Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e8e9364e-c0df-3b18-a8df-bf3084064475.roa
File:                     e8e9364e-c0df-3b18-a8df-bf3084064475.roa (raw, json)
Hash identifier:          taouEDxxWKxLG3JfV+JscCjVKvr6X9o5BfHYvZmqKB4=
Subject key identifier:   69:C4:16:AA:7B:55:7B:6A:5C:4F:1E:9B:2B:2E:6D:74:8E:2B:53:28
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A49618EC45A2AEA582772C5C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e8e9364e-c0df-3b18-a8df-bf3084064475.roa
Signing time:             Mon 23 Jun 2025 12:31:20 +0000
ROA not before:           Mon 23 Jun 2025 12:31:20 +0000
ROA not after:            Sun 21 Sep 2025 12:31:20 +0000
asID:                     20001
IP address blocks:        138.229.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:61:8e:c4:5a:2a:ea:58:27:72:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 12:31:20 2025 GMT
            Not After : Sep 21 12:31:20 2025 GMT
        Subject: CN=459c29c2-d4fb-4cee-9abb-a3ec0379efcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:81:c8:82:1d:28:b1:ac:6c:23:25:3a:56:
                    a7:df:67:45:9a:c0:42:2e:9e:c8:e0:ff:14:bf:13:
                    8a:89:a0:40:6a:28:eb:53:18:6f:9f:99:3f:7a:0f:
                    74:e7:ae:ad:a7:48:92:fd:91:bd:2f:b9:dd:64:41:
                    49:25:e2:f7:e8:df:50:ea:a0:28:c3:d2:b7:2f:60:
                    67:88:c3:7b:5e:58:a5:ab:64:37:ae:78:1e:e9:44:
                    d2:8e:81:a6:60:a3:46:d1:6f:f0:59:4d:b4:70:58:
                    0a:b6:8c:b2:e7:ca:f2:ae:f6:99:bc:46:3c:d7:21:
                    28:b9:12:e6:b8:7d:aa:8c:82:93:fb:4f:96:e6:f7:
                    30:b2:d7:dd:70:cd:c6:b8:f9:ea:26:3e:50:e5:4e:
                    f0:54:d6:56:37:60:c9:39:53:d8:e1:71:94:38:37:
                    5e:f6:b5:cc:4f:30:34:dd:21:a8:be:77:c6:fa:48:
                    e1:1d:23:f0:c6:10:b4:e4:53:5a:99:64:6c:26:b5:
                    d6:9f:8b:a5:f3:1b:5b:75:e6:35:d1:8d:45:57:dd:
                    af:ac:3e:a9:93:a4:fa:43:31:36:ab:78:da:30:b3:
                    01:df:95:a4:31:50:2b:a9:b1:56:fd:9b:99:4f:fb:
                    31:eb:8c:60:c6:1c:c3:c0:6d:a9:c1:52:66:79:a9:
                    dd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C4:16:AA:7B:55:7B:6A:5C:4F:1E:9B:2B:2E:6D:74:8E:2B:53:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e8e9364e-c0df-3b18-a8df-bf3084064475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ee:8f:8d:de:a6:a6:cb:02:da:6f:91:f8:8a:fb:34:71:93:
         29:63:6a:4f:25:fb:f5:37:ba:52:28:73:e9:c2:62:fe:41:0f:
         3e:b1:e8:ad:47:d3:a4:1d:e5:cf:be:25:9d:25:0d:13:7b:86:
         ba:05:49:4f:84:b7:67:03:30:64:38:f3:55:51:9a:40:0b:cc:
         14:77:dc:ce:1f:cd:12:b3:b8:38:07:3d:07:a6:e1:33:e9:ca:
         44:22:80:11:d5:3d:54:15:30:3e:08:c6:02:ab:41:9e:6a:98:
         42:63:6b:c0:0c:00:6d:6d:1b:10:87:4f:6e:5d:80:ca:43:26:
         39:ad:ba:41:a3:67:ea:5f:f2:25:50:c0:c2:1f:34:57:5e:50:
         1b:91:66:a7:7b:e7:0b:c8:73:22:3f:a5:10:e1:7d:09:8a:ac:
         94:fa:2e:01:7e:07:12:e1:ec:67:5e:18:74:49:91:6b:8c:f8:
         a6:53:b1:1c:ff:39:0c:87:15:01:4e:5a:e5:1b:a2:d1:88:5c:
         1e:ac:22:52:9c:12:48:57:75:7c:fd:ac:5e:78:64:a7:9b:e2:
         9e:9a:b4:0a:65:a1:6b:48:47:65:b1:78:e9:58:51:88:28:ad:
         59:b9:87:b4:02:c3:55:b5:30:f2:5d:7e:ce:48:cc:cf:7f:9e:
         99:02:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:10:20 2025 by rpki-client