Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/eac73baf-4d86-3be1-ad2c-c287af699f41.roa
File:                     eac73baf-4d86-3be1-ad2c-c287af699f41.roa (raw, json)
Hash identifier:          2FVxNY30h7e23T9LYfVbxJkVQurXrwCXLxEuGqzXu2I=
Subject key identifier:   A3:C1:B3:E3:76:6E:88:4A:18:CB:7F:CE:2A:86:E1:94:72:EA:ED:D1
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD99CB8B67FD550916608D4C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/eac73baf-4d86-3be1-ad2c-c287af699f41.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22516
IP address blocks:        138.229.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:b8:b6:7f:d5:50:91:66:08:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=73746fa1-ecaf-4a37-806b-53a6561e79b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:f3:50:a5:96:ec:ff:2d:91:4d:7a:0d:fd:
                    c8:52:9a:43:54:87:d6:ec:6a:af:d0:df:f9:c3:8a:
                    ac:0c:e4:c7:83:3e:09:a9:6f:74:1a:d3:48:39:77:
                    fe:19:54:9e:2d:ef:2a:82:0b:68:bc:37:81:42:94:
                    5e:18:68:d8:ce:74:09:5b:b0:6b:21:c8:83:c5:2c:
                    72:57:09:8e:22:77:59:13:cb:c6:ed:57:84:71:22:
                    bd:96:99:15:f3:bf:a3:06:77:71:cd:f7:39:da:3a:
                    1e:a4:b7:39:e0:cd:98:11:b2:ac:cf:e6:42:7b:1c:
                    06:1f:99:ef:72:54:37:9a:fb:d5:fb:c3:8a:16:db:
                    c8:37:68:2c:4b:f3:6d:07:d3:1e:4b:f1:ec:36:66:
                    fc:11:90:90:6a:f9:b6:28:a8:70:e6:d6:fe:66:a2:
                    e8:d7:1a:a4:db:72:6f:e5:81:86:c6:d6:03:05:4e:
                    4c:0f:62:aa:c8:4b:1a:29:51:78:47:a0:f8:a5:86:
                    57:c0:69:30:74:aa:0e:be:55:f5:c3:c0:e4:d1:5d:
                    19:bb:a5:37:ba:94:c0:95:79:a4:b8:74:0d:03:0d:
                    4f:8c:d6:d9:99:83:0c:08:30:9f:ef:85:1b:58:e8:
                    85:f5:29:49:65:e2:d5:bf:2d:19:42:d5:59:48:80:
                    58:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C1:B3:E3:76:6E:88:4A:18:CB:7F:CE:2A:86:E1:94:72:EA:ED:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/eac73baf-4d86-3be1-ad2c-c287af699f41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:31:78:3b:ac:0b:62:cb:a8:27:fc:bb:50:85:8c:71:a8:aa:
         5d:8e:47:76:25:85:96:d9:5c:52:8a:10:c4:b2:e2:7e:a8:c2:
         a6:5c:13:37:c2:73:48:4e:e7:d8:6b:3b:bb:48:f2:44:d7:16:
         ed:05:f8:03:fd:3c:9e:7c:cc:b8:8f:33:e4:2e:bb:0d:56:d7:
         a3:8b:de:5b:73:83:b4:5c:2f:0a:d2:cc:50:ed:7c:87:84:0e:
         56:84:e7:bf:f0:4a:10:e3:e6:44:87:36:b1:dc:47:a2:2c:9d:
         9e:01:10:f8:a9:82:61:1f:84:3b:6e:16:da:18:43:3f:f5:36:
         15:e8:ab:ae:39:12:30:88:2e:18:6c:26:17:dc:8f:f9:a3:22:
         5e:b2:be:62:3e:dc:e9:f9:71:a6:63:8c:00:a3:23:4a:e8:d6:
         a8:db:04:c0:c6:fc:6e:ad:76:6b:37:65:c0:e1:da:be:d8:52:
         80:88:2e:cb:d8:c4:45:77:87:6a:43:9f:05:0f:07:dc:84:c4:
         d6:02:11:62:65:e7:97:8b:6c:ec:81:da:8d:34:38:e4:1b:c9:
         08:2f:35:82:45:e3:72:ec:8a:1a:74:5a:e7:c3:02:4d:82:cf:
         f9:ac:40:06:12:3b:5e:5f:c9:5e:31:e1:47:13:d4:b5:8c:a2:
         bb:bc:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:13 2026 by rpki-client