Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f8fcad6-5a85-3912-8167-fa6223901813.roa
File:                     8f8fcad6-5a85-3912-8167-fa6223901813.roa (raw, json)
Hash identifier:          YwWMxi6auNsgzYx0T4JS/gyBFJx+p55OVqBRCYBRheA=
Subject key identifier:   99:14:37:25:73:3A:67:B9:D3:51:DB:00:25:4A:9E:48:B1:E5:38:D5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A4960939D0204E1B6069F1900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f8fcad6-5a85-3912-8167-fa6223901813.roa
Signing time:             Mon 23 Jun 2025 12:29:22 +0000
ROA not before:           Mon 23 Jun 2025 12:29:22 +0000
ROA not after:            Sun 21 Sep 2025 12:29:22 +0000
asID:                     20001
IP address blocks:        138.229.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:60:93:9d:02:04:e1:b6:06:9f:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 12:29:22 2025 GMT
            Not After : Sep 21 12:29:22 2025 GMT
        Subject: CN=0432e042-afbc-42a1-8bf1-0337791eceef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5a:bf:d4:59:32:63:fe:fa:16:06:22:e4:3f:
                    1f:d8:e6:f8:42:0f:45:71:52:6d:f3:8a:28:e8:77:
                    8c:9a:f5:b8:92:36:e2:2d:6d:73:85:0e:88:3a:64:
                    dc:50:de:65:5c:bc:72:95:d7:10:b3:bc:3c:49:c3:
                    1c:7c:8a:70:c9:fb:c8:25:38:2c:20:59:b6:50:67:
                    bb:b6:7c:70:a5:07:a5:06:25:67:f9:ba:48:27:2c:
                    9b:87:16:b4:82:06:e9:aa:1a:62:c7:76:25:23:fb:
                    6c:06:7f:74:1c:9f:36:c7:17:5b:f9:c2:a2:3d:1f:
                    6c:2e:e5:95:88:44:bc:22:f8:a5:ce:b9:44:c1:02:
                    49:21:02:c7:08:14:a1:cf:28:62:ab:92:33:51:5c:
                    96:97:06:ed:fa:5f:d8:ed:f6:6b:c2:c7:ac:82:0c:
                    4a:9b:e6:26:45:29:61:ac:92:a5:d8:36:25:d0:94:
                    4c:90:22:64:ed:e8:38:de:13:72:73:23:16:d3:8e:
                    09:b5:a2:13:04:2a:9c:c3:68:71:be:9e:83:1a:a0:
                    e4:48:9e:fd:92:3c:9d:11:85:dc:12:a3:8e:d0:2b:
                    33:b3:bd:e9:0a:64:73:42:d9:70:78:b8:de:b9:0d:
                    76:5a:54:a2:b5:00:01:8e:1a:b6:15:43:0b:b4:ea:
                    36:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:14:37:25:73:3A:67:B9:D3:51:DB:00:25:4A:9E:48:B1:E5:38:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f8fcad6-5a85-3912-8167-fa6223901813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:02:9a:03:03:c8:4d:eb:02:a4:d4:9e:ed:74:ab:fc:32:3e:
         d2:93:f4:a7:4c:3a:f7:d7:83:b8:4c:06:c8:58:5f:33:fb:5e:
         fe:bb:db:07:a6:0c:18:1d:ce:6d:27:f3:97:31:ee:29:78:9b:
         77:fb:34:f2:94:32:9f:4f:58:a6:ca:a7:97:2a:9b:32:e3:ab:
         08:2c:a4:3c:49:dd:42:0c:5e:26:5d:39:41:31:80:82:4f:d9:
         0a:27:4a:47:72:49:29:85:ef:d9:04:a8:6b:35:e7:06:70:61:
         2f:41:b4:52:ab:e3:79:7b:69:00:6b:d5:a4:70:91:23:1a:a0:
         06:8d:69:e7:46:b6:81:d1:47:27:e0:54:df:8b:bd:9e:50:b3:
         41:e7:38:33:3f:b6:3d:6a:4e:e7:bc:46:84:c6:91:55:4d:cc:
         3a:71:67:f0:70:f2:99:aa:4d:99:a6:59:82:dc:4c:ce:0e:ad:
         a1:6b:05:d5:c1:86:ae:6b:ad:1d:1e:96:a3:ab:29:91:13:34:
         4a:29:e7:54:81:74:6b:a3:c1:50:cc:6c:be:b1:cc:09:91:8d:
         ab:22:6a:0d:7a:e8:b1:05:97:b2:d8:68:fc:e2:17:79:32:bb:
         27:d7:e6:b6:ae:81:2d:7d:36:8a:f2:16:b5:41:1d:af:a8:0d:
         6c:a4:0f:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJYJOdAgThtgafGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDYyMzEyMjkyMloXDTI1MDkyMTEyMjkyMlowLzEtMCsGA1UEAxMk
MDQzMmUwNDItYWZiYy00MmExLThiZjEtMDMzNzc5MWVjZWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1q/1FkyY/76FgYi5D8f2Ob4Qg9FcVJt84oo
6HeMmvW4kjbiLW1zhQ6IOmTcUN5lXLxyldcQs7w8ScMcfIpwyfvIJTgsIFm2UGe7
tnxwpQelBiVn+bpIJyybhxa0ggbpqhpix3YlI/tsBn90HJ82xxdb+cKiPR9sLuWV
iES8IvilzrlEwQJJIQLHCBShzyhiq5IzUVyWlwbt+l/Y7fZrwsesggxKm+YmRSlh
rJKl2DYl0JRMkCJk7eg43hNycyMW044JtaITBCqcw2hxvp6DGqDkSJ79kjydEYXc
EqOO0Cszs73pCmRzQtlweLjeuQ12WlSitQABjhq2FUMLtOo2uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJkUNyVzOme501HbACVKnkix5TjVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOGY4ZmNhZDYtNWE4NS0z
OTEyLTgxNjctZmE2MjIzOTAxODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACICmgMDyE3rAqTUnu10q/wyPtKT9KdMOvfXg7hMBshYXzP7Xv672wem
DBgdzm0n85cx7il4m3f7NPKUMp9PWKbKp5cqmzLjqwgspDxJ3UIMXiZdOUExgIJP
2QonSkdySSmF79kEqGs15wZwYS9BtFKr43l7aQBr1aRwkSMaoAaNaedGtoHRRyfg
VN+LvZ5Qs0HnODM/tj1qTue8RoTGkVVNzDpxZ/Bw8pmqTZmmWYLcTM4OraFrBdXB
hq5rrR0elqOrKZETNEop51SBdGujwVDMbL6xzAmRjasiag166LEFl7LYaPziF3ky
uyfX5raugS19NoryFrVBHa+oDWykD3c=
-----END CERTIFICATE-----
Generated at Thu Jul 3 05:12:58 2025 by rpki-client