Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d54f124-b32f-3943-a574-7341b6879d7a.roa
File:                     3d54f124-b32f-3943-a574-7341b6879d7a.roa (raw, json)
Hash identifier:          Hl69fJrPTQbnZQhAPdUZ1JJyxOcoIaMoSC7ORyvpiLw=
Subject key identifier:   5B:E8:7F:11:24:C0:6D:6D:F2:37:BE:BC:F8:F2:AF:4E:A8:03:6D:98
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CE8F762D1F7B2C434D372EF00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d54f124-b32f-3943-a574-7341b6879d7a.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     20001
IP address blocks:        138.229.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:62:d1:f7:b2:c4:34:d3:72:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=08628659-7bb2-4ec8-b680-bbc1f0351f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:b2:76:a1:ec:5d:65:ba:ac:d6:00:b1:46:
                    af:f6:f6:26:d8:84:8b:74:78:22:08:cf:4b:de:76:
                    54:29:0e:ae:cc:60:2f:48:b9:fb:b1:f7:81:df:3a:
                    2d:fc:8f:d7:85:ce:0f:3c:54:f2:09:d8:f7:be:5d:
                    55:28:79:a1:63:ef:91:70:2a:2e:ba:84:40:85:83:
                    b0:b2:ab:df:cc:16:db:60:63:06:a6:2b:88:b6:6f:
                    a0:93:cb:a3:a5:e1:5b:91:3b:0c:b5:f6:d9:12:92:
                    78:5f:14:5d:79:6b:86:00:1e:87:22:8a:03:96:a8:
                    22:ea:44:8a:c5:d7:78:64:4e:a2:5a:df:85:83:70:
                    6b:32:09:5a:12:ce:7f:11:c4:a1:4a:4c:b9:50:28:
                    9b:0d:67:8b:fe:df:39:5e:53:0f:34:35:e0:2b:5b:
                    e1:c6:7b:ef:f4:7e:1b:c0:d5:5a:f7:41:bb:10:c4:
                    ff:6c:a9:93:ae:b1:47:16:e2:8d:20:f1:01:28:8c:
                    d6:73:af:a5:6c:9a:6b:0b:f3:9f:32:f3:41:1c:1e:
                    71:30:8a:fa:1d:4d:93:50:2f:b4:10:85:d3:4e:17:
                    e1:ad:45:6a:1c:fc:93:34:ef:00:dc:06:22:41:68:
                    5b:65:8b:16:58:fd:55:4f:e0:77:12:7f:fd:9f:96:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E8:7F:11:24:C0:6D:6D:F2:37:BE:BC:F8:F2:AF:4E:A8:03:6D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3d54f124-b32f-3943-a574-7341b6879d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:49:4b:59:e1:4c:40:74:1c:6e:27:92:78:e9:40:fa:a7:66:
         02:0c:94:28:10:44:27:1b:11:cc:3a:d8:63:c8:4f:d9:bf:48:
         8f:af:54:1e:a4:6d:6b:17:cd:76:72:50:35:89:22:44:de:8c:
         be:a5:90:5c:39:15:19:89:85:b2:6e:09:3c:2e:7c:8e:b4:60:
         fe:87:38:02:2a:cd:80:2d:01:d6:e3:c8:25:3b:cc:23:b9:ff:
         80:6b:61:92:80:49:b0:c1:6f:08:d7:b7:95:f4:e7:58:c4:f4:
         bc:1a:99:e2:49:91:31:96:a1:7b:cf:a3:d4:46:2a:d5:99:98:
         b5:cc:6a:2e:14:51:50:b3:dc:d5:cb:44:8d:ce:a4:20:a1:0a:
         26:3e:40:49:29:13:64:8c:24:d9:a5:88:58:46:82:82:28:83:
         dd:93:55:a4:73:08:d7:81:41:96:e6:4b:61:df:8a:b7:3b:14:
         69:18:52:87:56:a8:43:45:64:b8:10:64:8a:3b:0c:16:3e:7c:
         1f:b5:0c:70:24:42:07:99:a9:08:60:df:83:08:6f:ff:cf:da:
         f0:fc:27:a7:d3:44:b6:f9:a9:6d:c4:2a:66:9b:99:c3:2e:2a:
         3a:43:88:d7:60:48:20:e2:d8:83:07:8c:ef:10:b4:65:55:ef:
         c2:52:fe:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:04 2026 by rpki-client