:ad:36:68:76:96:4e:f1:45:d8:b9:
                    d5:57:77:15:50:69:f7:cd:bd:e6:2b:52:70:3b:a1:
                    04:1d:3e:7a:6c:3b:51:43:95:bd:65:e7:5b:e2:d2:
                    5f:69:51:e1:6a:99:9a:24:5b:d4:c9:a1:9b:b7:b2:
                    d7:56:60:fb:4f:18:e8:0e:91:46:be:32:59:d5:63:
                    02:79:7b:ab:e3:40:d6:ec:d1:45:6d:8f:8a:a6:0f:
                    87:cd:d2:da:5e:b1:87:f1:b9:a9:9c:1f:a1:04:39:
                    a8:c0:a8:62:d6:01:7d:63:9b:a6:43:9f:e7:a3:04:
                    70:ea:1f:80:36:6e:4d:6a:c5:9e:61:70:cf:42:df:
                    d4:80:58:7a:72:be:6d:d1:31:0c:3f:d5:ed:e8:1b:
                    d7:e2:1a:26:d9:ab:de:dd:34:49:97:a0:83:d2:ae:
                    67:3f:31:1c:21:bb:cc:9f:40:a6:ba:a4:d7:08:00:
                    91:01:c5:6f:af:e9:5a:3a:fe:3a:49:4b:cd:94:09:
                    da:8b:22:66:04:44:b9:6a:01:83:00:0a:6f:05:17:
                    e5:d1:d3:66:02:1a:4d:72:9c:f6:fb:92:dd:24:89:
                    09:f2:b5:23:73:97:7f:88:b4:53:1f:15:a9:10:e6:
                    cc:5d:af:b7:7c:4d:18:08:ed:d1:3f:3e:19:5b:be:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D9:44:56:A1:6B:11:D7:2C:99:BC:79:8F:B5:48:EE:E0:7B:8D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5d4dd262-19f2-384a-b4ec-081085b9d538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:db:03:c8:7b:d0:bd:50:55:20:4b:d8:a3:9a:2f:51:1e:8f:
         1a:dd:43:d5:97:40:50:4e:f8:53:3e:42:a1:2e:5b:47:cb:b0:
         c5:bd:48:b2:c2:38:90:a9:9f:7d:5c:8f:74:0c:a2:0a:94:e0:
         f2:e6:dd:b1:7f:ce:c4:b2:e6:64:06:b4:7e:09:af:e4:8d:6f:
         0c:cc:d1:0c:af:b3:81:67:69:d5:61:2f:8c:18:5c:fb:d7:ab:
         c3:11:b8:a8:be:05:39:69:9f:40:59:a5:9e:5e:a2:86:71:97:
         a4:30:cb:b9:46:e0:72:1c:e3:64:4a:2b:ca:ab:3d:45:b9:12:
         33:8e:95:62:ad:94:e9:ea:8c:ac:75:e1:ec:1c:4d:4e:b7:23:
         f1:65:8e:4a:2c:1e:f4:87:50:47:75:78:8d:a4:87:e4:b4:d6:
         14:b8:b1:6c:11:bc:1f:e1:e7:e0:95:35:54:2e:17:47:e1:c6:
         bd:fc:5a:e2:cc:12:11:12:44:c7:5c:0e:60:36:08:8f:1b:b4:
         e6:c4:a1:e4:fc:9a:e1:11:01:36:99:71:d4:af:5d:40:91:a3:
         87:da:20:cf:d3:65:40:75:df:1b:ad:31:6b:79:72:89:f5:56:
         30:e0:0a:a6:47:8a:b0:ad:32:18:2e:5f:57:3c:db:70:80:15:
         92:d5:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:12:36 2026 by rpki-client