Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0bcb4f8b-fcd4-31a1-9493-e4407fcf1da9.roa
File:                     0bcb4f8b-fcd4-31a1-9493-e4407fcf1da9.roa (raw, json)
Hash identifier:          oMZVBucdfU17PWjFgmw4Jc3L/clGd6U4DmLMTJHmR/U=
Subject key identifier:   93:64:98:6D:76:2D:E0:0B:24:18:DA:A2:9E:01:BA:45:4E:4B:6D:AF
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A383E1ED3DAD13166AD5E3480
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0bcb4f8b-fcd4-31a1-9493-e4407fcf1da9.roa
Signing time:             Tue 17 Jun 2025 09:11:12 +0000
ROA not before:           Tue 17 Jun 2025 09:11:12 +0000
ROA not after:            Mon 15 Sep 2025 09:11:12 +0000
asID:                     7029
IP address blocks:        138.229.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:3e:1e:d3:da:d1:31:66:ad:5e:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 09:11:12 2025 GMT
            Not After : Sep 15 09:11:12 2025 GMT
        Subject: CN=5266f664-c7c9-48f9-baf3-de8950becb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:56:b4:ff:34:26:09:e8:4e:29:69:58:6d:0a:
                    92:62:95:eb:24:3b:0b:df:56:64:b3:57:86:f0:f3:
                    69:3d:6d:69:57:bd:35:c5:b6:a6:c8:3c:7c:48:7c:
                    11:3e:eb:78:42:b4:81:06:dc:f2:05:d6:98:54:ba:
                    22:38:d6:4d:16:6a:13:6f:ed:48:d3:e0:28:c0:36:
                    9f:6e:74:40:98:43:1c:96:31:22:83:89:3f:07:55:
                    5a:ca:ce:ce:69:46:e5:3a:d9:de:e0:43:95:f9:70:
                    ef:03:cf:e9:bc:d4:fe:a5:53:55:75:53:bf:5f:ae:
                    1c:53:91:c7:b3:a6:44:78:c9:b7:34:75:b6:f4:4f:
                    e1:de:c6:cb:4b:5f:a1:e9:6a:25:97:1e:3b:99:92:
                    d3:60:2b:b0:b9:5e:eb:4d:4e:68:9d:1a:56:05:aa:
                    f7:60:9e:b8:b2:3b:3a:27:5e:d1:79:c2:13:3a:b6:
                    f3:31:49:63:41:7f:bc:d0:eb:d1:57:bf:ec:a0:b7:
                    bf:8d:aa:aa:ef:59:cb:91:97:b0:ea:43:c8:ef:24:
                    43:d3:27:6e:d3:cb:ea:8c:2b:4a:8f:37:4b:ac:80:
                    ab:27:64:a9:d1:86:df:dd:22:86:32:f4:aa:f9:78:
                    b7:49:f2:9d:ee:99:da:fb:37:ae:ff:df:31:05:c6:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:64:98:6D:76:2D:E0:0B:24:18:DA:A2:9E:01:BA:45:4E:4B:6D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0bcb4f8b-fcd4-31a1-9493-e4407fcf1da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:83:68:e7:c6:b3:f0:e3:f0:63:1d:ac:34:1e:c5:e3:a1:1f:
         73:d5:8d:be:ec:69:5d:9f:80:d3:ca:3d:37:1d:6b:32:0e:4e:
         dd:4b:1f:24:81:e1:22:8f:62:4e:ff:d7:a3:24:7f:04:3b:1b:
         51:a2:3d:8f:21:be:0f:53:c0:6d:81:ee:60:2c:50:81:59:d8:
         54:14:c7:02:a7:ef:62:d3:2b:b6:6f:ea:de:91:b6:9c:83:90:
         e9:05:cf:54:17:3c:0e:f5:66:83:81:aa:a9:15:e1:9d:e8:b4:
         b9:a1:e8:59:18:00:7c:0a:90:a9:d4:79:7e:75:ad:f3:17:55:
         56:f3:ea:e0:b1:3d:52:13:3a:d6:46:cf:d6:19:ea:f7:a7:f1:
         11:5c:c2:fd:67:aa:84:39:1b:52:44:6b:2b:39:9c:fa:e6:1f:
         15:c8:ff:35:66:c7:71:d3:0e:7b:35:74:2e:4d:ea:d1:63:ef:
         46:f4:d7:73:18:6e:5b:63:87:c0:78:ca:d7:96:d4:c9:0a:3d:
         2e:ea:fd:2c:bc:31:d3:c9:1c:5f:90:27:33:fd:16:b7:bc:19:
         25:11:ba:69:48:2a:8a:ca:f8:dd:67:2e:6a:e2:25:b9:37:f9:
         bc:0e:b3:70:10:8d:70:57:c1:5d:41:0a:cb:e7:df:9a:44:75:
         81:0b:7f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:24:51 2025 by rpki-client