Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa
File:                     458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa (raw, json)
Hash identifier:          7xgEZ+8Tpwou45UnPDTyRtmvsXFDUOgAD/AonFk0ARA=
Subject key identifier:   73:DD:72:73:87:55:9A:58:0A:D2:EF:C6:7A:77:58:87:DD:65:9B:BB
Certificate issuer:       /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175
Certificate serial:       010D0C9F4328584B0A1163D42BE88734962CD180
Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     23122
IP address blocks:        138.247.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:63:d4:2b:e8:87:34:96:2c:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=b8b41ffb-7d34-478b-856f-479e2e963556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:94:74:45:d2:57:4f:53:08:c6:e0:aa:ae:4f:
                    a1:41:2f:6b:e2:2a:61:a4:fc:6f:8b:70:38:10:59:
                    a4:ff:8d:0d:c2:b4:e5:e4:64:34:81:40:92:4d:ad:
                    94:e2:c6:df:d1:74:b6:dd:c9:8c:d9:d8:4b:74:b6:
                    35:45:ef:d5:26:3e:2c:27:73:46:43:d6:6e:f6:46:
                    a0:85:35:3f:7a:7d:6a:3b:5b:9a:58:19:9e:57:f4:
                    63:5d:81:53:87:68:28:4e:31:dc:fd:51:ac:34:52:
                    fa:a0:43:fd:de:46:1c:ea:c7:92:e7:61:9b:2e:73:
                    89:2f:83:ac:99:46:3e:33:98:b8:46:25:a2:4a:86:
                    51:e4:c3:e6:7e:e7:de:6a:76:f6:3b:2d:29:1f:e4:
                    08:38:9c:3b:8e:e1:26:ef:68:27:25:c6:bf:ce:97:
                    c9:0e:61:ca:44:ff:f2:e5:47:e7:da:7e:55:d4:cb:
                    73:72:8a:f5:e9:75:91:4f:f6:65:06:27:d4:bd:3c:
                    5f:1d:8f:71:21:9d:e1:79:9d:bf:de:fc:99:5f:c4:
                    90:b2:1a:ae:24:05:24:08:51:e9:fd:08:0c:98:97:
                    a9:70:1d:b4:b1:4c:1e:c6:0f:59:2a:e0:c2:e9:ee:
                    ec:98:6c:4e:4d:7f:f1:e8:f8:a7:77:10:df:45:fc:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DD:72:73:87:55:9A:58:0A:D2:EF:C6:7A:77:58:87:DD:65:9B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/458a3099-c1e2-3fdf-b420-80c8fd5c5339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl

            X509v3 Authority Key Identifier:
                keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c3:90:d5:54:b3:d5:b9:12:b0:26:e9:21:d9:0a:d7:7f:3b:
         4c:3c:6c:55:c8:79:65:40:86:76:db:ac:c0:16:a0:63:57:72:
         ee:af:55:ea:b9:ce:8c:29:8f:1f:6b:70:2d:f5:72:6b:35:3f:
         48:14:cf:b0:ae:a9:69:07:57:a6:f0:88:1a:02:26:57:de:83:
         18:cd:69:c7:3f:68:9f:da:5b:a6:b5:9a:e7:3b:9d:e0:30:5a:
         49:72:ec:e2:5e:a9:10:d2:79:8c:2a:bc:8e:e8:35:fa:c1:64:
         e8:7d:84:be:90:59:26:3c:2b:77:92:da:26:58:ca:76:74:ef:
         c7:9b:97:11:47:d9:e6:f3:5b:3b:0a:1d:df:60:97:17:71:4b:
         15:ac:38:5c:f8:a3:e1:c6:4b:7a:e9:9f:53:94:55:a4:80:89:
         09:15:4c:50:79:fa:e3:5c:6a:98:d1:e7:e1:77:05:fa:7b:7a:
         2a:b6:56:6b:d3:07:86:f1:57:a0:0f:4e:a3:2a:c4:60:7b:af:
         7b:3a:0a:a5:ec:d9:38:f2:a2:da:26:a8:06:e8:df:48:d9:cc:
         4a:bd:37:ca:e1:bd:b9:b6:6b:27:5c:c6:f7:03:dc:94:59:df:
         da:90:94:40:3a:c0:b1:b8:8d:3a:fc:cd:ee:af:67:60:00:4a:
         ba:10:c2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:45:47 2025 by rpki-client