Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa
File:                     efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa (raw, json)
Hash identifier:          V3bBiPsT5m/KxaybzACpQGYku84A+czae8EmoE5Ic2I=
Subject key identifier:   F5:22:95:4A:E2:E3:FD:DC:E5:4A:7F:3C:FB:0E:AF:FB:E2:C5:58:41
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858499DBF2E704F58C46164CD2400
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     200017
IP address blocks:        138.84.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:2e:70:4f:58:c4:61:64:cd:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=eb44b46c-514d-4208-8580-2c3a58e6f015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:d9:35:b8:5b:d7:ef:5d:88:c2:af:7b:79:
                    22:b2:65:4c:be:89:7e:9b:4b:34:70:c5:9f:3e:b5:
                    66:7d:53:e0:48:67:e5:e4:72:1f:ad:36:9b:63:4b:
                    6d:0e:29:c6:10:7a:9a:99:ed:a1:8a:4e:00:25:7c:
                    49:0a:fb:78:1d:9f:e9:35:db:8b:92:27:74:37:f3:
                    af:f9:08:0f:55:f3:af:10:ce:ce:83:db:cd:38:e6:
                    43:91:65:bb:c6:cb:3b:f1:0c:3e:53:d0:90:29:91:
                    55:f3:31:cd:d1:63:f9:83:0e:d0:76:f9:0e:d0:10:
                    61:6f:f1:00:05:d4:2a:8d:06:3b:48:1a:53:1d:8d:
                    f6:30:06:cb:32:8d:82:04:e1:87:40:a6:e0:65:d8:
                    8a:10:58:59:73:07:de:13:66:fe:5a:66:cd:45:5c:
                    67:82:db:10:09:be:59:10:b4:8f:99:da:2d:54:bf:
                    94:b6:be:2f:06:3e:36:f1:70:1b:dc:7c:a8:e3:7a:
                    4c:24:c2:54:4b:0f:e8:b8:3f:8d:bd:70:d4:58:50:
                    70:12:c0:83:a0:ba:62:58:bc:56:85:1e:26:c7:7b:
                    82:22:2e:05:44:f1:ba:29:f6:43:b0:83:33:29:e2:
                    21:92:95:22:b8:39:27:ba:54:2e:8e:c3:13:89:2b:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:22:95:4A:E2:E3:FD:DC:E5:4A:7F:3C:FB:0E:AF:FB:E2:C5:58:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f5:01:75:e2:42:e2:b3:64:5d:11:63:fc:57:b2:e4:ba:93:
         a8:57:e4:5b:c1:d7:71:75:5d:88:a5:e8:80:d3:a2:91:da:33:
         ca:cc:11:93:a3:06:fb:b9:7d:68:79:d8:e2:a1:cd:81:3a:84:
         06:09:c5:76:56:1f:f9:f4:d8:c2:43:ee:45:77:fb:3f:73:40:
         e6:fa:77:44:61:9d:77:a2:58:1f:92:f5:a1:f7:4c:6e:6a:bc:
         8f:ff:37:3d:63:bb:d6:33:f9:13:47:8a:7e:89:f0:2d:62:ca:
         f6:74:7b:cf:7c:b1:ed:ce:05:08:53:bc:cb:ad:98:b9:ee:b9:
         cd:8f:f0:22:3f:ff:7c:7c:72:58:a6:b0:6e:14:49:ac:a6:bb:
         05:7d:14:f2:d5:49:cc:81:1a:f9:f1:ca:d7:1d:e2:e0:0c:35:
         e0:5d:75:a5:69:f2:58:2c:18:0d:e2:be:27:34:74:d3:a0:ce:
         ed:59:cd:29:17:dc:0d:b3:10:f9:7e:ad:93:05:16:5f:f7:55:
         a2:54:13:f4:ec:1b:3d:ec:2e:52:9e:7a:75:d7:d8:0c:af:bf:
         cc:67:66:0c:d7:24:cb:44:04:86:11:65:dc:36:d3:23:19:84:
         06:f0:a8:3e:fa:72:ba:8c:27:6d:a2:31:1d:ec:fe:32:b0:5d:
         68:46:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:10:48 2025 by rpki-client