Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4d23543c-1cdb-3eb0-b39a-1fa3129491d8.roa
File:                     4d23543c-1cdb-3eb0-b39a-1fa3129491d8.roa (raw, json)
Hash identifier:          L/L5PmPB1DEoOnxHDb30zULG/FtfC63tjGm+Ek94GnU=
Subject key identifier:   FE:0F:E5:9A:AB:D2:CB:30:FD:1F:AF:C2:7C:57:42:04:90:57:9E:61
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858485B6AFF21CE92025697E1DBA0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4d23543c-1cdb-3eb0-b39a-1fa3129491d8.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        138.229.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:ff:21:ce:92:02:56:97:e1:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=9d7c49d4-d27d-4b97-8f45-32a06e3a3a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1e:0c:b6:a3:73:b9:03:f4:73:6b:27:c1:8f:
                    b1:90:f8:14:1f:5f:9f:9a:f3:32:90:72:10:a5:84:
                    aa:07:69:19:3b:76:9f:83:6c:e6:a5:a4:8b:a0:aa:
                    f2:cd:c8:d0:72:95:6a:d7:01:ad:31:0d:dd:29:c9:
                    14:4b:69:59:be:df:2c:3d:60:13:94:62:8c:8b:9d:
                    c9:9e:0e:a4:84:c4:f2:b5:70:a4:49:fc:dc:de:cd:
                    87:be:37:8d:b5:52:ba:ff:f5:24:2b:c6:91:04:f3:
                    f2:5c:13:50:c8:0c:a7:66:6f:2b:df:2f:d8:1f:72:
                    ef:d8:95:c1:f3:ed:47:90:4f:bc:1f:a8:cd:1c:34:
                    5c:f0:64:2c:f2:ba:99:2b:f2:24:b4:46:cb:19:08:
                    17:ce:6f:08:87:57:0c:ae:5e:90:59:93:75:68:8a:
                    a7:de:ab:f3:c8:34:a1:96:2b:de:d4:c2:24:22:33:
                    6a:cb:3f:41:b0:6f:dc:e5:f5:44:16:f8:a6:80:b8:
                    eb:71:0c:85:97:e3:fd:b6:93:78:2a:e1:1c:18:17:
                    ea:59:2c:17:31:36:f4:c9:af:ea:1a:1d:0e:d6:e9:
                    7c:3e:b8:de:84:ff:f2:96:07:1a:da:1f:42:e8:81:
                    8a:4a:ca:94:c7:cd:fa:63:2a:a7:18:1d:0d:b1:1f:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0F:E5:9A:AB:D2:CB:30:FD:1F:AF:C2:7C:57:42:04:90:57:9E:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4d23543c-1cdb-3eb0-b39a-1fa3129491d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:75:81:7b:86:9a:65:82:0d:e6:58:42:16:9a:d8:06:0f:01:
         05:6a:c0:3a:65:b3:6b:5d:c8:f3:be:7b:24:5d:b8:66:d6:1c:
         3a:28:66:61:f5:9a:5d:45:40:f0:a7:90:70:bc:3f:fb:65:01:
         c0:ad:14:1c:6a:cd:af:53:5b:f0:21:b6:af:75:8f:25:78:a1:
         3a:db:70:a5:28:77:87:ab:d4:ab:71:23:90:8a:44:82:ce:a4:
         1e:d0:e9:86:59:b7:b2:25:0a:c0:ba:34:4f:3b:4e:a4:14:c5:
         67:23:58:13:5f:31:f5:aa:c7:d2:1c:38:29:b0:d9:ff:80:7f:
         8f:e4:2c:0b:77:21:fc:81:1f:e3:09:69:13:3d:41:3c:8c:5f:
         da:91:6f:13:2d:96:ed:40:1e:e9:b3:82:f5:f7:d7:69:b8:3f:
         a3:bf:4a:de:fd:ab:0e:69:08:ab:9e:66:ce:75:40:20:29:46:
         51:37:2a:af:5a:63:f7:e9:5d:6e:b0:55:0e:45:8b:9d:2b:16:
         b8:06:98:e4:85:5d:6c:22:48:37:ff:2f:d7:73:a1:0f:72:41:
         19:5b:f8:8e:5d:2e:52:95:ce:12:1b:49:57:b6:12:0c:92:08:
         dd:a2:ad:03:b0:73:91:cf:05:92:63:a2:53:ef:ba:3b:8b:a0:
         86:e6:10:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:29:09 2025 by rpki-client