Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/ebbe6513-77c1-312f-b035-be5606ebaf77.roa
File:                     ebbe6513-77c1-312f-b035-be5606ebaf77.roa (raw, json)
Hash identifier:          9PulGH75+0y10FlBb2Sn+WWUbGBKhIHu1j4j3nG5ExY=
Subject key identifier:   2C:DE:6D:B1:6C:A0:84:9A:92:8C:B9:26:F7:CD:F2:77:9E:8C:30:29
Certificate issuer:       /CN=e0cdac38-6681-4b09-b992-31d2030b8796
Certificate serial:       010D0C9F4328584A655B357A19B9EC2CFB7B5720
Authority key identifier: AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/ebbe6513-77c1-312f-b035-be5606ebaf77.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        138.133.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:35:7a:19:b9:ec:2c:fb:7b:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0cdac38-6681-4b09-b992-31d2030b8796
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=b6380731-8f42-43f8-9d22-1c9ab2fc8f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:60:fc:ee:b8:da:a9:55:a4:7b:80:10:42:
                    fa:0e:93:53:ef:97:78:c6:17:97:28:31:20:62:f5:
                    99:d5:28:09:84:8c:fd:a6:70:f3:fe:4b:f2:b0:1f:
                    9b:8b:4e:dd:57:35:74:f6:03:1f:85:cc:16:97:cb:
                    5f:ba:a4:11:0f:e4:ee:bc:48:e0:57:42:e2:a6:3a:
                    c1:be:8f:f3:58:05:66:e0:e3:58:75:0c:4d:37:82:
                    31:66:6f:66:7a:f7:b5:e8:c1:96:ee:a0:00:9b:8d:
                    a9:b6:9f:ce:ae:fa:bb:05:40:9a:45:59:7a:c6:fe:
                    da:6e:89:f5:10:73:f0:4c:0e:48:76:9f:56:b9:dc:
                    7f:18:97:84:7c:9f:0f:88:27:35:13:11:7a:fa:3c:
                    b9:64:23:dc:36:14:9d:30:f8:89:ee:1f:0a:b7:e1:
                    bc:93:f7:04:01:a3:76:c9:4e:19:00:7b:b1:15:a4:
                    fb:4b:fc:f4:91:03:d7:37:32:9e:04:9a:5d:bf:d2:
                    d6:c3:35:df:d7:24:2e:ba:d1:61:65:51:a5:22:5b:
                    90:c3:a9:b8:5a:66:44:1d:0b:8e:98:23:32:79:08:
                    8c:b8:89:24:34:42:a8:7f:1a:b1:67:2a:6a:2b:8c:
                    13:c1:a0:0d:bd:b6:4c:48:be:c5:65:6c:49:2e:76:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DE:6D:B1:6C:A0:84:9A:92:8C:B9:26:F7:CD:F2:77:9E:8C:30:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/ebbe6513-77c1-312f-b035-be5606ebaf77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl

            X509v3 Authority Key Identifier:
                keyid:AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.133.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:27:40:47:d2:61:32:e6:a6:b9:d1:20:b5:04:16:90:dd:3e:
         20:5b:b3:6c:a1:0e:09:39:b0:66:9c:6a:7f:da:ad:79:c1:be:
         36:3b:45:4d:05:8f:14:b7:c6:ff:d5:46:e9:f5:39:2f:9e:d3:
         ed:65:30:47:fb:3b:11:70:48:05:b0:27:30:c6:18:e5:bf:c8:
         ef:03:b1:24:34:ee:00:c0:f9:44:83:fe:95:dd:c2:56:76:1e:
         0b:fa:01:4f:5d:24:28:19:ad:1c:f3:3b:44:84:1d:f5:2f:c3:
         2d:5a:c9:f5:c4:90:ba:88:a1:68:8c:d2:6f:1c:4d:67:bd:05:
         9c:ca:02:98:80:9f:af:d3:38:ea:fa:ca:d3:20:55:9e:00:ca:
         0a:56:62:90:b0:c6:cc:23:2b:b5:c3:4d:88:b6:df:c9:78:d3:
         a3:ae:1c:02:56:17:bb:12:b5:c3:fa:91:a6:00:ee:df:bc:1e:
         ff:0f:03:26:eb:b2:7f:4f:91:3f:4e:c0:87:96:f6:63:b2:04:
         53:89:3e:d8:fc:dd:ee:32:c4:0c:d6:4a:30:ec:fc:bb:5f:10:
         7f:62:fb:ba:3e:54:9f:63:da:ad:2c:65:8e:fb:68:70:33:d8:
         64:75:68:35:52:02:bd:c9:8c:86:a1:d0:c7:86:15:5c:8d:55:
         97:e5:c5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:35:02 2025 by rpki-client