Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/74093659-01be-39db-9590-3712932fdf5a.roa
File:                     74093659-01be-39db-9590-3712932fdf5a.roa (raw, json)
Hash identifier:          jKorD1K6Ab91YI+iWSpQvLW+YaE2JWVmbyp+1cbTiYs=
Subject key identifier:   01:E2:5C:B4:80:AC:44:0C:BF:28:A4:A5:A5:76:CA:7F:BA:4E:B4:BC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B1806F2BA120E6568CADF8700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/74093659-01be-39db-9590-3712932fdf5a.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     22516
IP address blocks:        138.229.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:f2:ba:12:0e:65:68:ca:df:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=dc2385fb-e4b3-46f1-a2a0-b778e57f2480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b3:3e:0a:2b:8d:d1:de:01:b1:7f:25:b1:9d:
                    1f:b8:b4:85:40:a6:a5:f1:85:c3:af:05:22:8c:41:
                    22:f7:e6:29:45:8e:ad:a6:f7:ae:1a:1b:48:75:06:
                    f2:03:2f:fd:51:f3:52:42:c4:ed:d3:b8:c9:b7:33:
                    1b:dd:92:bd:cc:fd:88:b0:7c:ad:4a:f6:62:f8:50:
                    5c:c3:6a:4a:9a:3f:c3:41:19:9c:62:5d:ad:a4:02:
                    0d:96:22:26:dc:d8:d4:78:35:7a:2f:c0:ee:ba:25:
                    2a:d5:d6:34:9b:dd:fc:49:dd:ce:2f:9b:b4:75:47:
                    84:ba:6c:d8:9a:d4:28:8b:55:d5:c2:24:01:06:67:
                    ee:63:3f:f6:d7:fb:56:d9:59:61:7b:1e:34:a1:9b:
                    ff:39:f2:aa:d4:35:92:33:db:7a:3d:6a:17:5a:41:
                    1b:90:3b:a2:01:4f:3d:18:4b:7a:c4:7a:e6:92:44:
                    2c:bc:a1:c5:98:36:04:22:47:d1:30:45:39:37:d7:
                    73:fb:e9:16:8b:6f:ed:d5:b3:7e:7e:dd:ab:55:2d:
                    c3:49:46:0e:a2:03:9a:82:d3:cf:8f:d1:de:41:fe:
                    3a:07:b8:43:e3:f9:b1:f9:a4:6b:92:14:9e:d8:47:
                    6c:e7:e8:c2:8a:07:a4:8d:87:bc:f5:42:03:92:d5:
                    e5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E2:5C:B4:80:AC:44:0C:BF:28:A4:A5:A5:76:CA:7F:BA:4E:B4:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/74093659-01be-39db-9590-3712932fdf5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:4f:03:46:29:82:14:d1:1d:df:11:ad:11:7c:d2:b8:f2:d8:
         dd:a3:fa:c2:f9:e7:0a:81:d3:29:36:41:d7:b3:d6:77:4f:4d:
         9d:45:56:e4:5d:22:f7:cc:80:d0:15:8b:c4:09:72:b9:dc:c0:
         d8:de:8b:55:20:16:57:37:91:77:a8:a5:36:5e:fa:83:a4:2d:
         12:10:22:e9:b8:dc:f3:d3:aa:bf:f1:8e:2d:54:98:86:af:43:
         1f:d7:0b:99:a6:53:be:94:93:9d:8e:75:6f:07:9e:13:43:c5:
         76:c7:9c:a1:21:b7:f5:26:b8:ac:5a:03:82:b7:45:4d:c0:27:
         ba:66:e1:43:0a:54:89:51:34:f2:8b:9e:4e:e8:6f:84:ca:33:
         12:01:7b:81:c2:84:2b:74:a6:98:32:80:16:38:52:8a:87:10:
         f1:e0:d1:24:38:3d:bb:f5:13:d0:97:b2:c2:4d:41:9e:0e:a3:
         0b:bc:7d:5c:2b:90:15:cd:9c:5a:33:d5:68:39:6c:08:55:30:
         94:74:49:d2:9e:17:3c:5a:cc:f6:41:2b:f5:27:e7:28:a0:27:
         59:3e:b3:63:59:d7:cb:0d:4e:f7:79:f0:e3:0b:f8:08:81:1f:
         a1:f7:67:89:47:70:fc:03:f7:d2:f3:78:66:cd:7e:d4:ea:98:
         e8:08:a3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:22:06 2025 by rpki-client