Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa
File:                     14e815f8-9bf5-3679-b99c-adfb53e03dab.roa (raw, json)
Hash identifier:          zh21mnRKUXz4An4pXTxVuz3yBZpDiHI4CrrWeHxMWuU=
Subject key identifier:   E3:33:DD:90:C4:44:6B:68:C1:C5:D8:6A:D5:09:F6:BC:84:3E:88:00
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F432858498769ACAAC0D0059DECF29380
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396253
IP address blocks:        138.43.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:ac:aa:c0:d0:05:9d:ec:f2:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=73238098-1d26-4335-ac7d-164f197ff616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:1c:7f:dd:a8:e2:58:24:a2:6b:8a:af:18:
                    33:5c:36:52:30:42:38:eb:9b:f3:aa:c9:f0:e2:75:
                    ec:45:30:a4:8c:67:b9:8d:ae:e5:1d:22:1e:45:ae:
                    07:ac:ed:b8:65:49:4d:e5:6d:e9:00:84:8a:e7:bf:
                    3b:28:90:e8:2e:b5:57:ea:72:a8:46:8f:d7:3c:ee:
                    f6:6c:37:72:12:ae:9a:8e:07:bc:a7:23:6a:22:b1:
                    47:96:2d:aa:b0:d5:d7:cc:08:75:dc:00:7d:3d:84:
                    9e:51:34:83:88:8f:cd:1f:95:89:6b:ab:e4:26:e0:
                    b3:3b:c9:5f:c7:bf:2e:d1:b2:c7:e6:e5:65:be:4d:
                    44:c2:13:9e:7e:e1:bf:6d:3c:cd:2f:45:f3:7e:45:
                    4d:6b:82:6c:ca:94:a5:35:9c:d9:08:e5:b5:08:03:
                    24:ea:5a:8b:ef:fa:bc:2a:12:45:b0:63:49:d7:ec:
                    29:d0:b2:b5:44:be:75:20:6b:83:ea:c9:65:b3:88:
                    b9:9f:59:e9:79:58:c0:dd:43:5d:85:a0:df:fb:07:
                    cc:b5:7a:b2:6d:41:6c:20:7a:7c:2d:05:17:ce:17:
                    e3:e2:45:84:fd:4a:75:3c:ba:3d:81:a3:28:73:52:
                    e9:0c:47:cd:07:7d:e8:7a:88:0a:34:8a:92:35:e8:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:33:DD:90:C4:44:6B:68:C1:C5:D8:6A:D5:09:F6:BC:84:3E:88:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:69:c1:d8:5e:48:05:44:eb:b6:77:05:0d:3f:04:24:13:6b:
         6b:c0:f1:7a:f9:2c:20:4f:51:91:a4:50:ae:48:3b:fd:32:eb:
         36:b3:77:a6:4a:80:a5:3e:34:c4:94:d3:ef:61:a2:df:bd:63:
         ed:61:99:a0:c2:74:a4:a3:9f:b0:7d:59:8d:fd:7c:c3:aa:21:
         13:ef:1d:b0:22:9f:fc:dc:f9:bc:c5:72:90:22:43:45:a8:60:
         58:7f:48:61:ef:fe:18:99:2e:7b:4a:41:c4:79:46:8b:4f:48:
         91:72:1e:77:3e:54:ca:20:83:8f:23:e4:86:bc:1d:2c:18:f9:
         30:77:db:0e:88:64:d1:07:17:3c:d4:54:9a:ee:a0:ad:07:04:
         32:c1:06:75:58:ad:5f:e3:db:09:e4:e4:43:a1:f2:ea:73:03:
         84:93:e7:e8:fe:51:8b:a8:73:7f:f6:08:59:88:c5:a3:1a:9a:
         6f:34:14:5b:c6:40:53:78:de:de:46:c2:77:ae:d9:fa:a6:a8:
         cb:47:5b:22:f1:3f:25:01:7d:d8:13:2e:44:af:14:2a:dd:35:
         d1:ef:f7:de:40:aa:50:78:02:42:ec:78:6f:6c:7d:ba:ea:30:
         a2:82:7c:a1:02:b1:7f:09:79:89:c2:b1:30:6b:93:2f:5b:9c:
         2c:21:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:07:21 2025 by rpki-client