Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f5690e38-10bb-3871-ad72-7768d0fb95ae.roa
File:                     f5690e38-10bb-3871-ad72-7768d0fb95ae.roa (raw, json)
Hash identifier:          nd/ioc+uaW9fZHMchKTrAYEhNhG+epusxyNnSJjIbRQ=
Subject key identifier:   42:CF:92:DB:84:31:B7:B0:06:FC:B1:4C:6E:8E:1B:C5:D2:79:79:2C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DBA3B0EC4744BFA24FBC65300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f5690e38-10bb-3871-ad72-7768d0fb95ae.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     7029
IP address blocks:        138.229.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:0e:c4:74:4b:fa:24:fb:c6:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=d9fdab28-1a38-4ddd-8908-37f1e1c57cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5a:25:83:d9:54:78:bd:6d:88:7c:5b:8c:40:
                    79:f1:91:fc:02:7c:f3:7e:af:e4:da:41:0f:d6:ba:
                    b8:f4:38:9d:a9:76:4e:fb:9a:af:40:d2:57:bd:8d:
                    18:b1:87:04:19:80:1d:08:2a:0d:f6:d4:a0:6d:49:
                    be:40:ff:2b:4a:dc:de:64:ca:16:f4:c8:bb:66:8e:
                    50:8a:2a:ab:c0:ef:f5:1e:a9:dc:37:9f:0b:94:f1:
                    f7:3f:e6:f6:24:61:52:49:21:73:7b:7b:03:9e:21:
                    d0:39:31:e8:f5:dd:aa:f8:50:58:69:95:43:4e:31:
                    52:9c:00:c8:7c:1e:8f:d8:81:3f:f4:9e:dc:03:3c:
                    cc:5e:90:0a:f1:56:87:49:bc:8e:fd:4d:99:86:90:
                    79:a4:2f:8c:51:87:c5:5e:ef:fc:9e:78:26:dd:21:
                    96:86:10:39:2f:34:f8:8e:71:76:8d:80:8f:e0:53:
                    71:f1:63:58:44:11:d9:bb:3a:b8:a1:90:7a:76:53:
                    14:c9:cd:24:f0:d1:ca:02:c7:7f:a6:a6:80:a1:59:
                    9e:33:86:f0:61:29:79:3c:93:57:de:72:33:6f:97:
                    b7:71:5a:22:8d:42:7d:50:e3:9d:d7:2d:a2:0d:10:
                    a8:8a:ea:18:b9:3b:bc:97:46:22:09:d4:f1:a5:b5:
                    6a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CF:92:DB:84:31:B7:B0:06:FC:B1:4C:6E:8E:1B:C5:D2:79:79:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f5690e38-10bb-3871-ad72-7768d0fb95ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f8:12:2a:1d:d4:c3:14:a2:fb:1e:de:e7:24:7e:50:3d:58:
         0e:1c:22:10:87:e7:d7:3f:30:ab:b2:17:dc:9e:6a:00:c9:c9:
         bb:fa:28:a6:ad:2f:0f:0c:76:68:58:27:d4:e0:77:a6:38:d6:
         d2:17:b5:44:9f:91:ef:6d:9b:cd:ca:11:1a:30:b6:10:55:79:
         83:e0:5d:65:26:6b:e7:25:d4:39:2f:d9:27:9b:16:6e:29:00:
         66:a7:c7:62:5c:c8:ae:d3:e7:5b:ce:a5:d7:73:cf:d0:77:b9:
         7f:4a:85:7e:52:dc:e8:6d:e3:bf:c0:5e:13:54:4d:81:85:71:
         65:5a:49:ab:bf:ac:82:a1:f7:d7:83:55:da:2f:a4:26:a8:78:
         67:de:ed:00:88:dd:27:7c:6b:50:1e:ca:18:62:5d:96:77:4a:
         b5:1a:2e:6f:3d:cf:06:8d:11:27:91:ab:71:a3:7a:8b:a7:73:
         ce:5c:ee:61:df:d6:ef:bf:3f:cf:b5:40:23:20:c6:e4:5b:9a:
         c7:df:4e:ed:2e:ef:64:e0:a9:ab:8c:26:fe:a3:90:c9:e7:03:
         42:d1:70:9f:ba:7c:3a:05:85:cc:f1:0a:a9:36:be:c6:4f:87:
         0f:cb:49:b9:7d:88:8f:31:d1:61:56:5d:15:94:79:5c:2d:38:
         de:b7:08:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:09:45 2026 by rpki-client