Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ac1a6a6-f436-3e6c-916d-be3f06e77045.roa
File:                     9ac1a6a6-f436-3e6c-916d-be3f06e77045.roa (raw, json)
Hash identifier:          werJdg1uANle9GR8Tqxz+Nl+dZHSi6bzVJCIMeYj8I8=
Subject key identifier:   32:7A:5F:A0:AA:8E:C4:0B:6C:CD:24:13:90:9E:F4:8C:C9:8D:B3:91
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A383FB079380A88C42EB14460
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ac1a6a6-f436-3e6c-916d-be3f06e77045.roa
Signing time:             Tue 17 Jun 2025 09:14:21 +0000
ROA not before:           Tue 17 Jun 2025 09:14:21 +0000
ROA not after:            Mon 15 Sep 2025 09:14:21 +0000
asID:                     22516
IP address blocks:        138.229.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:3f:b0:79:38:0a:88:c4:2e:b1:44:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 09:14:21 2025 GMT
            Not After : Sep 15 09:14:21 2025 GMT
        Subject: CN=9ad531f1-78f7-425d-9140-237b1a086684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:36:a1:d4:7b:fb:d2:7e:b0:6b:68:6c:16:dc:
                    71:e8:94:55:62:3b:b4:6f:ca:38:3b:03:64:9c:fa:
                    59:08:04:79:92:12:74:9d:ac:73:da:33:82:03:45:
                    33:4c:cb:e3:e9:26:06:a0:94:93:21:ef:b6:da:06:
                    31:27:54:ce:8d:5c:d2:5b:4b:40:59:e7:b7:15:ae:
                    98:27:bb:91:e2:ef:dc:f9:4d:99:d5:69:ca:d4:fb:
                    ba:2f:f2:8b:e3:76:fb:24:1d:93:b4:3c:b7:cd:47:
                    8d:5b:22:57:e3:e6:f6:a8:42:fd:60:d9:a0:93:e7:
                    72:76:c0:6b:1d:0a:a4:58:96:85:31:2d:f0:42:8e:
                    6e:17:01:52:3b:9b:79:db:d5:0b:44:43:48:1e:c7:
                    bf:da:4b:6b:03:34:18:26:62:08:ed:09:d5:fe:54:
                    52:d3:6e:25:e1:70:ef:4d:88:60:64:1b:d4:3f:b3:
                    33:6f:f6:c2:99:f7:e5:3e:05:f0:40:5b:e5:c6:eb:
                    4e:ee:1a:87:38:7a:9e:43:de:b2:9c:85:5c:ba:14:
                    63:42:17:5e:e7:80:ff:37:05:04:8a:71:c9:d3:ab:
                    c5:77:92:65:e9:0d:2e:62:a1:de:a1:3c:04:7d:49:
                    f3:f3:ca:8a:da:c4:03:62:1e:2c:94:22:f4:cc:2f:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7A:5F:A0:AA:8E:C4:0B:6C:CD:24:13:90:9E:F4:8C:C9:8D:B3:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ac1a6a6-f436-3e6c-916d-be3f06e77045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3b:0f:b5:29:c9:fc:c6:9e:44:db:a0:17:8b:1f:a9:b0:a7:
         93:96:93:95:38:c1:5e:d4:2f:1b:0d:74:3f:f2:d5:49:04:5a:
         af:d4:42:c6:5c:c0:35:5e:73:94:29:0c:eb:3f:7b:b4:df:68:
         d3:4c:b4:22:f9:97:73:ad:54:46:05:82:18:ce:21:b9:24:f5:
         fa:56:7c:d6:51:d9:f7:31:80:f0:d0:c3:85:23:5f:eb:df:82:
         75:ee:59:f0:7c:63:b4:71:a0:43:6c:02:64:38:e6:10:fc:ad:
         15:10:da:b0:f6:68:e8:7a:d7:41:b0:30:86:05:3a:64:b5:f0:
         f8:a5:22:91:95:b7:c1:cb:ab:3c:0f:55:e3:55:88:c1:39:85:
         21:1b:76:a3:f1:55:93:9a:1a:52:ef:ca:50:21:81:f9:3e:9e:
         24:c6:d9:53:a3:68:3f:51:8b:e9:99:e4:5e:28:bf:d9:46:59:
         cf:60:51:b9:02:b2:a6:17:af:69:72:1f:5c:eb:1b:7b:09:ed:
         42:46:6a:0a:cf:b1:c7:f5:94:a1:bc:94:d9:f1:76:fd:91:f0:
         c0:3b:7f:e7:76:32:17:fb:51:e7:42:94:ab:81:42:3f:3a:29:
         b5:e1:f0:01:c4:ef:5c:fc:8a:b5:41:b0:5e:89:2c:af:5d:29:
         a5:72:8f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 07:31:54 2025 by rpki-client