Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e8e9364e-c0df-3b18-a8df-bf3084064475.roa
File:                     e8e9364e-c0df-3b18-a8df-bf3084064475.roa (raw, json)
Hash identifier:          mhxbHrDrA3D6rWtWEi6lUiuGpJeJA/BFsvIaYL5cNkI=
Subject key identifier:   98:6A:DD:C8:AB:E0:43:10:19:7B:78:E2:20:B1:78:E3:CE:C6:C8:2C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CE8F77C07B3795C061A01E380
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e8e9364e-c0df-3b18-a8df-bf3084064475.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     20001
IP address blocks:        138.229.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:7c:07:b3:79:5c:06:1a:01:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=40b4f404-8b08-45a3-a571-71c3c940c56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:41:18:13:a1:70:e8:a0:c9:6b:89:ff:91:
                    de:f2:74:94:cc:8b:15:14:20:65:39:9a:1f:ae:96:
                    de:97:4e:20:44:bc:88:17:84:05:3a:49:90:19:68:
                    68:0b:68:09:c6:1b:c4:8b:9d:be:14:03:cd:44:78:
                    1f:ea:bd:34:f2:52:a7:c2:af:d7:81:74:f1:23:f6:
                    ed:d8:20:02:f8:61:b6:c5:1c:fd:0c:19:8c:ae:1b:
                    0e:a4:57:91:d6:1d:47:29:18:b9:22:03:cc:da:84:
                    c6:fd:77:66:0d:80:74:b5:24:c8:ec:9f:cd:85:0e:
                    a3:f9:9a:83:4e:17:96:fa:d3:64:9c:04:dc:70:8f:
                    6c:a8:5c:6a:d8:30:95:3c:84:8e:e1:fb:cd:1e:4d:
                    c0:93:e9:af:75:10:25:a0:19:1a:b9:eb:43:ed:74:
                    23:59:c3:af:8c:dd:d2:f0:0a:84:ab:62:9e:e6:a4:
                    b0:c7:81:00:41:1d:07:3b:9a:23:22:01:d4:ba:63:
                    e7:49:35:81:7b:2c:68:c1:02:57:9e:ba:15:b2:d0:
                    7b:9d:a2:07:61:0f:93:06:7e:1a:7e:8a:d4:34:1d:
                    40:f6:4f:5f:32:92:95:43:fe:e8:3a:12:fd:78:ef:
                    a6:9d:df:ad:b7:f5:bb:5e:55:dc:ac:ce:2a:04:3b:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6A:DD:C8:AB:E0:43:10:19:7B:78:E2:20:B1:78:E3:CE:C6:C8:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e8e9364e-c0df-3b18-a8df-bf3084064475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:de:1a:a4:94:a4:73:54:d7:2a:83:1b:d2:78:40:95:f8:b8:
         4a:3b:50:ad:05:d7:97:98:f8:2c:0a:fe:76:e8:e3:f4:1f:f5:
         d3:f7:e8:92:6d:a5:a5:ee:50:54:0d:0f:d7:72:df:15:8d:a3:
         76:35:1d:17:7f:b7:a7:b3:4b:42:3d:54:f5:b9:e5:6a:91:7d:
         81:9f:3f:38:19:89:fc:a2:e6:5f:d0:85:2b:57:72:c7:86:fe:
         66:2a:d7:25:8b:47:ea:b6:7b:b7:8e:22:94:19:c1:94:09:25:
         d3:9e:b5:2a:e0:c2:a4:1c:40:15:b7:3a:11:fb:16:0f:e4:de:
         ff:c0:d2:b5:04:1b:16:c5:9e:65:39:be:b2:12:b3:43:43:36:
         02:de:91:1c:93:f3:9f:83:a3:f5:31:71:0e:b3:d3:b1:76:6c:
         7e:a8:f5:1f:b3:91:56:39:c5:d9:93:15:86:70:bb:61:1a:7d:
         62:6e:ed:b7:e9:df:49:93:89:b9:5b:da:6e:cc:d9:ba:02:40:
         1e:82:b7:98:55:6f:fc:dd:5f:6b:a5:64:17:31:1b:d9:35:09:
         c9:a3:63:c6:cc:4b:40:00:52:db:cc:1c:f7:6c:a7:91:81:a1:
         0e:f6:47:c4:bf:e4:86:1f:e0:be:87:d7:e6:b7:96:b7:5c:95:
         df:8b:15:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:55 2026 by rpki-client