Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21e3c037-17de-3101-9670-83541603afd8.roa
File:                     21e3c037-17de-3101-9670-83541603afd8.roa (raw, json)
Hash identifier:          z1mzWSIvOnDVbwTbGsdI95HQlN+ku/oWuF+sJvgV6B4=
Subject key identifier:   8E:DA:5D:2A:36:31:60:5C:F2:45:D6:B9:51:69:6E:63:D9:2C:73:7C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD99CEF7D8BD200E79240DD70
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21e3c037-17de-3101-9670-83541603afd8.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        138.229.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:ef:7d:8b:d2:00:e7:92:40:dd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=4fa82378-5884-4ca9-8dd3-aeeddf5496ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:4e:f1:a3:9f:d8:3b:5d:3f:8c:47:70:f5:
                    7a:38:3a:67:aa:17:70:19:0a:5e:af:11:4c:84:e8:
                    41:01:43:93:1f:dd:80:35:ff:97:1e:c8:ef:78:00:
                    a3:73:e2:4f:5b:5a:dc:35:4a:38:6c:8c:be:fb:96:
                    f3:0c:27:01:14:5c:71:be:f9:84:23:47:4b:e2:cf:
                    a3:31:23:da:dd:6e:dd:fc:2e:a7:70:fa:7d:e4:e8:
                    2c:da:67:4a:6b:74:10:b5:a4:cb:18:a8:30:94:f2:
                    a2:5d:62:11:74:4c:e5:01:0e:c0:42:99:a0:a7:14:
                    82:f6:57:f2:a6:b9:21:bb:47:8b:bd:be:49:71:d5:
                    35:e5:45:20:02:fa:97:1c:82:7b:4b:66:54:57:63:
                    6e:6e:a8:a4:87:bd:2d:16:6e:24:61:ae:e4:a4:f4:
                    f1:a5:36:16:de:f5:ac:71:f1:a0:7a:67:2e:2f:c7:
                    3c:84:0c:73:63:c1:ed:4b:95:9e:d2:96:92:bf:b6:
                    f4:3f:66:64:5b:ca:4a:8f:7a:25:41:c6:3d:d0:05:
                    fd:4c:c0:02:9c:87:11:3b:22:7c:ed:02:d1:37:6b:
                    bf:18:9e:ac:55:06:b1:c7:0d:c0:be:ed:52:e1:8e:
                    29:7f:d6:ff:ea:91:04:99:0b:1f:d0:02:e9:09:07:
                    e3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DA:5D:2A:36:31:60:5C:F2:45:D6:B9:51:69:6E:63:D9:2C:73:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21e3c037-17de-3101-9670-83541603afd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:7c:6e:a6:94:32:d0:81:6a:f3:e9:f1:b2:c7:23:70:96:07:
         31:38:cf:e4:eb:4c:f1:ff:ea:f7:59:b6:08:19:16:c3:6c:64:
         20:e2:0f:ab:18:a5:51:0a:5f:e3:47:4c:4e:b4:3f:66:bf:c3:
         5f:ee:89:18:15:2c:9f:6d:51:5a:25:b5:fa:61:4a:8f:fe:4b:
         7d:1f:1e:ac:33:f1:97:9a:96:b6:0c:de:0b:87:29:7a:94:20:
         26:64:c8:f9:04:21:49:b0:53:dc:81:ef:fd:fe:1d:a9:ed:13:
         0d:87:af:b4:64:bc:51:ed:b0:44:78:e2:ce:ed:b4:57:d1:d6:
         15:42:2a:1b:53:d3:2b:d8:53:72:56:07:cc:0f:a7:c8:6b:ef:
         fa:50:22:6b:43:30:ed:80:4a:8e:2d:61:1c:b8:28:8c:2d:a8:
         45:b5:17:a2:c8:d3:3e:4f:2c:38:ac:c3:53:4f:2e:5b:31:45:
         e6:51:57:1b:b9:22:d5:d7:fb:6c:51:fe:78:05:28:06:52:1b:
         8d:92:3c:6d:69:9c:47:ea:af:b3:84:fe:07:29:b4:51:b6:7a:
         f3:fb:1b:3e:e8:7d:4f:62:31:c2:93:dd:2a:45:7f:03:ec:55:
         98:11:91:f8:c4:cc:6b:1d:8c:02:e4:19:fd:e9:ae:6c:dc:89:
         6c:32:6b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:56 2026 by rpki-client