Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa
File:                     d0a1f707-a3b6-3064-b955-8dfcaf321300.roa (raw, json)
Hash identifier:          GjqDjWxXB8X/Ij2M7l4jsXZGCOLZn3YklggSYt0p3PI=
Subject key identifier:   75:4A:83:95:A1:7C:A4:2E:B6:7A:49:40:A5:2E:1F:85:1A:24:3F:50
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285849E2251686D0E6F479C4775700
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     14297
IP address blocks:        138.229.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:16:86:d0:e6:f4:79:c4:77:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=0f982964-c6d9-49e3-a79d-ead535222865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:31:3d:6f:c2:57:25:79:28:63:f0:d6:d2:
                    90:6b:49:a8:91:8f:de:9b:ef:0e:13:36:4a:75:d5:
                    c9:99:1e:9c:39:34:9a:43:57:1c:0a:96:31:a3:e9:
                    d7:22:80:d2:e5:92:d6:ee:b5:49:af:03:b9:98:7a:
                    bc:6e:e1:3b:74:07:af:f0:53:cf:36:a2:0d:f6:57:
                    be:01:b2:17:b7:95:2c:00:67:2e:a2:94:2d:2e:b4:
                    b6:35:62:87:6e:73:de:80:d5:ea:05:4a:2f:bf:29:
                    fe:29:b1:85:dd:c6:79:84:38:58:05:6f:c4:3e:19:
                    72:f3:c8:58:0e:04:3f:1f:80:2a:19:90:5a:ae:c5:
                    db:70:a1:f5:80:f6:c0:23:8f:22:ff:e2:37:8c:8d:
                    8e:b2:b3:ea:13:f1:12:f4:cb:d5:dc:e3:8d:02:12:
                    9f:58:74:b9:aa:7e:d3:58:56:df:c3:ee:c5:8c:48:
                    23:80:cd:12:d8:6b:d5:2a:d7:87:da:ee:22:11:cf:
                    cd:49:2e:41:74:4a:5b:ce:77:02:99:6d:c7:1d:be:
                    39:cd:1d:fd:7e:2b:43:75:af:0a:b8:48:e7:2e:5c:
                    db:0e:e4:5f:7e:1e:45:dd:ea:29:d4:ad:86:54:43:
                    7c:ce:b8:e9:f9:1f:a5:9f:35:f7:43:11:21:b5:45:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4A:83:95:A1:7C:A4:2E:B6:7A:49:40:A5:2E:1F:85:1A:24:3F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6b:5e:f5:08:aa:c5:2e:9c:9b:7f:3a:5d:ce:3d:82:eb:62:
         10:8a:ec:3a:45:45:91:ed:13:2e:7e:b8:06:47:22:7c:eb:8c:
         fc:f3:fb:1a:e2:4f:40:36:7a:c5:33:11:72:88:0e:d0:f2:b8:
         ff:65:0c:c1:22:d3:57:da:ff:69:cf:7b:8f:8e:4a:9c:5b:b0:
         6b:db:7c:13:b5:42:76:8b:5c:fc:52:c4:30:29:38:7e:00:ce:
         b8:30:43:fe:5a:87:b5:fb:b5:cd:a4:fd:9f:51:89:1d:4f:59:
         2c:27:80:1d:04:61:7a:2b:58:89:b2:48:78:9d:11:08:b7:05:
         e4:f7:b1:ba:47:43:42:89:a8:49:5d:2d:e5:45:cc:71:16:ae:
         d2:d1:76:6e:e3:63:33:dd:ae:49:10:8b:fc:c1:07:b7:72:0b:
         09:41:01:37:e7:77:de:cb:f2:75:03:14:34:2d:3d:ad:6e:e9:
         0b:5b:b3:26:0e:ee:65:a1:0c:9c:33:ed:04:31:70:18:6d:54:
         1b:b9:f6:ce:4e:73:1d:20:c6:62:3b:4d:99:f3:05:0c:83:aa:
         5e:6f:53:91:82:cf:8e:db:0f:56:43:30:10:5e:32:26:93:9f:
         93:9c:8b:a7:b1:0a:f4:9c:bf:4d:72:ed:d7:a5:c7:82:26:41:
         90:a7:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:51:18 2025 by rpki-client