Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1d21e46d-8c75-36a5-b726-93319de0609e.roa
File:                     1d21e46d-8c75-36a5-b726-93319de0609e.roa (raw, json)
Hash identifier:          Wbnk1OxEB14Ew0CrntoQOjnFbTwUSUws4T36jwQuC/o=
Subject key identifier:   A2:3E:B6:BE:13:66:8E:B4:34:5A:11:BA:C2:C7:D0:9C:84:81:7C:B0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EA787172C017EFDDD46105BC2
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1d21e46d-8c75-36a5-b726-93319de0609e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20001
IP address blocks:        138.229.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:17:2c:01:7e:fd:dd:46:10:5b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6166bb05-4669-462f-a026-d351b1ae8052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:c7:b4:e2:b5:f7:c9:0f:48:ce:e3:29:c2:
                    1d:a2:07:88:c1:6f:eb:d0:e1:d4:a2:5a:74:61:c1:
                    a7:5a:ef:ba:23:e0:fb:27:84:31:75:8a:36:7f:30:
                    23:90:8b:cd:1e:e3:2c:23:02:d9:da:73:c1:55:60:
                    87:89:46:5b:5c:97:a9:42:74:2b:e3:db:66:7f:01:
                    75:0f:90:66:dd:79:a2:2d:6c:76:c5:eb:77:ad:66:
                    95:55:a6:fa:9b:85:be:ff:0e:a1:60:9c:69:a2:8b:
                    d8:62:26:9a:b3:aa:61:0e:f9:27:24:5f:bf:a4:d1:
                    3e:f8:b8:f1:41:98:13:b6:6d:30:83:26:bc:7c:e8:
                    e9:ce:72:f1:3b:57:69:d6:23:98:77:d4:41:fa:8c:
                    7f:a0:f2:3b:4c:25:04:cc:01:d7:27:68:41:59:54:
                    e3:ea:30:4e:22:42:dc:f8:b1:77:9b:61:f0:c2:04:
                    3a:ee:a1:6b:53:55:9b:de:51:2b:92:ee:19:2f:c6:
                    a1:12:38:1d:f4:c1:53:0f:21:f8:b7:c5:ae:0e:c1:
                    30:1b:66:ca:0e:ae:38:e4:ea:d2:57:a0:3d:cc:06:
                    de:d1:f0:44:2d:1c:8f:5a:85:95:d8:ee:c1:1a:74:
                    e3:40:30:fa:b9:a0:8c:3b:fc:cb:0c:4c:bc:ba:93:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3E:B6:BE:13:66:8E:B4:34:5A:11:BA:C2:C7:D0:9C:84:81:7C:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1d21e46d-8c75-36a5-b726-93319de0609e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:57:30:ca:61:7d:17:34:5a:f6:7e:6c:d8:05:df:0d:42:b7:
         87:bf:8f:99:31:cd:f0:f7:a7:1a:35:0d:d9:d7:93:19:52:d7:
         8e:07:c4:25:d0:ad:9e:c6:4e:f7:35:19:f0:72:be:3f:74:db:
         b3:db:f9:41:b6:27:7a:92:b6:2d:42:51:da:72:fe:96:1f:51:
         87:9b:35:fb:73:26:88:44:e7:c0:db:13:21:0b:06:86:33:ad:
         2e:a7:fd:94:d7:73:cb:38:bf:bd:e9:0b:86:2e:a7:cc:0c:30:
         50:9e:9a:09:25:21:5a:eb:9d:62:a1:8d:55:80:94:8b:81:3f:
         6d:93:69:b5:b9:3e:6a:ec:7b:ea:ca:42:d0:69:50:f7:f3:16:
         ba:c3:c8:39:4a:b4:b3:a2:94:2c:90:6d:a7:09:1b:ea:57:23:
         86:b0:c8:a6:3d:cd:3b:90:ce:c4:26:6a:fb:03:22:8a:00:77:
         92:d5:4f:d5:94:23:42:d0:39:81:a5:f0:b5:9c:11:f4:1a:b4:
         71:94:6d:c8:0e:79:24:84:5c:44:60:53:c6:13:bb:33:9f:f8:
         49:70:2f:73:c4:61:1c:d2:a6:b5:9e:bc:ae:ae:75:8c:db:80:
         9a:68:9c:08:d9:98:ff:95:77:db:a6:b7:79:0d:07:d8:7b:03:
         b3:d3:70:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:20 2026 by rpki-client