Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b86b09f-ed40-331b-bc3d-5be609d850cf.roa
File:                     4b86b09f-ed40-331b-bc3d-5be609d850cf.roa (raw, json)
Hash identifier:          rxGXfEZk2AW7JrTXbBpdN6CIqON6y5mNVmmSPchNm9s=
Subject key identifier:   41:1F:92:6E:28:FD:65:10:6F:D9:9D:57:70:58:33:56:D0:CE:6C:A1
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584AFC1C001AA8F42BBF44A24B00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b86b09f-ed40-331b-bc3d-5be609d850cf.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     7018
IP address blocks:        138.229.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:00:1a:a8:f4:2b:bf:44:a2:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=58652e32-1ec3-4129-9961-6252d9e64343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:e9:b0:66:50:c7:d2:c3:ba:1b:4d:57:23:
                    b2:11:9c:3c:54:a8:ef:ab:d5:01:6c:9d:2b:38:9e:
                    0e:92:0b:17:2e:3b:72:db:cd:8d:c3:ee:c9:9c:6a:
                    ea:3d:74:f4:69:9a:39:97:0e:91:bf:7f:6a:a1:3d:
                    9a:20:15:10:31:cb:17:89:58:43:24:ea:c9:18:c4:
                    d2:68:57:5f:e7:de:67:d2:ca:96:f4:0f:b8:c4:87:
                    e1:57:e1:3c:c1:62:ab:93:9e:3d:09:25:b9:2c:ae:
                    d5:7d:2d:78:6b:68:e7:b8:87:1a:25:b6:7e:b2:d7:
                    44:f6:65:62:f5:45:93:7b:a6:90:48:1e:97:cc:34:
                    f0:99:8c:93:d1:62:ef:00:3e:04:21:94:36:f6:db:
                    8b:31:af:09:9b:e4:7c:35:57:75:43:20:08:1f:34:
                    f9:fd:0f:32:bd:c5:27:04:7b:c2:ae:6a:a6:38:9f:
                    5c:d1:d0:21:e9:7a:f3:97:7c:18:4e:e0:ac:55:aa:
                    f6:4f:11:ad:41:11:f3:b3:40:17:92:25:f4:99:99:
                    27:a0:0f:20:9e:06:f8:9f:f0:66:fd:6b:22:c6:c5:
                    cf:39:69:02:22:b2:94:00:58:44:50:58:76:41:ca:
                    7e:51:de:74:97:0a:97:40:3c:1c:51:56:dd:86:33:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1F:92:6E:28:FD:65:10:6F:D9:9D:57:70:58:33:56:D0:CE:6C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b86b09f-ed40-331b-bc3d-5be609d850cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f0:a5:59:1f:79:cf:54:31:e8:40:0d:cc:a8:77:b6:ae:67:
         78:da:c2:53:64:bb:05:32:c9:77:a2:7b:d7:74:7f:eb:33:93:
         d6:09:1e:83:90:0e:04:79:57:17:ff:e7:de:2e:a0:5e:b5:49:
         e0:fe:dd:e9:e7:20:f2:0e:d0:d0:cb:7e:6b:63:3c:6d:34:d2:
         9d:25:24:05:43:70:ed:0a:44:80:c0:6a:e5:94:77:60:a1:ff:
         16:12:20:54:4f:0e:ac:2f:0f:c6:e0:d1:2f:60:e9:3b:81:67:
         03:4a:8f:9b:96:8f:f9:57:94:27:d0:42:d6:53:2b:da:36:f3:
         f7:4a:d1:ad:7a:14:10:f8:18:db:cc:f1:cc:07:31:e2:88:6b:
         a8:69:8e:0f:40:ad:65:64:59:47:38:f4:7d:5a:05:8d:45:1e:
         9f:dc:71:d6:d6:30:0f:c4:ba:88:19:4b:4d:62:03:e7:4a:53:
         32:59:d6:4c:cb:ae:ab:81:07:74:76:3b:97:cd:d9:8b:3a:97:
         f3:2a:7e:43:15:4c:61:a8:f5:9f:88:35:b5:da:64:7f:e8:42:
         57:29:e6:f7:17:a5:71:e4:b5:9a:34:78:c4:46:77:a2:60:a9:
         3f:a1:cb:a3:2e:86:60:14:39:14:51:52:55:22:2d:06:4f:cf:
         87:c2:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 10:02:10 2025 by rpki-client