Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f5690e38-10bb-3871-ad72-7768d0fb95ae.roa
File:                     f5690e38-10bb-3871-ad72-7768d0fb95ae.roa (raw, json)
Hash identifier:          oTeU7TH51KEtVuie05qMlRjZCNo0TN81RsElqBZhAKA=
Subject key identifier:   49:79:94:1F:E8:7F:99:A3:B1:B7:19:6A:39:C5:8E:95:E4:90:CD:47
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B1806F2CB66DF2811D859F000
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f5690e38-10bb-3871-ad72-7768d0fb95ae.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     7029
IP address blocks:        138.229.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:f2:cb:66:df:28:11:d8:59:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=8f48c530-abd0-4104-a270-7d223ddd3f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7f:8e:bd:7a:a1:45:91:d2:c5:0c:62:45:95:
                    f1:2d:47:62:7e:db:5a:84:51:9a:62:ad:a0:f1:c1:
                    37:e7:3a:db:83:33:93:a0:a5:78:ab:53:56:67:02:
                    bd:b9:d4:68:ef:a8:40:0a:ad:bd:5a:b1:0e:2a:f8:
                    6b:14:dc:df:c2:be:df:33:38:d1:72:55:6b:ae:16:
                    f8:d2:30:99:66:1d:1e:de:69:2a:88:9a:f5:0a:b9:
                    2b:34:80:50:b8:6e:fe:b7:b9:bd:af:03:52:06:fc:
                    36:8c:25:c3:e3:5d:87:d1:1c:93:f8:fe:1d:46:b9:
                    c3:de:6d:0b:ed:a0:88:4d:76:7b:ba:37:e3:6a:f4:
                    da:1b:c7:14:64:79:00:1d:c0:14:fa:e0:f9:dc:ce:
                    83:fe:33:00:9c:44:e4:15:be:11:c8:5a:79:28:ec:
                    fb:ec:b4:cb:37:2e:32:aa:f6:41:47:b1:4e:4f:4a:
                    f1:0d:37:91:da:9e:89:5a:96:57:fc:b3:8b:a4:a2:
                    2f:8b:12:65:8b:25:cb:66:b4:29:d6:8f:03:f8:14:
                    05:4c:cc:8e:b7:51:8e:24:76:9e:47:8e:0d:45:7a:
                    2b:56:d2:b9:5c:35:b5:a0:87:7e:98:f6:a0:f3:6f:
                    cb:61:7f:7e:39:07:9a:44:40:25:82:c1:a0:75:92:
                    e0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:79:94:1F:E8:7F:99:A3:B1:B7:19:6A:39:C5:8E:95:E4:90:CD:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f5690e38-10bb-3871-ad72-7768d0fb95ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:39:10:af:5c:94:19:2f:6f:f3:d1:44:0f:90:f7:83:46:6a:
         0c:a6:54:8d:fd:e1:da:53:b0:54:0f:b2:e7:3d:45:ea:36:8b:
         dd:db:e3:cc:e1:ce:4c:f3:e2:8f:a8:aa:b4:78:7b:e8:a5:c3:
         ce:0a:0b:63:36:53:71:60:c8:15:58:8d:47:e9:57:37:34:9f:
         f9:3f:04:d8:d7:6f:50:bd:87:19:d9:e4:c5:89:c3:fd:c4:38:
         8d:25:ba:9a:ab:fe:37:5f:4b:3c:90:90:b3:9f:02:1a:90:ee:
         21:eb:c7:e4:ab:5c:ed:a0:85:b7:0b:a6:be:23:44:f9:f9:b3:
         59:5e:fa:5a:71:30:de:88:6d:f2:45:c9:a1:18:3f:2d:4b:43:
         b3:4b:8b:e7:cc:71:09:e2:51:4a:9d:ec:bc:d1:db:4d:8d:8d:
         c3:76:64:18:20:41:01:08:6e:45:e8:ed:70:98:cd:60:05:a0:
         43:4d:da:5e:b7:67:fa:1b:60:d0:ff:a5:2d:70:cb:ad:3f:e0:
         54:22:66:36:55:28:8f:a4:49:93:7c:0f:c0:29:66:88:30:7a:
         91:51:14:dd:45:f8:9e:6d:b1:53:22:2e:96:b8:e2:8a:d2:26:
         99:96:9a:0c:ba:1e:4e:ce:80:f9:e7:df:3a:b5:bf:7c:59:8c:
         19:d7:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:13 2025 by rpki-client