Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/69fda7a4-b93d-35a2-a803-3cfabfc6bc2d.roa
File:                     69fda7a4-b93d-35a2-a803-3cfabfc6bc2d.roa (raw, json)
Hash identifier:          3ZAT2MyADy7pUoGrMe8eFrHMcTvVqsQvUKuYqfctQAE=
Subject key identifier:   00:F5:23:BE:C4:66:B6:CC:E9:53:58:42:A1:DE:67:3F:FB:FD:00:F7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FC1BA2D42ACD989FE3900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/69fda7a4-b93d-35a2-a803-3cfabfc6bc2d.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        138.229.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:c1:ba:2d:42:ac:d9:89:fe:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=f4103e00-ebb1-4d4b-aac3-dacfcfed278b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:66:0c:d2:f9:b3:e0:ee:3a:6b:c1:45:27:
                    1b:38:9e:48:ee:4b:51:e4:8d:f4:49:6f:43:4b:32:
                    cc:e8:f4:6a:ea:df:63:2c:b1:ee:2c:b0:8b:8e:47:
                    d6:d2:ec:82:8e:28:13:32:98:54:bf:55:12:d0:32:
                    a8:d1:bb:cb:df:35:85:8b:3b:7a:62:a2:07:4f:06:
                    37:ec:68:c2:fc:fe:bd:53:74:41:4e:71:14:58:bb:
                    bb:57:17:8f:bb:54:e7:29:8f:a3:17:42:18:ea:2e:
                    65:6f:0e:ee:0d:04:fb:06:a6:03:40:6d:51:fc:15:
                    fe:f7:1f:e6:f3:8a:7a:9a:3f:84:0b:d0:9c:77:f6:
                    d6:25:a5:7a:7e:55:e4:0f:d4:5a:2a:3e:b2:a1:1a:
                    5f:b9:73:c1:69:bc:0e:af:d1:09:71:ad:ca:69:28:
                    33:7a:c9:24:b9:f3:f0:fe:bc:49:e1:bb:f1:93:70:
                    ce:0b:c4:79:81:43:a1:95:19:b8:e1:a8:4c:e2:1f:
                    02:6c:e4:54:2f:39:70:21:fb:e7:79:fb:db:9b:8b:
                    09:9b:cf:d8:62:9c:cc:e8:95:63:81:b0:6b:8d:25:
                    08:7a:ec:16:3b:25:89:fa:95:98:ca:c4:52:72:4c:
                    5e:1b:88:8e:37:a9:84:35:93:e5:ad:72:c3:a9:b0:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F5:23:BE:C4:66:B6:CC:E9:53:58:42:A1:DE:67:3F:FB:FD:00:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/69fda7a4-b93d-35a2-a803-3cfabfc6bc2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:58:c6:ae:9d:67:b4:a0:84:cf:13:61:8a:54:ab:b8:3a:e5:
         f4:ed:4c:a1:01:77:d2:8e:66:4c:2a:66:f2:be:9d:68:ed:ce:
         6d:88:b1:1b:f5:f8:32:1c:93:02:a4:fe:53:87:5a:83:01:8f:
         ae:bf:0a:46:91:94:5e:d5:f5:c5:b6:88:c9:25:7f:13:cc:45:
         07:92:29:f5:37:ad:46:24:61:88:a4:2d:45:b3:91:2a:7b:54:
         6b:42:6c:ab:86:a5:df:38:ee:e8:bf:7c:22:a9:d0:0a:37:a1:
         c4:e6:5d:44:c2:4c:f1:3e:f3:95:73:17:8a:22:fa:a5:03:9f:
         65:49:4e:48:18:59:ad:f1:c4:3d:5d:78:1b:e8:0a:d1:b5:8c:
         ab:a7:ef:51:40:2f:2c:29:a3:b8:86:1a:03:27:15:95:f1:ba:
         a1:f2:70:60:d0:c0:67:6d:41:35:ce:31:16:04:7b:79:ae:bc:
         9d:9e:d5:17:3e:16:e1:4c:42:82:1f:23:f1:a8:0a:a9:e8:ed:
         43:fc:2d:dc:0d:7e:0d:21:06:71:b1:90:ca:ef:48:7d:95:03:
         62:d7:e9:e9:a2:2b:09:cb:f3:72:e8:a1:dd:ea:10:d7:d9:a7:
         95:35:d5:a5:31:f6:24:79:85:68:83:9e:10:24:03:fa:bb:62:
         6d:12:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:23 2026 by rpki-client