Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/28439977-ae0f-3746-8900-37f43cb824e7.roa
File:                     28439977-ae0f-3746-8900-37f43cb824e7.roa (raw, json)
Hash identifier:          idrTunXt4E9Ka7DRKTDB91gnSla8N1Kg4kxhlIbMeqo=
Subject key identifier:   34:B9:42:13:E0:0E:30:20:E8:9E:6B:50:67:A2:01:6B:69:FA:0D:D5
Certificate issuer:       /CN=4266161f-2cd7-4d22-a980-bfb4d861e17b
Certificate serial:       010D0C9F4328584A56004E1BB0451CE5C9BF7000
Authority key identifier: C2:5E:05:A1:A1:3E:84:68:0D:00:F5:AA:13:25:7C:00:10:0C:A2:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/28439977-ae0f-3746-8900-37f43cb824e7.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     33561
IP address blocks:        138.84.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4e:1b:b0:45:1c:e5:c9:bf:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4266161f-2cd7-4d22-a980-bfb4d861e17b
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=c1c52f00-e0d5-45e2-bd8c-1dc7fc07e7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:40:f2:e8:d0:dc:10:1c:0b:20:3f:b5:19:
                    39:97:51:9b:c3:1c:c7:a5:4e:06:ee:6d:be:b3:0e:
                    31:00:db:4a:a5:c1:5c:b1:5e:b5:d2:75:b8:4c:7b:
                    47:d3:d3:ba:20:2d:93:61:3d:3c:4e:28:4e:47:d9:
                    ed:e7:0f:0b:d1:d9:65:1c:4a:4d:9b:06:78:cb:48:
                    b7:b1:87:1b:14:67:a0:22:4f:33:07:d4:4f:94:6a:
                    5a:1b:21:7a:a1:69:7f:c5:e6:05:eb:a4:0f:b6:6a:
                    94:52:30:47:7c:41:ed:8b:50:78:c3:32:16:4f:61:
                    73:2b:ad:b0:42:67:23:ef:f0:23:98:0c:11:f7:13:
                    fa:32:20:d8:b3:fc:10:ec:9a:c9:dc:c0:c8:36:50:
                    97:99:22:16:d0:26:36:50:93:07:7a:af:fb:ac:1a:
                    e2:aa:38:08:c8:16:5f:ac:a5:7d:8c:7b:3a:32:0a:
                    8a:50:e5:f2:29:c8:72:5f:45:63:59:51:e4:84:bf:
                    08:2f:0e:4b:bb:7a:9a:48:35:11:04:9b:eb:06:b8:
                    f1:a0:a1:f5:72:63:7d:4e:8d:e1:21:2c:05:b3:cb:
                    72:6d:9e:4d:74:5a:d1:08:2d:dd:1c:10:8b:6f:36:
                    e8:d3:aa:cf:98:bb:79:10:23:b2:11:02:9f:8a:b7:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B9:42:13:E0:0E:30:20:E8:9E:6B:50:67:A2:01:6B:69:FA:0D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/28439977-ae0f-3746-8900-37f43cb824e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.crl

            X509v3 Authority Key Identifier:
                keyid:C2:5E:05:A1:A1:3E:84:68:0D:00:F5:AA:13:25:7C:00:10:0C:A2:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ea:a8:ec:56:ae:25:5f:ba:5e:4d:bc:93:de:de:34:50:a1:
         4f:7d:66:48:2a:0b:b7:5f:96:89:93:fc:b2:cf:53:1c:c3:fa:
         a5:fe:9c:6a:29:58:a5:ca:df:cc:6c:da:f1:5f:e6:0d:5f:20:
         6f:b9:d9:e9:e2:77:cd:c9:e6:e4:15:aa:06:60:f4:8c:48:c8:
         8c:c3:4b:fe:30:a4:ac:ed:c3:0c:45:df:9f:ef:68:0d:7d:3f:
         80:99:a3:20:37:c6:b0:e2:33:28:9c:ce:87:49:2f:65:b2:a4:
         97:3d:6a:33:fe:3a:2b:2f:b8:1f:c3:86:3e:c9:db:c2:a5:75:
         f9:9f:67:2a:0b:9f:b4:96:4d:da:d3:82:7d:ea:15:53:3b:f0:
         ab:2c:90:f4:0e:11:b7:62:7d:30:a3:90:86:81:54:d6:6c:88:
         9f:cb:6f:d5:53:12:06:5c:1f:d3:44:f8:b0:15:e5:bd:d5:d5:
         29:57:73:aa:cd:3a:58:30:aa:27:80:00:a1:29:e4:b3:72:69:
         eb:17:3f:58:f3:75:23:ea:0a:80:ba:57:a6:2e:ca:59:e6:57:
         3d:c2:5a:bf:2d:0c:3b:f3:e4:6d:6b:68:a1:be:e2:55:6b:0b:
         c5:3d:a7:a9:b2:67:91:6f:ee:2c:01:28:de:f4:fa:16:7d:29:
         1f:8e:ee:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:33:36 2025 by rpki-client