Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/ebbe6513-77c1-312f-b035-be5606ebaf77.roa
File:                     ebbe6513-77c1-312f-b035-be5606ebaf77.roa (raw, json)
Hash identifier:          aAuVNaLV+RXzSZPhphOeOVn82gQbF2sA91lWEJXUObI=
Subject key identifier:   71:8C:12:6D:0E:24:3E:6C:C3:54:77:10:A7:50:E7:84:69:3E:31:2C
Certificate issuer:       /CN=e0cdac38-6681-4b09-b992-31d2030b8796
Certificate serial:       010D0C9F4328584986046DC410C6B934D995BF00
Authority key identifier: AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/ebbe6513-77c1-312f-b035-be5606ebaf77.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        138.133.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:6d:c4:10:c6:b9:34:d9:95:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0cdac38-6681-4b09-b992-31d2030b8796
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=064283ca-363e-4be1-99a8-fe3b6cb2498a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:1e:04:ff:75:e4:cd:4b:b6:d7:be:fa:57:
                    98:97:d2:e8:5e:72:d4:86:55:63:37:75:4c:4a:de:
                    61:d7:98:df:16:d1:bc:90:13:60:3c:a5:0b:e1:da:
                    99:05:56:9e:c1:52:9b:c6:85:a6:9a:1a:b4:49:3c:
                    dc:ed:13:21:d5:1e:99:2d:82:2f:4c:e1:a9:0c:6d:
                    85:78:e3:da:17:89:72:16:e8:c9:a4:ee:0d:ff:db:
                    94:82:be:eb:b4:13:80:91:72:91:22:4f:21:c8:12:
                    2b:d2:e4:e9:b7:3a:1f:b4:e6:41:ea:88:e5:d9:17:
                    5d:f2:b6:6f:1b:c6:91:88:3c:40:90:f7:40:ee:79:
                    ea:27:c6:45:a0:63:8a:6b:5c:29:9c:76:a7:16:d0:
                    93:a1:d0:fd:43:82:4d:a8:f0:81:68:e3:09:f4:a8:
                    f7:e0:6b:b8:43:b5:b8:b2:a6:5f:b8:41:6b:d3:cb:
                    26:40:3b:8d:ce:ee:80:da:7e:af:f7:7a:f4:10:43:
                    42:ba:2e:5e:cd:66:ef:a4:07:fa:17:2d:b7:c3:df:
                    36:dd:4a:05:18:e3:3e:5f:0f:b1:90:db:ce:f6:f3:
                    6e:ab:17:3f:14:94:7f:ff:94:eb:f7:27:ff:52:60:
                    e5:10:b0:d9:c2:62:66:62:59:3a:ac:4f:17:a2:e0:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8C:12:6D:0E:24:3E:6C:C3:54:77:10:A7:50:E7:84:69:3E:31:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/ebbe6513-77c1-312f-b035-be5606ebaf77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl

            X509v3 Authority Key Identifier:
                keyid:AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.133.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:aa:4d:ee:95:76:94:73:b3:70:ba:fc:77:3e:1c:b5:d2:41:
         2c:9f:4f:93:0e:cc:74:66:22:3e:dc:d1:c4:10:23:b1:6b:17:
         a4:50:bf:b1:60:07:fb:54:cd:41:2e:5d:4e:c5:41:a8:16:75:
         f3:23:36:98:7b:b4:f3:7e:d1:a9:d6:51:6d:92:b6:20:72:e5:
         2e:ad:2f:07:e7:f5:fc:c1:7e:f4:7c:5e:eb:9d:05:cc:16:50:
         0b:48:95:44:4e:04:cb:40:2f:c5:b7:2b:b8:1f:cb:3e:5b:e5:
         43:70:67:51:fd:af:25:bc:c9:5d:a8:4d:f5:00:ce:61:80:30:
         bd:bf:c9:74:d3:66:0e:5f:5e:79:92:55:f6:5a:ea:d4:3d:e8:
         4f:a0:66:57:b1:f2:23:70:28:cd:10:44:a9:e0:c6:39:05:7d:
         bf:5b:ca:bd:72:82:45:7b:ec:56:e7:a5:39:0c:34:c5:58:90:
         38:eb:37:b9:fc:cf:bb:0c:60:14:ff:4b:82:0e:4f:51:46:30:
         65:ce:59:d0:69:67:44:7a:aa:07:61:93:68:90:1b:16:58:af:
         e3:25:21:ff:63:2a:91:3b:de:51:4a:b5:e0:35:c7:8e:f3:8b:
         24:89:c5:cb:22:e7:e5:c1:88:5b:59:f4:99:f6:e7:d4:2c:12:
         d2:80:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:29:59 2025 by rpki-client