Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bd0394ed-edd3-3142-9dc6-7367aeb7b236.roa
File:                     bd0394ed-edd3-3142-9dc6-7367aeb7b236.roa (raw, json)
Hash identifier:          M2nQ7noRSy0CPmGopaT5UyLh84J/96ExF+5MMWGlwTQ=
Subject key identifier:   61:8C:6D:CD:27:50:DA:40:B0:DB:8E:C5:61:8F:3C:5B:2B:65:5B:86
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849AE7F42AB48ECEF794C1E0100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bd0394ed-edd3-3142-9dc6-7367aeb7b236.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     397630
IP address blocks:        168.91.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:42:ab:48:ec:ef:79:4c:1e:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=c060fe11-d00b-4587-ba12-40e98d191e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:55:56:d7:83:c4:bd:69:3a:28:0b:b7:bb:
                    5d:bf:15:55:87:3a:76:3c:56:8d:1a:77:76:9a:1f:
                    e9:35:8a:b0:9d:37:44:16:06:28:30:cb:1e:2e:22:
                    a9:f0:42:fa:60:61:a6:1e:c7:7d:c3:ef:9d:4b:5f:
                    78:36:19:65:67:5e:f7:bd:0c:d1:55:20:83:b3:ba:
                    ab:d5:15:9d:51:87:4b:72:39:4b:e7:af:41:a2:e0:
                    cc:3e:e4:b8:91:bd:fc:e9:e6:c4:f9:a1:e8:26:a8:
                    b9:ca:46:18:43:78:c5:5d:1e:37:84:d8:8b:75:9b:
                    90:69:3d:db:35:2e:75:8a:d2:a2:69:25:05:9b:2a:
                    50:b6:64:b0:71:48:6e:1f:ad:9b:b7:0f:56:24:24:
                    9c:57:4f:4d:9d:34:c9:5b:66:92:c0:16:2f:09:99:
                    66:16:bd:b1:67:d5:3a:b8:be:37:2b:69:46:7f:e2:
                    d3:28:4c:7e:bd:23:6b:0b:15:69:fc:e3:76:84:22:
                    b4:cf:40:e4:a2:c9:ea:d5:06:bf:38:b1:f5:3b:d7:
                    b3:63:8d:c9:dd:c3:71:26:a4:1f:7e:c1:d6:13:ec:
                    cb:a4:c5:ac:b1:7f:d9:6d:39:fb:8d:f7:12:3f:76:
                    e4:87:db:68:95:57:95:a0:cf:76:22:11:05:32:ce:
                    0d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8C:6D:CD:27:50:DA:40:B0:DB:8E:C5:61:8F:3C:5B:2B:65:5B:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bd0394ed-edd3-3142-9dc6-7367aeb7b236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e4:5e:c8:cb:9e:70:12:c3:3c:09:3f:35:6e:e1:19:b5:a0:
         a3:da:33:6e:c1:d3:36:4a:27:d3:1b:43:2f:a8:71:92:6d:ee:
         87:dc:64:08:ec:95:67:ea:df:8f:19:7b:e9:e4:de:7a:d3:a6:
         79:65:73:12:d4:b7:58:d5:36:d6:29:cc:fb:37:da:16:59:db:
         73:c1:9f:49:f9:14:32:1e:7d:ab:09:53:c8:f9:b5:e1:0c:ba:
         be:ad:5f:e2:36:f5:6a:42:49:72:a9:2d:79:6b:1c:2d:16:da:
         ef:03:3b:06:15:14:8f:6d:01:10:29:3a:e1:23:a4:05:4f:3a:
         24:cd:1c:5c:a4:3d:c3:bc:94:c8:6b:b7:f7:bd:84:36:4a:92:
         fa:2f:da:1b:22:24:30:a8:28:72:a8:74:87:72:47:59:c4:60:
         6d:eb:b4:3a:c2:bb:42:99:a5:92:15:00:c2:41:ce:c2:80:0b:
         5a:e0:34:f2:b8:48:cd:e4:d7:03:fb:6c:0c:77:39:bc:b9:75:
         31:f9:b8:ed:86:aa:70:25:60:c4:dc:6f:ac:85:7b:9e:02:da:
         28:2c:2c:62:a6:e1:39:53:dd:1e:8d:5a:c5:2d:80:2c:d1:e5:
         47:b7:fe:2e:b0:4e:60:2f:48:43:e2:c4:db:d6:cc:80:25:ba:
         aa:a6:3b:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0KrSOzveUweAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk
YzA2MGZlMTEtZDAwYi00NTg3LWJhMTItNDBlOThkMTkxZTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLxVVteDxL1pOigLt7tdvxVVhzp2PFaNGnd2
mh/pNYqwnTdEFgYoMMseLiKp8EL6YGGmHsd9w++dS194NhllZ173vQzRVSCDs7qr
1RWdUYdLcjlL569BouDMPuS4kb386ebE+aHoJqi5ykYYQ3jFXR43hNiLdZuQaT3b
NS51itKiaSUFmypQtmSwcUhuH62btw9WJCScV09NnTTJW2aSwBYvCZlmFr2xZ9U6
uL43K2lGf+LTKEx+vSNrCxVp/ON2hCK0z0Dkosnq1Qa/OLH1O9ezY43J3cNxJqQf
fsHWE+zLpMWssX/ZbTn7jfcSP3bkh9tolVeVoM92IhEFMs4NIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGGMbc0nUNpAsNuOxWGPPFsrZVuGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmQwMzk0ZWQtZWRkMy0z
MTQyLTlkYzYtNzM2N2FlYjdiMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFsmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHkXsjLnnASwzwJPzVu4Rm1oKPaM27B0zZKJ9MbQy+ocZJt7ofcZAjs
lWfq348Ze+nk3nrTpnllcxLUt1jVNtYpzPs32hZZ23PBn0n5FDIefasJU8j5teEM
ur6tX+I29WpCSXKpLXlrHC0W2u8DOwYVFI9tARApOuEjpAVPOiTNHFykPcO8lMhr
t/e9hDZKkvov2hsiJDCoKHKodIdyR1nEYG3rtDrCu0KZpZIVAMJBzsKAC1rgNPK4
SM3k1wP7bAx3Oby5dTH5uO2GqnAlYMTcb6yFe54C2igsLGKm4TlT3R6NWsUtgCzR
5Ue3/i6wTmAvSEPixNvWzIAluqqmO+U=
-----END CERTIFICATE-----
Generated at Fri May 2 12:41:45 2025 by rpki-client