Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6b61834e-2ae2-302a-bbba-2708a06009d9.roa
File:                     6b61834e-2ae2-302a-bbba-2708a06009d9.roa (raw, json)
Hash identifier:          hP0KZ5p7obPcRxCZbxjag2//7CthjvWQv2JgNzYgnIM=
Subject key identifier:   F4:F3:93:FC:09:4E:A1:1D:C9:94:4B:CD:15:C9:D1:13:2E:1A:32:AF
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584A374ADAF5BA9CBDE242272B40
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6b61834e-2ae2-302a-bbba-2708a06009d9.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     54994
IP address blocks:        138.113.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:da:f5:ba:9c:bd:e2:42:27:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=c74bf4e9-17d5-4d3d-899c-0b15e9a6ef51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:1f:44:5a:13:1d:be:99:49:b2:af:60:b4:
                    c3:82:2a:db:02:29:73:91:b4:48:5a:72:fc:49:31:
                    bf:3a:9f:26:ee:98:6b:b9:bb:e7:81:ab:b5:2c:a9:
                    ba:e3:61:0a:c7:fb:ed:e8:bc:f7:63:f7:d7:c4:2b:
                    13:1f:8e:aa:9e:52:37:0f:ec:bb:15:bd:97:91:bc:
                    84:24:13:fa:ca:8e:4e:bc:81:0f:e5:43:54:0b:cb:
                    d3:95:93:18:0e:a7:ff:74:61:48:28:44:5b:fe:32:
                    b1:5e:41:56:9c:fa:07:bf:75:d0:db:5b:df:46:52:
                    39:66:14:8b:d3:7a:fd:3f:c0:71:33:08:05:f6:92:
                    96:7e:01:bc:ee:62:a2:e1:be:46:10:5b:7e:1f:9a:
                    23:74:27:6f:b1:12:a3:e3:d0:61:54:9e:d1:d8:ad:
                    e3:16:11:56:c9:19:9f:fe:90:56:f0:c9:43:cc:6d:
                    12:de:5c:15:5f:81:86:41:17:d6:2d:88:53:1e:fd:
                    10:c6:1d:61:3e:ea:8e:a0:2b:1c:b6:0e:15:1f:9e:
                    f7:7a:8e:f1:d6:28:05:c6:d1:81:89:7c:4c:1e:a3:
                    db:29:13:26:d6:d5:5b:4d:99:da:d3:7d:5f:07:ca:
                    e5:ca:dd:f6:24:b8:c6:db:31:4b:7e:d7:b8:90:24:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F3:93:FC:09:4E:A1:1D:C9:94:4B:CD:15:C9:D1:13:2E:1A:32:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6b61834e-2ae2-302a-bbba-2708a06009d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:77:c9:bc:8d:50:1f:e9:3b:1c:93:cd:58:67:36:00:11:6b:
         8a:20:b1:66:75:76:bb:49:9b:57:82:1e:a3:02:fc:22:0b:4b:
         4d:e4:f3:9d:39:c4:ed:9b:5d:b6:2c:fa:e2:c9:c0:5a:e9:d5:
         ae:0a:42:7d:35:40:ae:67:b9:70:02:0c:91:35:50:3e:d5:f9:
         c0:e1:90:0b:d3:e0:1b:7e:48:8c:3e:fa:72:bb:b5:6c:93:7f:
         52:d9:3d:bd:e4:61:ff:78:43:77:e5:f7:70:91:0c:e7:6d:e0:
         a8:90:a0:fe:46:5e:06:53:d1:35:ec:86:d7:75:8e:96:6c:62:
         64:d4:06:88:d9:1a:82:bb:ff:5c:13:34:ce:8a:47:00:c9:69:
         d3:73:5e:c9:98:57:b3:e4:46:a2:86:f3:fa:eb:93:ba:1d:03:
         8f:b2:c2:1e:e0:ff:cd:1c:fc:c8:56:47:11:6b:44:6c:aa:07:
         11:72:ad:f2:49:e8:a6:43:5c:12:eb:1f:50:88:1a:10:b0:14:
         8b:a6:34:60:80:84:bc:90:4e:35:a7:15:63:9c:30:bc:f8:d4:
         61:70:3e:e9:4b:d0:75:20:b6:76:6d:f4:fd:bd:cf:0f:64:dd:
         ce:8f:a5:06:cb:b1:5b:54:57:c1:5a:69:e6:5e:04:9f:bd:7f:
         f2:df:64:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:03:45 2025 by rpki-client