Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea68d356-808a-3d4e-8508-5ee2d96d7ef8.roa
File:                     ea68d356-808a-3d4e-8508-5ee2d96d7ef8.roa (raw, json)
Hash identifier:          pYgHKbSiFE5Xm+Z0AR4U+30d/umNbG/dk7oTFA7LM9g=
Subject key identifier:   D6:3B:A9:C7:6C:C8:64:20:07:23:06:71:6F:B9:F3:86:0D:8D:1C:A5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FE6EB17D42898BF073600
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea68d356-808a-3d4e-8508-5ee2d96d7ef8.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        138.229.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:e6:eb:17:d4:28:98:bf:07:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=d91e2651-e7f7-4e01-a7d1-454cc78f1714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:8b:d5:58:75:62:df:0f:9b:af:53:69:09:
                    85:f6:2a:9a:72:4e:c1:d0:92:cb:ee:03:05:20:16:
                    01:51:52:53:8e:37:6e:44:27:58:64:22:55:1b:96:
                    b3:a7:9a:97:01:cb:62:52:a5:5e:1a:69:19:e1:e4:
                    a9:29:d5:20:f8:e0:19:02:6c:a2:44:80:4e:a7:8b:
                    2b:07:c5:71:e1:7e:52:ff:05:14:39:65:17:3b:33:
                    a7:21:88:5b:ab:4f:98:28:94:b8:58:da:97:0c:3c:
                    6e:cb:9e:a7:bd:b0:99:7c:d7:a8:14:a5:97:2e:66:
                    2f:76:da:2c:ab:aa:67:65:3b:59:10:5a:24:a7:e6:
                    f4:63:2f:aa:a0:24:57:ef:60:d9:bf:78:1f:8c:58:
                    30:cb:8f:81:55:db:82:31:9d:cd:cb:ae:2c:64:17:
                    d7:12:84:14:1b:ca:ab:ac:59:3e:c1:52:d2:0c:4f:
                    12:75:6d:79:77:37:b7:bb:ec:a2:1c:a8:42:d4:50:
                    66:c9:d9:65:b4:95:7a:2c:a4:c2:01:81:e0:a8:bf:
                    f8:83:f5:3b:d7:3c:23:ed:7b:fc:e7:c4:8a:0d:11:
                    54:e1:63:6b:76:05:7f:51:70:86:c6:0c:fd:87:e4:
                    eb:d0:77:b0:9d:65:8d:a4:de:17:28:a9:21:cc:83:
                    d8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3B:A9:C7:6C:C8:64:20:07:23:06:71:6F:B9:F3:86:0D:8D:1C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea68d356-808a-3d4e-8508-5ee2d96d7ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:40:b4:92:76:e0:6e:34:d9:dc:d0:22:89:95:b0:62:2c:4b:
         36:d9:12:fe:6e:cf:d4:8c:15:c2:e8:1e:0d:6b:1a:10:aa:ed:
         a1:68:ad:c4:62:42:f4:e9:f5:17:9b:7e:24:85:31:d1:88:10:
         3e:a0:91:a4:23:c3:1f:4b:42:bc:87:c4:f3:ef:59:e6:6a:b8:
         1c:55:0c:13:c4:44:7c:0d:b4:99:a9:5d:66:86:96:74:98:f2:
         5c:26:8d:51:39:a1:a1:fb:83:f6:fa:0f:11:24:1a:c1:3b:82:
         1b:40:5f:d9:d9:06:99:5f:7a:87:2e:b8:da:1f:d4:e8:d2:89:
         cc:89:aa:12:44:70:b3:e4:b6:dc:59:a7:1b:8e:c3:b7:68:1c:
         0e:d4:49:50:51:37:5a:50:01:32:aa:1d:ad:fc:5e:43:7c:53:
         32:e0:ab:8f:53:11:39:90:6c:c5:3c:25:4b:d0:8d:7d:0d:4d:
         51:a2:08:ed:20:02:d6:80:53:fa:db:19:77:75:d0:9a:7a:5d:
         b3:64:eb:80:14:8e:b0:5f:c8:e5:be:d6:cd:7e:3f:95:c8:6a:
         3f:e8:91:76:c8:34:5d:55:02:06:cc:f5:fa:81:d9:7d:c7:9e:
         47:40:e6:84:87:4d:01:20:f6:73:53:91:73:cb:bf:6f:cf:7f:
         40:2b:6a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:19 2026 by rpki-client