Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/886d5a18-ffef-3fbb-9bfa-d095b4e03de0.roa
File:                     886d5a18-ffef-3fbb-9bfa-d095b4e03de0.roa (raw, json)
Hash identifier:          nvplQK2+WzsJzuzc3/CrgxxBcCAI2TzQrisH8ctlqvw=
Subject key identifier:   66:0A:81:17:6A:64:C3:01:D3:94:18:47:D8:6A:44:8F:2E:3B:BA:3C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DC995BAB103150DAC1B154980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/886d5a18-ffef-3fbb-9bfa-d095b4e03de0.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     20001
IP address blocks:        138.229.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:ba:b1:03:15:0d:ac:1b:15:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=7e643afd-67a2-4118-a11f-2431a51d4456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b1:df:69:fb:41:bf:cf:45:f4:a1:25:3a:46:
                    a5:20:1d:9e:e2:ff:29:31:a4:1c:5a:48:04:f3:1f:
                    da:df:31:8e:75:c7:91:1d:18:d4:2c:f7:dd:9d:c8:
                    be:84:5e:71:47:55:d4:38:a8:b8:f3:9e:5c:fb:e9:
                    91:c6:d9:51:87:08:80:db:09:a4:cf:0b:a7:88:d4:
                    76:af:94:71:9f:14:b5:0d:60:8c:39:c4:37:82:3d:
                    b9:3e:4a:1d:cf:16:b4:02:b1:01:74:d3:83:29:02:
                    61:9a:ef:65:24:f8:3b:2a:b0:6e:69:40:07:79:c3:
                    a0:d9:de:b8:32:ae:ca:34:41:23:9d:76:ab:e6:94:
                    de:45:c7:1c:04:c4:b7:e5:dd:fd:c1:a1:36:87:c1:
                    aa:eb:2b:36:61:bc:3f:cb:06:ac:03:53:e6:8b:5e:
                    03:91:38:c9:56:aa:62:5d:df:31:c2:3f:07:1a:ee:
                    af:46:56:18:06:ba:74:9f:c1:9b:c9:36:33:4b:62:
                    9d:03:bc:c8:0c:75:fe:b6:5e:d4:63:08:01:61:ff:
                    79:a1:03:7b:20:3b:22:76:32:71:69:38:af:98:9a:
                    5f:25:dd:6d:5d:6e:1e:b5:76:2a:ea:e3:50:56:85:
                    f6:90:9c:a6:5a:58:ac:08:27:e0:1a:30:3a:af:44:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0A:81:17:6A:64:C3:01:D3:94:18:47:D8:6A:44:8F:2E:3B:BA:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/886d5a18-ffef-3fbb-9bfa-d095b4e03de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4d:ef:a5:a4:2c:93:7d:5d:64:41:74:46:57:8a:c2:9f:33:
         48:aa:81:94:24:ae:44:13:e6:f3:ce:11:6a:e6:9e:3f:6a:37:
         d5:61:b1:16:ff:07:7c:91:f0:74:f0:81:c7:33:f8:8a:ec:d2:
         f4:10:30:45:35:ce:4e:13:88:46:fc:01:4a:70:38:d5:70:bf:
         cb:07:36:f3:28:56:4d:18:41:e3:2e:80:ca:7e:28:1a:41:a3:
         de:59:7d:13:0f:f2:20:6f:df:77:c1:22:9a:2f:d2:9d:93:e2:
         f7:c5:b2:51:da:e6:e1:e9:fe:72:e2:26:33:5e:bb:2d:93:2b:
         5f:36:1f:45:18:3b:ba:7a:ee:1e:ae:a2:9c:92:1b:dd:3f:ff:
         1c:e2:a6:1d:e0:c3:d9:fd:4d:fd:69:42:35:30:fc:45:c3:37:
         1b:43:83:f0:fc:e7:9b:5e:9a:38:0d:e8:55:4c:d0:0c:ea:5a:
         f1:03:c6:08:0f:d4:90:15:dc:8c:ca:47:2e:70:a4:fb:37:84:
         4e:b4:60:b6:0c:01:09:2f:e8:b5:95:8c:98:5c:d8:d3:14:12:
         64:6e:4c:b7:40:55:63:80:53:70:60:68:72:74:f4:e8:08:11:
         df:b4:fb:6d:74:8b:7e:8f:ed:18:c8:5c:f8:3f:37:c2:df:78:
         1f:57:bf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:16 2026 by rpki-client