Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b2777a0f-6c31-3038-9e0b-5a2ea78b8ab5.roa
File:                     b2777a0f-6c31-3038-9e0b-5a2ea78b8ab5.roa (raw, json)
Hash identifier:          DEVZL2udousBO4okKFv7pmwutSJBncuH71LlHXsZTvQ=
Subject key identifier:   60:EC:2B:9D:51:EF:04:A8:E3:12:51:26:5B:AD:17:5F:FE:5C:A1:4F
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584A6DBB3FDF68BAB3BE4F3932FF
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b2777a0f-6c31-3038-9e0b-5a2ea78b8ab5.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     396253
IP address blocks:        138.43.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:3f:df:68:ba:b3:be:4f:39:32:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=dff25c69-4cb8-4f63-95b6-fe915352031e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:cc:8e:03:b7:af:14:10:39:9a:6e:9a:81:
                    56:df:cd:ac:4f:7e:a2:45:f5:b8:2e:7d:0d:f9:17:
                    fe:96:59:cc:a6:83:f9:66:ad:79:d7:cd:a7:b4:09:
                    70:97:c4:b3:3b:d9:1f:4a:8c:9f:5b:fa:99:56:96:
                    0e:08:d1:a8:ce:44:74:05:5a:92:1c:84:16:06:9c:
                    4b:df:5b:22:64:ac:0f:3b:37:02:67:85:32:01:3f:
                    2d:39:80:b2:e0:d1:86:71:03:b1:af:3a:9a:43:b6:
                    4a:87:21:ca:d8:a6:c9:6f:2a:35:5f:3c:fa:1a:93:
                    ee:a7:88:8c:c2:02:e3:f5:6b:2d:50:b0:f9:97:2f:
                    ec:26:10:fa:cb:e4:c8:85:95:76:7b:64:60:54:33:
                    6f:53:d4:c0:ca:9b:bc:75:46:52:8c:75:4d:be:ad:
                    b2:31:cc:31:74:fc:d2:96:c7:41:f1:59:7a:72:8a:
                    ba:7b:00:29:64:1b:f8:44:2f:43:56:89:f1:63:79:
                    22:a8:7c:dd:c1:7c:bb:ec:4f:87:f7:6c:c8:dd:8d:
                    10:3f:00:ac:80:ff:40:e0:ba:fd:3f:06:30:5c:df:
                    78:a0:bf:ec:c1:4a:48:8f:da:b5:4c:40:88:8e:7a:
                    d0:e5:6e:a8:10:72:fe:a1:90:54:4e:96:21:af:5e:
                    5a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EC:2B:9D:51:EF:04:A8:E3:12:51:26:5B:AD:17:5F:FE:5C:A1:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b2777a0f-6c31-3038-9e0b-5a2ea78b8ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:09:1d:b3:f9:07:a9:77:4e:0b:6f:2c:fe:e4:b4:75:6a:d9:
         8f:51:38:8e:a7:a7:fa:e9:24:79:f3:62:8d:2a:3c:89:e8:cb:
         69:5d:28:3b:90:01:60:45:41:8c:ab:1a:bb:e3:2e:a6:e8:90:
         2e:34:10:2a:35:22:9e:05:65:85:2d:76:98:00:e9:65:fb:13:
         29:e2:b3:c3:17:c3:22:94:69:92:3a:40:a0:13:2f:7d:cd:5a:
         92:dd:93:9e:fd:04:39:90:34:eb:0d:6a:12:e6:d0:67:af:79:
         08:cc:ed:7f:c1:1a:f9:5a:12:e1:34:19:59:d9:af:4c:be:4f:
         3b:6f:d6:57:d4:22:a8:7d:ff:71:60:a7:6c:ea:e2:75:89:23:
         52:0b:18:95:4d:59:7f:80:bd:36:8f:39:64:d8:53:d3:e0:63:
         2c:64:54:ec:36:92:34:4d:ee:94:f5:97:16:e2:87:06:12:8c:
         10:cd:ef:0e:8a:7d:ae:c3:4f:58:6a:fa:6b:a0:b3:1d:0a:d6:
         ae:f8:55:69:ce:a3:de:88:9b:ef:08:0a:bf:53:b0:bf:92:1b:
         18:61:8a:c6:78:49:5e:78:ff:9d:57:55:50:75:86:ca:ce:9e:
         19:99:82:a6:ff:85:92:36:e5:94:8c:06:c7:41:b6:30:5f:ad:
         bd:a1:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:22:55 2025 by rpki-client