Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
File:                     b07b906e-1603-39e7-a468-674776625a7d.roa (raw, json)
Hash identifier:          6XDE99Z3pXINGr7kM8PuftHmE++sJqJ/1RIA/Kqxggk=
Subject key identifier:   15:6B:5D:41:8B:9F:B2:12:45:EE:FA:6E:8F:3E:70:F0:3A:8F:46:01
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584AD66B9B13F416452663D42440
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
Signing time:             Wed 13 Aug 2025 01:00:32 +0000
ROA not before:           Wed 13 Aug 2025 01:00:32 +0000
ROA not after:            Tue 11 Nov 2025 02:00:32 +0000
asID:                     33598
IP address blocks:        138.8.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d6:6b:9b:13:f4:16:45:26:63:d4:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Aug 13 01:00:32 2025 GMT
            Not After : Nov 11 02:00:32 2025 GMT
        Subject: CN=2ac038e3-7d66-457d-9fb3-8065de3f75dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dc:af:9f:e9:69:24:0c:57:2e:c9:f5:fd:28:
                    70:e6:e9:c3:a2:74:7d:f4:29:c3:b4:1f:16:4e:83:
                    b9:68:57:73:3b:97:85:aa:cd:a2:6d:81:60:18:96:
                    8d:97:0e:fc:05:24:30:00:63:39:44:12:62:96:ac:
                    9f:aa:03:1f:a7:79:88:3d:25:11:d9:af:c7:2f:63:
                    f7:a1:89:38:0f:82:42:bc:a1:c1:1f:39:e8:93:af:
                    78:af:9f:e8:b7:64:50:27:ea:d7:3b:5f:d2:bd:3a:
                    6d:c4:e4:21:19:6b:ad:7d:3e:20:70:50:2a:eb:b2:
                    bd:8c:69:f2:b5:74:19:9b:70:30:22:a8:2f:2b:20:
                    8b:40:15:49:c7:54:e7:09:87:43:d6:93:fe:7f:b1:
                    01:18:2c:bc:96:d4:34:24:e3:ea:55:34:62:16:1e:
                    5a:e5:bb:5f:de:99:78:2d:74:f4:24:9e:c8:db:54:
                    b3:c9:74:4c:cd:77:7d:64:3f:2a:9f:48:0a:8e:db:
                    3a:8e:8b:26:eb:85:6c:47:05:5a:f8:1e:73:96:3a:
                    ef:78:c2:53:68:49:31:5a:b6:37:ee:ca:ef:77:07:
                    58:bc:4f:d6:f6:d8:15:7c:fe:6f:26:51:c0:3e:5c:
                    44:2b:0a:9d:09:71:d2:d4:9d:2e:1c:21:a3:c5:d4:
                    e5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6B:5D:41:8B:9F:B2:12:45:EE:FA:6E:8F:3E:70:F0:3A:8F:46:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.8.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:64:f7:a7:04:da:7a:d1:1d:83:68:2e:c9:5f:7f:2e:a3:0f:
         78:a9:c8:0c:cf:6a:01:b2:16:61:35:9e:83:ab:5b:85:17:84:
         17:1e:48:df:c3:28:01:40:2e:31:bb:9a:14:cc:a4:a5:99:13:
         18:03:71:bb:40:6b:67:97:dc:5a:4e:fb:83:57:b0:f1:61:9d:
         08:4e:6f:35:b6:b7:d4:b4:36:04:e0:74:5e:7a:eb:20:87:42:
         e8:75:c4:5a:1d:2e:2c:83:c2:7a:f7:8f:db:8e:48:cf:6b:51:
         dc:0f:c6:ff:82:2b:a5:f4:ec:80:48:78:06:ee:c8:11:b3:91:
         0c:b6:27:27:06:43:7c:b4:a0:81:34:73:75:b9:95:2a:21:86:
         c6:03:34:e6:dc:ba:9a:52:79:2a:f2:e1:ba:ce:ac:7c:8a:5f:
         8b:17:c4:87:b5:c3:b0:10:55:de:49:b6:55:9f:f4:a0:17:f0:
         8a:0b:30:9d:b6:5c:4b:f7:3d:05:07:4b:fe:7d:95:ed:ce:a0:
         fd:c1:36:2d:11:9e:87:6d:2d:e3:6e:4c:11:a0:00:4f:17:d6:
         e4:52:2c:96:3e:6e:29:dd:f7:ac:ff:3d:49:90:4e:3f:7f:b0:
         d8:ef:15:11:74:7b:98:e9:31:76:29:03:e5:07:3c:81:30:cc:
         fb:0e:b3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:28:00 2025 by rpki-client