Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f97f189a-180d-3cb0-b698-2d94be7d983a.roa
File:                     f97f189a-180d-3cb0-b698-2d94be7d983a.roa (raw, json)
Hash identifier:          d9/6qIKB7Gste7Q3Ih4NP4woS3lRTpShS9Wttg+6K7g=
Subject key identifier:   BC:3F:79:95:F7:52:18:43:CC:E6:C0:64:88:8C:62:55:A1:81:C7:94
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285849244E7E05D6496A50BEA64978
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f97f189a-180d-3cb0-b698-2d94be7d983a.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     14061
IP address blocks:        138.197.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:7e:05:d6:49:6a:50:be:a6:49:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=0e975214-d731-4fd0-816b-b304d8c294c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:f6:d5:4c:bf:54:51:ff:ac:f0:99:7a:a3:
                    a2:31:cb:37:85:e9:23:e2:67:8b:39:29:3f:73:c3:
                    8d:f8:fb:eb:3a:1f:12:f3:28:b7:ff:7d:58:5d:52:
                    1d:a3:9a:35:1c:9b:be:9d:cd:83:86:8c:f1:3f:91:
                    d8:d6:d3:bc:13:93:e4:d0:9f:f3:3a:45:43:37:3b:
                    eb:d5:a4:a9:9b:99:12:3b:aa:9e:ac:42:b3:94:15:
                    66:9e:42:f0:35:05:97:1c:fe:74:03:8a:c4:b5:6c:
                    8e:91:d4:85:5f:91:da:2c:0e:b2:13:6e:9d:44:4a:
                    f6:f2:d8:fa:8d:9e:e9:14:d0:33:7e:ed:a4:ee:3e:
                    f5:92:54:cd:15:67:48:76:ce:40:b6:67:e0:65:26:
                    e9:93:89:72:4d:ec:4c:89:e3:65:ba:b2:98:6c:c6:
                    1d:5a:95:ac:50:cf:68:cb:cc:12:6a:b7:b0:aa:b4:
                    a7:e5:0b:9c:1e:1c:fb:d8:23:2c:66:54:e5:0b:44:
                    e0:89:ed:69:41:d0:dc:18:14:46:90:87:0c:49:0e:
                    9b:e8:79:ef:b3:a2:72:f1:b0:78:c9:c2:a6:fa:a9:
                    3e:62:84:ce:a2:6d:48:a2:32:fa:dd:51:c7:e2:96:
                    44:f3:34:28:da:b1:b3:9c:35:0e:4e:36:5f:01:c5:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3F:79:95:F7:52:18:43:CC:E6:C0:64:88:8C:62:55:A1:81:C7:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f97f189a-180d-3cb0-b698-2d94be7d983a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.197.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:26:3d:1f:e9:b8:8b:28:43:70:e4:07:49:e9:37:28:ab:7b:
         87:95:3d:49:8b:f6:da:52:42:c7:26:a0:bf:6a:7b:78:73:4b:
         f3:30:24:2d:e4:e7:7c:ad:ee:c1:22:7c:78:b8:2d:30:a6:ff:
         ee:ae:e8:e0:85:be:49:e8:d2:a1:f5:0e:29:4b:e8:43:3c:72:
         1d:58:3d:4c:5a:1c:5a:bd:6c:cc:2b:44:e6:fb:d3:48:19:3b:
         1a:95:62:41:b2:77:2a:ff:f6:4a:14:53:5c:94:2e:c4:d9:fc:
         1c:2c:46:0c:0b:48:85:fb:28:f7:ce:cd:dd:a3:51:2e:b5:b2:
         82:43:59:28:46:c0:ab:14:cf:70:88:d9:b0:74:53:c7:38:11:
         05:49:cc:cf:32:f3:a0:20:ee:46:10:47:1f:da:4d:ad:c2:8d:
         8d:a9:fe:f2:e7:8f:9b:dc:91:67:be:8e:d6:a6:c7:6a:33:e0:
         2f:10:cb:bf:23:9f:ea:a6:9a:d8:13:e9:0e:ef:4f:71:c3:c1:
         89:be:de:62:d6:9d:fe:ed:db:14:93:e0:8e:29:20:4f:9a:53:
         42:01:a9:f7:bb:7f:36:8b:40:b3:39:ea:d0:1b:4e:b5:c0:bc:
         78:2a:7c:cb:a1:c8:b6:2b:21:2a:70:78:1a:94:f6:80:b6:e6:
         6c:99:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:53:33 2025 by rpki-client