Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/38182387-c020-301e-b758-b4317299c1e8.roa
File:                     38182387-c020-301e-b758-b4317299c1e8.roa (raw, json)
Hash identifier:          wfE9aIlcbN6MI2q2r49UMBKns12EgxVqx9cijMNXoZo=
Subject key identifier:   29:E1:BC:FF:7B:C1:1A:17:46:75:1B:BC:17:B0:ED:9B:21:94:1B:88
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EA787211DC323DEFF52A06B00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/38182387-c020-301e-b758-b4317299c1e8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20001
IP address blocks:        138.229.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:21:1d:c3:23:de:ff:52:a0:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e95f3b78-30b9-46ab-88c5-4f75b5993b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:47:a5:a6:e8:41:b9:91:a2:87:8c:f8:e1:
                    6d:63:06:b5:6d:75:ab:23:78:7a:11:ea:8d:7f:cf:
                    74:03:41:a6:7f:a7:c3:d3:9c:77:b1:c4:9f:78:52:
                    d9:8b:bf:f9:54:c1:6d:90:ee:de:bb:24:3a:ce:6f:
                    64:7c:0a:5f:76:45:53:7f:3e:37:99:bc:b3:e5:98:
                    fe:b1:0b:b1:9f:a5:b7:07:d2:8c:c1:78:15:aa:0a:
                    5c:99:d8:fc:12:19:d1:2f:71:b6:1a:02:3e:fc:36:
                    78:ed:51:2e:3a:57:99:d6:f1:90:dc:64:02:0b:3d:
                    6e:d0:ac:20:a9:3f:75:07:fa:83:c6:26:b9:61:63:
                    41:d0:bc:ed:ec:f8:ca:ae:54:b8:01:1d:20:66:4a:
                    0d:73:73:9f:f6:df:31:cb:77:16:29:94:ce:96:e7:
                    fe:bc:82:c5:98:12:02:13:03:c2:9b:d5:33:69:c1:
                    59:37:19:25:2f:ca:66:6f:54:e2:04:0f:90:c8:91:
                    bc:f7:fb:00:01:37:f0:1f:77:e1:ee:62:84:85:a6:
                    62:ca:8a:4c:71:26:e3:63:ec:11:d8:30:0b:e4:f0:
                    d8:58:be:f5:7e:4c:dc:c9:e9:63:39:a7:d0:24:3f:
                    a5:5c:72:78:ae:ca:25:bd:94:b3:6c:ef:f7:90:1d:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E1:BC:FF:7B:C1:1A:17:46:75:1B:BC:17:B0:ED:9B:21:94:1B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/38182387-c020-301e-b758-b4317299c1e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:ef:0d:6c:8e:1d:cd:54:a6:d0:aa:0e:26:0e:74:5e:2b:1e:
         47:39:61:0e:06:25:86:a9:be:f3:96:d0:f1:20:5e:79:4f:4b:
         8c:15:ab:34:31:12:2d:f3:86:ed:fd:60:c3:51:d9:c2:a8:26:
         af:ba:1e:8a:c4:3a:77:22:c1:50:d4:19:5a:22:9d:0d:4a:83:
         de:f4:d2:44:77:f9:c9:6b:ff:c5:e1:46:7a:28:dd:07:2b:58:
         64:6e:bb:1d:81:5f:ae:d8:d5:cd:82:26:a9:1c:1f:ef:97:e4:
         1d:58:b1:1a:d0:92:00:70:7b:d7:b7:10:8f:0b:62:24:2e:2b:
         33:21:26:45:2e:2a:d3:c7:e5:f5:b1:eb:fa:27:40:c5:e7:95:
         9c:fe:61:76:55:d0:41:2e:1a:62:25:38:ad:2f:03:93:5a:c2:
         af:a6:0d:a1:3f:ec:94:2d:0c:42:91:23:2c:69:67:56:c4:a1:
         bf:fc:11:b3:58:ec:fb:cf:83:74:22:10:b0:d9:1b:9a:4f:70:
         ef:c6:47:6d:f3:56:9a:ac:46:d9:1f:82:cf:d6:4d:9c:41:88:
         80:fa:c8:9a:0e:e1:ed:af:64:90:41:10:76:4b:12:6c:0b:ae:
         a9:83:b3:e2:cf:49:5d:92:5b:43:98:e1:12:29:3a:d8:e7:83:
         80:3a:da:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhyEdwyPe/1KgawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTk1ZjNiNzgtMzBiOS00NmFiLTg4YzUtNGY3NWI1OTkzYjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+dHpaboQbmRooeM+OFtYwa1bXWrI3h6EeqN
f890A0Gmf6fD05x3scSfeFLZi7/5VMFtkO7euyQ6zm9kfApfdkVTfz43mbyz5Zj+
sQuxn6W3B9KMwXgVqgpcmdj8EhnRL3G2GgI+/DZ47VEuOleZ1vGQ3GQCCz1u0Kwg
qT91B/qDxia5YWNB0Lzt7PjKrlS4AR0gZkoNc3Of9t8xy3cWKZTOluf+vILFmBIC
EwPCm9UzacFZNxklL8pmb1TiBA+QyJG89/sAATfwH3fh7mKEhaZiyopMcSbjY+wR
2DAL5PDYWL71fkzcyeljOafQJD+lXHJ4rsolvZSzbO/3kB2VpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCnhvP97wRoXRnUbvBew7ZshlBuIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMzgxODIzODctYzAyMC0z
MDFlLWI3NTgtYjQzMTcyOTljMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM/vDWyOHc1UptCqDiYOdF4rHkc5YQ4GJYapvvOW0PEgXnlPS4wVqzQx
Ei3zhu39YMNR2cKoJq+6HorEOnciwVDUGVoinQ1Kg9700kR3+clr/8XhRnoo3Qcr
WGRuux2BX67Y1c2CJqkcH++X5B1YsRrQkgBwe9e3EI8LYiQuKzMhJkUuKtPH5fWx
6/onQMXnlZz+YXZV0EEuGmIlOK0vA5Nawq+mDaE/7JQtDEKRIyxpZ1bEob/8EbNY
7PvPg3QiELDZG5pPcO/GR23zVpqsRtkfgs/WTZxBiID6yJoO4e2vZJBBEHZLEmwL
rqmDs+LPSV2SW0OY4RIpOtjng4A62nQ=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:12:24 2026 by rpki-client