Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa
File:                     a26a7435-f5ab-3419-883b-022dc11c8580.roa (raw, json)
Hash identifier:          JWC9OcqSEGL+284ltqwIuj1tPjuGZH/RuCSwbCKf4ZU=
Subject key identifier:   42:12:1E:F5:8B:C9:AF:CC:DB:E2:59:CA:97:54:EB:00:BF:F9:D5:FA
Certificate issuer:       /CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175
Certificate serial:       010D0C9F4328584A14655BAAC6ED290E1D1FFF00
Authority key identifier: D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     198949
IP address blocks:        138.247.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5b:aa:c6:ed:29:0e:1d:1f:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea106b1-df5e-4fb4-bd65-5167ff6dc175
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=78d17dde-ba29-4501-bba1-049f68e166e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:79:24:c8:9e:77:07:17:ef:57:f0:d0:f6:
                    9b:48:23:b6:c0:d9:db:6d:d0:19:73:0e:97:de:70:
                    d6:5e:de:20:58:f6:66:05:87:4a:4c:8e:e3:61:57:
                    54:f9:19:37:80:4b:09:13:03:d7:19:fc:aa:ad:ca:
                    41:01:2b:1b:57:35:8c:a5:f6:af:e9:99:a7:84:91:
                    68:47:a0:e2:88:57:b5:0e:48:6b:27:1f:e9:90:3a:
                    0b:b9:e5:00:30:53:b5:69:f4:71:cd:c1:fe:07:28:
                    c7:c0:00:14:60:f6:2e:ea:5e:a6:93:92:71:1d:a0:
                    dd:5a:32:3d:8f:77:94:66:f1:5f:1e:67:29:5b:7a:
                    66:b4:8f:55:2c:6f:05:13:e3:fb:9c:9a:57:1d:7d:
                    33:37:70:36:87:bb:b9:ff:06:9b:df:41:e2:dc:6b:
                    a0:02:bc:d3:c8:83:8f:d3:4f:0d:34:ed:eb:8e:3f:
                    de:e5:54:80:f3:46:5d:b3:ef:02:3d:1a:6d:b4:92:
                    04:59:8b:62:36:43:55:b7:c9:ae:48:80:15:20:03:
                    bc:83:e1:63:24:53:e1:6c:15:03:7f:52:68:dc:02:
                    04:9d:10:91:46:73:b6:33:d8:31:59:bc:a2:e3:9e:
                    f4:45:38:42:71:a4:3e:b2:c8:76:08:95:dd:81:2a:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:12:1E:F5:8B:C9:AF:CC:DB:E2:59:CA:97:54:EB:00:BF:F9:D5:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/a26a7435-f5ab-3419-883b-022dc11c8580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.crl

            X509v3 Authority Key Identifier:
                keyid:D5:18:DE:17:15:7D:9E:BA:F0:5E:D6:1B:20:AD:7D:CD:A3:98:45:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ea106b1-df5e-4fb4-bd65-5167ff6dc175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:2c:dc:f4:de:8e:0a:80:7e:6f:d5:8f:f3:f3:1e:54:75:4e:
         9d:bd:07:2f:6d:a7:3d:cb:7d:4a:d6:8c:ce:68:dc:74:43:ed:
         bf:c4:c2:b2:f8:64:29:0a:00:c1:36:2b:6c:20:f7:18:2f:f0:
         90:64:2d:03:d6:88:18:59:9a:48:a5:7b:7a:ff:6b:6e:ec:f1:
         79:37:ea:33:2e:98:bc:3e:29:60:3c:fd:73:49:4d:cf:f4:b3:
         cd:d7:0e:9d:75:2c:4b:26:f5:84:9d:a0:ad:61:34:26:26:aa:
         43:0d:c8:82:92:25:66:60:9e:09:4b:2a:4b:35:77:50:ca:24:
         51:a4:ab:b7:2b:3d:12:47:79:c6:2e:b5:48:f1:35:0d:82:c1:
         d7:18:b0:d0:af:8d:f8:53:46:31:5c:d8:b4:d4:cb:b3:a6:e5:
         b9:0f:a1:b6:f8:58:ce:75:5b:9f:a4:6f:27:5b:05:da:21:0e:
         74:b8:45:69:a0:69:f8:57:6c:d8:2b:7e:a5:57:d6:b5:b8:ea:
         fe:b7:be:07:fe:a6:32:27:48:f0:56:0b:db:bb:ae:d4:8a:f1:
         13:07:00:0f:18:f4:8c:50:c7:1f:6e:ca:c9:51:2f:a7:16:22:
         26:0e:61:4e:e9:95:7b:07:09:01:2c:32:4b:81:9b:3e:f8:90:
         eb:b6:a6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:42:30 2025 by rpki-client