Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e8e9364e-c0df-3b18-a8df-bf3084064475.roa
File:                     e8e9364e-c0df-3b18-a8df-bf3084064475.roa (raw, json)
Hash identifier:          Z/3rEvWPwnC4vb+DkYmlSupGFSofs4Hxuvno+BA0kI8=
Subject key identifier:   43:E2:01:D6:D2:FE:98:9A:28:67:4A:FC:00:C2:9B:B4:15:92:A6:D7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DC995BCA197DEA11F5BB2A280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e8e9364e-c0df-3b18-a8df-bf3084064475.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     20001
IP address blocks:        138.229.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:bc:a1:97:de:a1:1f:5b:b2:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=1b769ebd-719b-4beb-87ef-cb4559cb981e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:99:1a:e3:30:70:b6:8c:39:82:90:f4:06:
                    35:4b:e0:2f:6a:2f:d5:32:5d:ad:c3:87:0e:4d:bb:
                    ed:d8:3b:47:72:1c:0c:4c:e6:10:1b:46:ba:48:ac:
                    2d:92:87:45:21:f1:ca:87:f3:bf:73:26:07:56:e9:
                    f3:22:73:d7:57:72:48:0b:57:37:0c:39:a8:92:07:
                    e3:61:3b:34:40:45:64:51:41:7f:65:57:fe:7e:55:
                    c4:ad:87:52:0c:9b:3e:12:f4:1b:41:96:70:26:64:
                    b2:99:78:4b:22:8e:95:2b:3b:eb:59:03:4c:3f:51:
                    cb:3c:fa:d3:e2:1a:ac:52:73:61:00:56:4f:0a:fd:
                    1c:57:4e:da:87:b0:c3:a8:37:20:b9:02:5e:d5:88:
                    f4:d3:de:b2:33:cc:a7:20:5c:c8:2f:38:d6:83:f1:
                    6f:5d:c2:ab:67:75:f8:5e:af:0d:a3:73:58:92:35:
                    a0:9d:68:95:c8:5e:50:81:e4:6d:aa:5a:84:43:31:
                    ee:be:aa:7c:8b:ef:48:34:10:c0:c4:40:54:93:bb:
                    cf:20:25:3b:dc:40:8d:13:11:88:ae:4c:ee:a4:6d:
                    25:d8:11:f7:66:48:2f:3b:f4:14:85:ec:a1:13:ae:
                    42:45:f0:9a:92:fa:2f:85:a6:f2:19:5c:4c:99:18:
                    c3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E2:01:D6:D2:FE:98:9A:28:67:4A:FC:00:C2:9B:B4:15:92:A6:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e8e9364e-c0df-3b18-a8df-bf3084064475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:64:cb:4d:f5:f8:0e:4f:86:67:0f:2a:b4:4b:f9:e9:24:18:
         17:6e:65:f7:dc:11:04:10:6b:7d:da:56:e0:7b:dc:07:49:9a:
         4a:0b:93:3e:b7:59:6b:19:a8:a8:97:d7:87:ec:7a:72:e0:4e:
         9a:93:f8:91:d5:18:96:b0:33:e2:7f:2f:bf:09:e3:c0:8f:d5:
         19:3c:b0:b5:a3:5b:d7:69:76:ea:e7:b6:19:31:fd:f2:75:75:
         20:a7:e2:c8:5b:fd:c2:7d:b0:ee:d1:29:0b:25:00:81:9c:46:
         ee:1e:1b:be:a8:66:ea:4c:79:a1:2e:a0:c4:40:1a:9b:73:a1:
         3c:c4:15:b6:2d:9a:17:91:ca:e5:ff:84:d0:37:d3:f2:ba:aa:
         37:05:ec:bd:13:44:e6:47:7f:07:b3:c4:d5:c5:e6:c7:79:bf:
         e3:49:0f:3c:b2:46:59:70:be:6e:54:68:55:cf:02:14:82:86:
         ca:12:6f:19:23:bb:35:9c:ac:dc:c2:87:17:65:86:aa:87:36:
         f2:15:c7:cb:66:4e:a5:78:a9:4e:45:87:e2:bb:00:92:9b:25:
         e6:74:2e:4c:55:52:b9:c1:7a:11:3d:6b:48:c0:28:1b:22:63:
         bf:26:9c:8b:76:bc:20:94:83:25:7f:c5:58:a9:33:55:17:7f:
         e9:91:ad:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Jlbyhl96hH1uyooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk
MWI3NjllYmQtNzE5Yi00YmViLTg3ZWYtY2I0NTU5Y2I5ODFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVqZGuMwcLaMOYKQ9AY1S+Avai/VMl2tw4cO
Tbvt2DtHchwMTOYQG0a6SKwtkodFIfHKh/O/cyYHVunzInPXV3JIC1c3DDmokgfj
YTs0QEVkUUF/ZVf+flXErYdSDJs+EvQbQZZwJmSymXhLIo6VKzvrWQNMP1HLPPrT
4hqsUnNhAFZPCv0cV07ah7DDqDcguQJe1Yj0096yM8ynIFzILzjWg/FvXcKrZ3X4
Xq8No3NYkjWgnWiVyF5QgeRtqlqEQzHuvqp8i+9INBDAxEBUk7vPICU73ECNExGI
rkzupG0l2BH3ZkgvO/QUheyhE65CRfCakvovhabyGVxMmRjDgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEPiAdbS/piaKGdK/ADCm7QVkqbXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZThlOTM2NGUtYzBkZi0z
YjE4LWE4ZGYtYmYzMDg0MDY0NDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALJky031+A5PhmcPKrRL+ekkGBduZffcEQQQa33aVuB73AdJmkoLkz63
WWsZqKiX14fsenLgTpqT+JHVGJawM+J/L78J48CP1Rk8sLWjW9dpdurnthkx/fJ1
dSCn4shb/cJ9sO7RKQslAIGcRu4eG76oZupMeaEuoMRAGptzoTzEFbYtmheRyuX/
hNA30/K6qjcF7L0TROZHfwezxNXF5sd5v+NJDzyyRllwvm5UaFXPAhSChsoSbxkj
uzWcrNzChxdlhqqHNvIVx8tmTqV4qU5Fh+K7AJKbJeZ0LkxVUrnBehE9a0jAKBsi
Y78mnIt2vCCUgyV/xVipM1UXf+mRrSM=
-----END CERTIFICATE-----
Generated at Wed May 13 09:05:46 2026 by rpki-client