Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4474bc37-4630-3d73-9201-79bf4e9bf4fc.roa
File:                     4474bc37-4630-3d73-9201-79bf4e9bf4fc.roa (raw, json)
Hash identifier:          YbKj1JhfeKy2OJQ4f9rel4lutzmP9rS1yFCkwrxgh08=
Subject key identifier:   02:CA:AF:5F:E3:19:37:49:47:A1:D8:ED:B0:A2:D1:D2:EC:61:4B:9F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A4961678B06177438F7B0A980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4474bc37-4630-3d73-9201-79bf4e9bf4fc.roa
Signing time:             Mon 23 Jun 2025 12:31:02 +0000
ROA not before:           Mon 23 Jun 2025 12:31:02 +0000
ROA not after:            Sun 21 Sep 2025 12:31:02 +0000
asID:                     20001
IP address blocks:        138.229.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:61:67:8b:06:17:74:38:f7:b0:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 12:31:02 2025 GMT
            Not After : Sep 21 12:31:02 2025 GMT
        Subject: CN=882654ac-c4d8-4669-a593-f9950ebb58fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fb:6d:e1:e7:8e:6d:4e:2a:6f:1f:35:23:09:
                    85:67:a0:91:df:95:38:3c:e7:09:ce:ad:be:4e:82:
                    d1:cd:9c:8d:1b:a0:22:cb:50:69:87:70:f0:72:4e:
                    4f:ec:f3:d5:9b:4c:09:c2:a4:a0:e1:16:80:ad:6e:
                    d2:92:da:a1:19:c4:2c:96:20:73:7a:00:8e:b8:04:
                    1e:78:f7:07:ef:6d:76:84:b2:47:4e:99:ba:e0:88:
                    77:dc:db:c5:70:b8:47:62:41:0b:b3:c8:bb:ea:f0:
                    9b:ed:ad:17:18:10:c2:5d:fb:a7:9c:7f:ba:1c:b4:
                    1a:46:bd:69:65:c4:fc:57:5d:df:d3:75:e8:36:51:
                    58:ac:14:26:ec:a8:4e:6f:2b:b6:90:43:c9:da:9b:
                    f0:90:a6:15:d0:c3:fc:8d:8f:f5:b5:37:c3:42:46:
                    78:65:e5:d4:b1:58:f0:06:2f:31:fe:d1:ed:cb:dc:
                    0c:28:a8:03:d9:f0:ce:bc:6c:b2:f3:b6:23:b7:67:
                    ce:f3:fb:80:cb:5a:57:5b:21:e7:c6:05:81:7c:4a:
                    5f:ff:a0:05:fe:9f:b4:32:df:3a:c3:ac:fc:fa:3c:
                    4c:c3:53:3c:e0:4f:bf:bd:1e:d2:0a:98:9b:80:6d:
                    c7:b4:42:a7:77:05:c4:c4:d9:52:25:18:d2:3b:64:
                    d3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CA:AF:5F:E3:19:37:49:47:A1:D8:ED:B0:A2:D1:D2:EC:61:4B:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4474bc37-4630-3d73-9201-79bf4e9bf4fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:98:c6:e1:72:da:74:0c:fd:1d:e9:c9:96:bd:5e:42:de:f0:
         7d:0d:27:e2:da:96:ec:49:63:59:90:fd:02:c3:6c:18:6a:15:
         97:43:95:38:b7:ae:bc:ee:7f:25:f4:8e:ee:33:ff:ee:8f:e2:
         a4:c5:ad:3e:9d:b8:20:c4:00:f2:a4:f0:3d:e9:42:34:fd:60:
         62:e1:fb:27:98:80:dd:00:14:9e:3b:c5:58:32:14:47:22:fa:
         01:05:93:1c:25:68:a5:8d:23:d7:c1:28:32:22:a8:fb:5b:05:
         b5:31:e4:6d:c2:19:28:24:a0:fa:71:d1:e8:9f:64:7b:6d:d4:
         d4:04:b0:b7:ec:61:34:28:5f:75:76:d2:38:a3:1a:a9:27:68:
         bf:eb:33:24:4a:5c:69:33:56:f4:46:7d:54:d6:09:69:e1:c5:
         8f:4a:65:59:e2:d5:85:b7:99:6c:2d:49:14:0c:38:f4:fc:68:
         00:81:51:33:e5:45:bd:5a:9d:1d:95:7a:b9:d7:21:95:b2:9d:
         e8:50:82:88:ac:75:02:e2:6d:8e:be:81:a0:87:83:e1:5f:e1:
         e9:d1:77:29:4e:8e:eb:41:df:e4:46:10:ed:29:6a:ee:6a:8b:
         de:be:e6:c0:55:de:dc:09:b5:a4:92:c9:a0:ef:89:d9:b5:86:
         f1:de:bb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:01:13 2025 by rpki-client