Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48b04ea5-053d-355d-9e7e-68ca99d7a329.roa
File:                     48b04ea5-053d-355d-9e7e-68ca99d7a329.roa (raw, json)
Hash identifier:          v8P8WAzlsK8MaOjMHT1PgAjWBcph2mA3fCVwyRwDk1g=
Subject key identifier:   71:F2:2B:78:3B:D3:C9:5D:07:FB:AC:7C:EB:6F:DD:F2:72:8F:D9:2B
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F43285849FFCCD25AD37FBA755743D280
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48b04ea5-053d-355d-9e7e-68ca99d7a329.roa
Signing time:             Wed 28 May 2025 03:57:39 +0000
ROA not before:           Wed 28 May 2025 03:57:39 +0000
ROA not after:            Tue 26 Aug 2025 03:57:39 +0000
asID:                     54994
IP address blocks:        138.113.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:cc:d2:5a:d3:7f:ba:75:57:43:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: May 28 03:57:39 2025 GMT
            Not After : Aug 26 03:57:39 2025 GMT
        Subject: CN=669d5368-237d-4564-9897-0aaf105aa3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:63:91:08:f3:eb:45:b5:f9:8a:9b:16:54:
                    f7:37:f8:7e:11:ca:54:ff:b1:9f:11:b1:6a:84:a7:
                    de:27:7f:6c:cc:79:6a:97:41:d1:12:40:ee:70:2f:
                    7e:a0:5e:65:96:1f:46:b7:5f:53:79:c9:14:7f:bd:
                    12:18:ca:0e:37:09:d4:34:a8:0f:ce:93:58:81:6f:
                    72:1b:22:c1:3e:13:d4:36:96:ce:20:e2:d6:65:f2:
                    48:dd:8c:dd:42:cf:fc:87:0a:e2:6c:8c:e7:2b:28:
                    d2:58:d2:2e:ef:1f:c1:ba:a7:b8:ce:64:48:3f:87:
                    87:07:e7:30:c8:4b:97:60:b7:be:0d:bf:61:d0:46:
                    3e:dd:e5:07:85:b1:8d:02:81:35:99:6e:1c:db:c8:
                    72:41:21:cd:61:1d:a5:51:97:d2:ab:c5:05:92:8e:
                    b6:a6:f8:27:0b:7b:92:ae:33:2b:b9:38:37:32:5a:
                    2b:6e:bd:cb:bf:65:1a:b8:bb:e9:ab:da:9f:7b:30:
                    9e:77:50:da:b3:fb:32:8a:fb:a4:cb:39:08:24:07:
                    99:3d:72:86:96:98:a3:38:2e:c2:e5:81:79:ac:dd:
                    9b:75:59:b8:e5:90:9d:ad:0a:34:a0:e5:2f:c3:15:
                    0b:fb:ea:de:91:f2:4e:7d:cb:44:3b:3f:79:02:86:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F2:2B:78:3B:D3:C9:5D:07:FB:AC:7C:EB:6F:DD:F2:72:8F:D9:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48b04ea5-053d-355d-9e7e-68ca99d7a329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:35:30:34:5c:21:ef:f6:94:1d:6c:c4:c9:fe:e8:e0:69:b6:
         0a:79:0d:46:d9:77:19:3a:5c:85:c2:55:de:ca:43:4f:19:39:
         06:15:b9:84:df:2c:ee:99:d4:0d:f0:31:69:00:e2:1d:76:14:
         ba:50:e6:f9:e7:80:31:47:e3:37:ad:a4:7d:92:22:23:9a:a0:
         80:08:9c:e0:a3:8e:f0:31:f2:6f:2e:22:a7:f8:3a:14:98:b7:
         53:a6:0e:b6:6e:e7:5d:05:a0:0e:5b:28:0f:74:57:d3:c3:b7:
         fb:ba:a5:1b:13:1e:d2:3e:8a:8c:aa:85:f0:c2:24:4b:97:94:
         4f:51:7e:77:01:15:81:d8:49:45:63:71:10:f4:0b:2c:0c:f1:
         0f:68:3e:47:6f:9a:a9:c1:63:dc:da:21:91:d6:0e:6e:09:c7:
         48:0e:5c:69:1d:c7:06:df:d5:7a:87:7f:f7:ed:28:47:68:49:
         37:8d:2f:e3:01:cb:37:9e:69:79:5c:7a:8a:9d:7b:0f:4a:51:
         1e:b7:ec:00:bd:d9:07:6d:92:8d:78:2a:44:45:87:1d:08:d8:
         31:62:b7:62:73:2e:9e:91:4e:26:18:ec:45:20:98:39:4c:5b:
         4a:a9:ad:a0:7a:b1:45:c4:f3:09:4d:00:8c:2a:07:be:44:e8:
         fa:50:0e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:22:45 2025 by rpki-client