Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7d81dc4e-84a4-31f6-a430-145409787d4c.roa
File:                     7d81dc4e-84a4-31f6-a430-145409787d4c.roa (raw, json)
Hash identifier:          CwK33KDYdjTeOf1kQ2RTY3/FP5fCKxtTPu6DJX60deA=
Subject key identifier:   EE:D8:96:EC:B0:35:F6:4E:F7:50:A8:50:F8:FD:A0:0B:A7:3E:4A:EA
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584D651516FECF333C689F1EEB40
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7d81dc4e-84a4-31f6-a430-145409787d4c.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     14297
IP address blocks:        138.229.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:16:fe:cf:33:3c:68:9f:1e:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=ad5c57d4-f34e-4184-9227-5bbf46a79294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:09:7c:25:c0:91:0c:13:56:e3:60:ca:b1:
                    47:01:9e:22:e5:8f:d0:66:5a:64:48:73:09:24:88:
                    90:fa:57:a4:e1:f5:fd:c3:2e:06:4d:2c:79:b9:a6:
                    8e:ef:e5:3b:2e:7d:4e:14:14:ee:7c:80:e2:0f:fb:
                    8e:1a:1e:8c:7c:ef:fb:2c:c0:bc:68:b1:c2:2d:53:
                    8f:e7:88:66:4c:28:23:4c:99:14:10:2b:4b:5d:cf:
                    88:9d:be:0a:44:66:ce:49:a8:93:b6:69:de:46:20:
                    c0:02:47:9f:20:a3:a1:4c:c2:c8:56:a6:19:96:6b:
                    95:fe:9c:ee:e8:06:cc:de:1a:a2:9d:9b:16:85:e1:
                    d3:dd:46:ee:4c:4f:a4:a0:01:e4:d2:28:29:89:92:
                    05:90:a0:11:8a:97:ca:68:b6:be:72:17:0f:8f:72:
                    9f:2d:d2:b9:56:06:43:9b:c7:51:31:c7:51:fa:3e:
                    51:b0:7b:f7:9c:cb:ea:4e:e8:c9:7e:b7:ec:ec:7e:
                    92:de:b5:4f:73:d4:76:d7:9f:b2:d1:51:3e:12:1e:
                    f3:63:97:55:96:53:2e:15:9e:21:ae:ff:37:de:5a:
                    b5:da:fd:1b:51:b1:60:44:6c:ce:29:f5:8e:4a:ec:
                    fb:2d:9e:db:40:61:1d:52:a6:4c:10:40:96:a7:0c:
                    27:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D8:96:EC:B0:35:F6:4E:F7:50:A8:50:F8:FD:A0:0B:A7:3E:4A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7d81dc4e-84a4-31f6-a430-145409787d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:2b:f4:84:8f:c4:fa:1d:bf:d3:5b:e9:98:8e:af:35:85:7c:
         95:cf:2a:59:26:d1:9a:d1:9f:ed:fb:9d:55:2b:90:0a:dd:5f:
         90:ea:64:6e:ab:ba:9c:2a:66:5b:44:71:19:5c:21:74:0c:67:
         5f:94:ef:e1:16:e1:61:09:31:31:68:5f:96:b6:0f:52:3f:a1:
         01:39:bf:d8:b8:39:16:7e:30:4d:b9:02:6f:22:2e:c0:79:56:
         37:b5:6f:e8:ba:64:d7:98:45:0d:92:67:bd:52:86:a4:9c:7b:
         53:09:76:fb:77:a9:36:10:73:bf:08:56:f9:b1:94:21:89:0b:
         ba:8e:35:ad:0b:8a:55:5d:28:f6:00:34:5c:7e:d5:e8:61:e8:
         9b:4d:82:eb:90:32:ea:45:ae:c3:3c:17:41:5d:6c:d7:87:17:
         49:ea:88:1d:d5:21:f5:05:be:d2:42:c1:5f:78:9a:48:65:5f:
         0f:ac:cc:56:ef:d5:3b:8e:2e:b5:9b:f4:67:0b:18:86:aa:31:
         55:33:f4:87:5f:fe:7a:65:ca:8c:d8:cd:21:70:be:0b:0b:87:
         f0:3f:f4:e3:ed:70:96:95:a6:2c:44:06:46:d1:bb:9f:63:49:
         1d:e0:09:aa:58:8d:69:bf:66:81:0b:55:a9:fd:1b:88:84:97:
         1d:a8:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:07:53 2026 by rpki-client