Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e12574a4-24f1-3e90-a2b7-291af8569c8b.roa
File:                     e12574a4-24f1-3e90-a2b7-291af8569c8b.roa (raw, json)
Hash identifier:          wQWR2QOOlDqjAE9YID1EiaPXis2E/2TCl+FV4gCJxMs=
Subject key identifier:   96:DD:1A:5B:82:60:DD:AF:8A:35:C3:B4:A2:DD:97:7F:02:FB:84:93
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DBA3B11B92E2245D0DEB7C5C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e12574a4-24f1-3e90-a2b7-291af8569c8b.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     7029
IP address blocks:        138.229.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:11:b9:2e:22:45:d0:de:b7:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=f030e0a1-b34a-49a8-9429-dbf1864adb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:16:ac:66:20:75:37:fb:6d:2c:6b:2d:80:
                    86:fa:8e:41:77:87:79:e5:1d:41:59:bf:33:67:a3:
                    c5:ce:63:9c:0f:0b:e5:95:97:a5:e6:22:6d:43:88:
                    cb:c4:31:e8:6a:af:c2:5a:c3:75:c1:04:20:09:59:
                    aa:32:65:d2:d0:7b:3c:48:f6:fd:c4:b4:19:98:2c:
                    be:44:3d:1e:d5:64:81:a5:1b:76:5f:39:01:8b:23:
                    f9:d4:74:ae:79:94:e4:3c:72:93:37:ee:4e:91:84:
                    e3:f7:e7:e6:24:8a:ee:a4:94:5b:5c:8e:7e:b2:82:
                    20:d8:ca:99:bd:2a:09:d5:99:e8:c7:5d:9e:e4:50:
                    1a:68:52:04:18:fe:0e:26:37:40:b7:91:5d:3e:60:
                    02:cc:f4:8f:3f:16:bf:bd:a9:e8:78:c1:63:6e:2f:
                    2c:e3:66:14:00:a8:e9:45:10:49:23:3b:90:31:64:
                    1c:97:e9:2d:b0:2e:54:54:16:12:45:4e:1b:43:9d:
                    1b:95:2a:24:9d:3d:e4:89:33:36:d3:cc:fc:ff:49:
                    b4:eb:fb:2f:3e:77:89:6e:78:5f:6f:b3:35:06:b5:
                    b2:f3:c0:ee:bb:de:fd:52:8d:f6:3a:80:0f:c2:4a:
                    ec:57:fc:22:d2:8d:79:11:24:c0:b6:87:e4:5f:13:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DD:1A:5B:82:60:DD:AF:8A:35:C3:B4:A2:DD:97:7F:02:FB:84:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e12574a4-24f1-3e90-a2b7-291af8569c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:43:55:a0:d2:f2:34:4a:0f:58:83:e0:b2:ca:b8:49:9a:
         ca:30:ad:12:34:68:4b:3f:b4:0e:16:ab:bf:8c:28:15:36:c5:
         9b:47:fa:68:4c:dd:d6:f5:ab:7e:75:9b:ca:60:d6:4c:fc:fc:
         d3:5b:db:b1:79:e3:37:d5:e7:6a:cf:f4:96:02:72:8e:e4:54:
         49:33:a4:7c:c2:6c:cf:59:6f:7b:cd:b9:0d:8d:d9:23:81:1c:
         2c:d5:10:47:40:3b:ce:66:c7:11:88:db:7d:0f:fe:37:68:50:
         8e:8f:ed:96:5c:95:87:d9:91:83:a5:c3:27:ae:a7:db:9a:37:
         cc:38:1d:c4:00:56:9c:b8:8b:5d:14:33:04:eb:5a:e8:02:ba:
         25:3e:84:b1:e8:bd:57:d0:1f:6b:66:e3:54:65:b3:6e:4c:22:
         cb:c7:6d:01:f0:b1:2c:fc:6a:e7:af:fa:87:61:04:0d:63:04:
         b1:03:3e:0c:25:c7:21:5e:6d:b8:55:d6:7e:08:ac:8b:75:e0:
         45:5d:90:85:77:e0:2f:45:63:62:2a:e4:f8:4b:ea:83:3a:1c:
         75:c8:44:24:5d:04:72:f9:3f:6f:6f:35:a8:b7:c3:e3:cc:a0:
         38:82:58:3f:52:4c:4d:b2:d6:89:0d:84:ee:de:27:af:ad:77:
         54:14:70:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:11 2026 by rpki-client