Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e8e9364e-c0df-3b18-a8df-bf3084064475.roa
File:                     e8e9364e-c0df-3b18-a8df-bf3084064475.roa (raw, json)
Hash identifier:          U/5sExZaUInB72Yv3FQvhJ1jO/RWs81+i0HQkmEGk+c=
Subject key identifier:   79:18:D7:4A:93:7D:3E:25:A4:B0:30:57:CB:34:36:CA:0D:EF:F3:DB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F498AFF659B2A54A048FF4DE0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e8e9364e-c0df-3b18-a8df-bf3084064475.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        138.229.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:ff:65:9b:2a:54:a0:48:ff:4d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0adb271c-779a-40b4-b27f-9da7bd0817eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1f:1b:2f:b3:2c:48:a7:8c:26:a8:ca:7e:78:
                    33:67:43:69:21:62:9d:1b:8e:8a:7d:14:ec:7a:72:
                    3d:92:da:66:89:a6:1b:55:7f:bf:bd:2b:e8:0f:ab:
                    a5:00:2a:50:b8:9f:36:61:6a:6d:76:7b:07:1e:da:
                    01:1f:ba:80:3f:be:8a:4a:16:81:7e:59:26:06:a5:
                    40:80:54:f1:ba:e5:ce:74:67:c7:65:91:0c:6c:e5:
                    d2:e8:62:af:af:18:12:55:d3:d6:0d:3e:49:f5:32:
                    a5:89:7d:ea:02:b0:96:96:e2:1f:68:02:fc:3e:28:
                    5a:a9:cd:44:7b:27:d2:9f:7f:51:70:13:2e:75:09:
                    57:4b:11:b6:17:96:b9:da:76:bd:a8:ef:34:20:c3:
                    bf:d0:4d:a4:dd:18:26:c1:ed:b9:64:82:c0:9c:61:
                    d3:2b:6b:8a:91:b2:8a:bb:5b:cb:e8:25:4d:1c:f6:
                    fc:7a:05:5a:e2:ac:31:50:54:66:af:5a:0b:80:cd:
                    eb:2a:ca:8e:b2:e3:a6:e1:d2:df:b7:59:bd:5d:df:
                    f2:8a:44:a7:ce:e4:57:97:46:06:c9:43:dd:ac:b9:
                    8b:9f:09:83:56:82:b8:f7:2b:11:b7:84:4a:54:45:
                    d9:59:90:12:85:58:f0:38:a3:d3:64:8e:6e:07:0b:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:18:D7:4A:93:7D:3E:25:A4:B0:30:57:CB:34:36:CA:0D:EF:F3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e8e9364e-c0df-3b18-a8df-bf3084064475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:88:f3:e7:63:54:ce:08:eb:49:13:bc:2e:30:b7:5e:65:e8:
         60:4f:53:23:d4:de:f2:10:fb:ca:2a:42:4b:b6:57:03:4d:9c:
         f6:15:ec:02:62:e7:d1:a7:7e:67:1e:ba:61:2b:23:cc:6c:60:
         3d:6b:d5:98:95:0d:48:6a:1c:06:76:d2:4a:22:da:b3:26:2d:
         63:de:af:45:7e:fd:5e:bf:80:c4:56:f4:c4:ed:9f:9f:14:4f:
         12:be:9c:3d:12:e5:6e:0c:ba:4f:ad:38:e5:f4:e4:22:7f:d6:
         3f:88:3a:5c:1b:60:81:e1:5f:36:a8:2c:f8:0f:f5:e3:2f:4a:
         58:b6:b0:f0:2b:1a:e5:b0:8f:c2:9d:9d:f0:43:35:19:8f:67:
         a2:cd:36:fa:46:5c:66:4b:f7:e0:b5:f9:8e:3a:98:20:ce:4d:
         fd:41:cd:7d:06:28:2c:6c:2e:8c:04:73:4b:3c:0c:a5:2a:b7:
         28:57:e0:e9:1c:3c:79:d4:21:46:db:8b:2f:e4:47:17:34:9a:
         5f:4e:68:42:1d:f4:f4:50:ed:c5:9e:71:8c:9f:09:d3:53:c5:
         0b:92:67:a2:cf:8b:b1:b2:be:72:25:41:39:ea:b5:ca:4b:60:
         b8:08:9c:f8:3f:ee:f1:1b:5d:47:86:d6:d5:f3:c3:6b:9f:16:
         c6:b6:80:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:35:42 2026 by rpki-client