Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa
File:                     e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa (raw, json)
Hash identifier:          Bdv3q4M1FuDITBxL+fdXClWe04hSvuPIzWXkm9VrbjA=
Subject key identifier:   23:4D:43:01:4F:1A:01:A5:BF:F3:A1:24:B6:B2:C4:00:41:1C:5E:23
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584900215E0AD27F9A58C8232D00
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     19257
IP address blocks:        138.229.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:5e:0a:d2:7f:9a:58:c8:23:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=bf4f4465-02c2-4e5b-bef7-4d850e667151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:be:27:9f:44:42:36:b2:87:ae:65:1d:63:
                    22:74:25:2b:53:f1:35:a1:3d:e4:50:52:b2:25:f7:
                    65:12:17:b7:13:a3:9c:75:53:67:17:80:8e:c4:67:
                    23:84:4c:8e:a0:a0:ab:01:56:7d:a9:7a:df:f3:45:
                    42:46:7d:b5:87:79:55:a0:e2:b2:48:48:00:d5:ef:
                    ea:51:1f:8e:b1:dc:92:68:27:b7:e2:da:f2:6f:e1:
                    ef:20:ad:c1:83:b3:f4:13:88:d6:e6:0e:43:f8:86:
                    0c:48:10:ff:8d:42:31:fe:38:7c:7b:bc:da:41:1b:
                    d7:14:06:97:c8:15:b2:42:bd:1f:eb:8c:59:9b:af:
                    14:8b:0c:37:de:2e:6c:7e:6c:37:5c:9b:7c:80:f1:
                    39:f6:7c:d9:23:ce:e6:08:9f:15:34:2d:02:aa:81:
                    6e:79:33:ba:aa:23:33:f8:bb:bb:b8:e3:f5:ec:81:
                    8a:f6:dc:9f:d8:ed:b8:50:59:ef:17:ba:20:cf:dc:
                    0a:74:fe:1a:54:6f:54:6e:54:d5:b7:b4:e7:d9:29:
                    eb:85:13:16:31:80:3b:26:3b:5d:54:4c:b8:9b:8a:
                    9e:3a:e6:30:43:e3:a9:d5:e7:e5:50:79:06:4d:15:
                    d2:6a:c5:05:e0:b7:42:9f:c7:4a:0c:b6:56:a6:ad:
                    da:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4D:43:01:4F:1A:01:A5:BF:F3:A1:24:B6:B2:C4:00:41:1C:5E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/e8874dbb-bef6-3aa9-af33-e0455fcd9fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:13:31:be:27:4c:85:41:61:96:9e:86:86:3f:df:91:57:ba:
         fc:91:69:22:6b:19:d2:3d:69:77:4b:81:15:9c:0e:d7:b0:0b:
         cd:90:62:e6:98:08:cc:c4:40:99:0d:dd:df:53:0f:ff:a9:37:
         c8:f3:bf:b7:80:19:f8:77:c5:4e:62:02:25:6a:74:2d:49:c2:
         b3:e5:7c:89:d4:f1:24:71:66:bc:9b:da:7f:9e:5c:93:5c:0c:
         6d:92:98:27:ac:23:37:4c:41:e6:47:ba:6a:26:07:f6:26:cd:
         90:2d:57:c2:b4:16:bc:5b:c8:76:08:fc:52:09:b2:90:a0:04:
         28:99:a0:92:68:17:37:d0:11:37:86:67:64:b7:d0:2c:d5:68:
         87:7c:d3:fc:32:12:80:91:0f:47:51:f6:81:32:25:59:15:de:
         15:78:37:34:b2:5f:20:6b:69:7c:df:f9:a0:3c:4d:7c:68:f6:
         0a:ee:6b:c2:73:7a:33:90:9f:ef:e8:32:50:74:ab:a7:bc:79:
         36:dc:89:d0:1c:3d:ac:e9:91:46:12:e2:09:2f:a6:1c:e0:c1:
         f6:f9:b3:81:54:07:e1:34:60:6f:47:81:18:cc:89:a7:09:f9:
         cb:c6:1a:13:8c:5a:04:40:61:8c:12:1d:a2:c1:8d:59:7e:d1:
         61:a7:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:50 2025 by rpki-client