Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4e3b1582-d53f-3cae-bdfd-9b087341da3c.roa
File:                     4e3b1582-d53f-3cae-bdfd-9b087341da3c.roa (raw, json)
Hash identifier:          vzsdKaK+fn01XF0ZHYwU1k7se4tm6i38fbGN4VJXjT4=
Subject key identifier:   73:A1:8C:58:BD:16:D1:30:99:87:CA:E9:4E:CC:47:4F:84:BC:C0:46
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858492CAE8DE8D6169C9C3CB9DA00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4e3b1582-d53f-3cae-bdfd-9b087341da3c.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        138.229.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:8d:e8:d6:16:9c:9c:3c:b9:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=16473602-15bf-455e-807f-281dac3b02ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:79:20:75:1d:92:87:67:0d:fb:53:e9:9b:
                    34:0c:ea:67:d6:6b:6f:5c:76:4b:38:14:b8:30:9a:
                    1f:8a:d2:f2:55:8b:d4:09:fd:8f:94:72:ec:60:a9:
                    1a:c5:0b:5f:17:57:e7:2e:f6:47:2b:33:e1:0e:7d:
                    78:84:5b:65:07:94:1c:91:6b:56:b9:07:4f:40:01:
                    a1:3d:f5:95:cc:46:2c:46:7f:a3:92:c2:df:76:00:
                    62:6b:a4:14:9d:ea:c3:26:b1:ae:92:81:88:17:55:
                    63:ac:7a:dc:00:98:bb:5c:9e:4f:ee:43:0b:7f:29:
                    0d:81:6c:ba:1d:e2:ee:2c:23:50:97:49:e7:1a:d3:
                    62:a2:5f:45:46:c8:75:08:99:fb:df:f3:21:94:00:
                    ba:69:f4:3f:b3:2d:60:03:c9:1e:2e:cf:ac:00:f3:
                    00:ad:93:40:a9:fb:2c:d1:c4:2d:d8:2a:39:40:7c:
                    de:c6:0d:a6:56:8f:2d:31:5e:86:2c:19:5d:5e:ea:
                    2e:f9:81:1f:6c:ad:18:4f:62:93:8d:99:4f:d2:18:
                    d2:f0:d0:52:40:09:92:74:64:f8:78:0b:da:e2:94:
                    aa:14:f0:d1:01:13:22:3b:f2:e8:9f:19:df:a3:b9:
                    55:34:17:04:60:fd:32:8a:4f:e7:6d:c2:cd:85:86:
                    5d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A1:8C:58:BD:16:D1:30:99:87:CA:E9:4E:CC:47:4F:84:BC:C0:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4e3b1582-d53f-3cae-bdfd-9b087341da3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:9e:32:c7:f6:15:54:29:79:42:37:d6:07:c1:c5:0c:82:
         50:0f:aa:8c:27:64:5e:e7:22:e1:9b:af:de:ed:bf:8a:49:4f:
         82:6a:a0:92:7e:1c:aa:a9:d7:73:31:a4:63:44:25:64:a7:af:
         02:0d:e9:1b:b7:52:dc:c3:39:f3:1e:93:7b:1a:b4:95:cb:66:
         34:14:99:8d:49:f8:9c:ea:7f:fe:a5:c8:26:7e:ba:06:22:57:
         e4:39:a9:78:20:b1:52:5c:6c:fa:36:e2:1f:47:12:9d:93:d6:
         df:18:f6:0c:13:fe:68:81:73:37:bb:fe:16:e0:ae:4c:4b:b0:
         2e:90:09:89:e8:42:92:10:6e:d3:0c:24:12:3b:5d:d1:2d:f9:
         16:72:8d:2e:2a:8a:29:3e:f3:07:ae:fe:a5:15:06:6b:bb:da:
         8c:60:1d:da:1e:9f:19:94:09:ae:a9:9c:e7:48:9c:f8:a7:27:
         c3:8d:23:29:3c:c5:a0:52:33:39:f8:7d:5e:2e:f5:32:de:95:
         5b:83:1f:c9:6a:37:91:d8:f5:a0:31:37:17:2c:40:92:45:84:
         12:97:ba:36:d1:ad:87:04:c8:22:27:a7:e5:dd:9a:10:07:68:
         47:b1:2e:d4:be:35:32:0d:46:ee:6b:6b:f3:d0:b4:39:15:3b:
         2b:37:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:58:02 2025 by rpki-client