Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/af08d7df-7048-3d64-a80c-79eef48f967f.roa
File:                     af08d7df-7048-3d64-a80c-79eef48f967f.roa (raw, json)
Hash identifier:          1WIv3TvVinhXuitXR4qqyIpZn3dQL1AyOwejLB/Nt9w=
Subject key identifier:   BB:6B:40:F1:D3:BF:69:C8:E0:2F:D6:D4:10:B3:A6:F7:80:99:D0:1D
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584A19FAB1BC1AC0986B487DBDA0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/af08d7df-7048-3d64-a80c-79eef48f967f.roa
Signing time:             Fri 06 Jun 2025 13:01:04 +0000
ROA not before:           Fri 06 Jun 2025 13:01:04 +0000
ROA not after:            Thu 04 Sep 2025 13:01:04 +0000
asID:                     54994
IP address blocks:        138.113.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:19:fa:b1:bc:1a:c0:98:6b:48:7d:bd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jun  6 13:01:04 2025 GMT
            Not After : Sep  4 13:01:04 2025 GMT
        Subject: CN=de9119ba-e057-4784-b181-3b994c137ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:a9:ee:8a:2b:4b:94:8e:35:77:0c:69:67:
                    07:c1:80:f1:de:d9:5f:8e:40:f5:d7:e2:4a:33:73:
                    c7:55:0f:bf:7d:47:b3:ce:10:57:0e:bc:3a:92:e8:
                    86:a0:4e:fa:59:4c:aa:02:1f:e1:5c:aa:10:67:6c:
                    0a:8a:25:f4:4b:3c:50:0b:a8:41:92:3b:01:68:0a:
                    d5:33:56:b3:b7:3d:37:d3:d4:a2:47:ae:ae:c7:7c:
                    a4:16:d6:a3:8f:0b:79:d4:29:e4:33:ee:e4:4f:7f:
                    c6:f8:86:28:0a:c8:c1:cb:e1:bd:17:6f:2f:7a:f3:
                    40:43:80:88:9e:b9:0d:62:27:a0:d4:76:16:4c:36:
                    ee:25:ca:dc:cd:d7:21:43:ef:7d:a8:89:d3:8e:55:
                    cd:3f:1e:8a:78:c1:4d:38:f2:cc:b7:5d:be:b8:8c:
                    75:c7:ee:3f:49:a9:8d:ba:30:76:33:aa:1d:ef:5e:
                    79:8a:15:a0:f2:80:21:20:22:45:f5:9a:54:8c:aa:
                    e9:b2:95:83:75:37:64:cb:04:25:b0:d2:af:61:7a:
                    35:18:60:50:48:b6:58:f4:3e:a9:fb:11:63:6c:d6:
                    bd:30:f2:e3:5d:a7:08:3b:ff:17:bc:5c:79:fd:2d:
                    9b:6f:1b:95:50:a1:a5:dc:06:2e:e5:0e:7b:e5:6b:
                    80:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6B:40:F1:D3:BF:69:C8:E0:2F:D6:D4:10:B3:A6:F7:80:99:D0:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/af08d7df-7048-3d64-a80c-79eef48f967f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:5c:02:ff:97:4e:68:a4:c8:d6:82:13:7d:42:41:a4:b8:
         49:0e:03:ad:ad:ec:98:c8:61:58:db:27:9b:64:fd:f1:e2:80:
         59:dc:25:bf:52:fb:ba:3a:13:c8:da:20:98:1d:70:5d:d7:46:
         b7:a4:74:c5:16:0c:a1:8c:a4:28:a4:24:5c:a9:5e:b1:b7:cf:
         c4:3f:f3:d7:f3:f5:01:94:12:54:87:a5:3a:d2:f7:0a:99:3b:
         45:48:0a:dc:b5:33:e9:6f:07:7c:6a:db:81:92:47:95:16:35:
         fc:ed:10:9d:ce:14:e1:c5:8e:d1:56:90:11:15:6d:c6:24:c3:
         8a:94:bb:19:60:31:b8:81:ca:a9:eb:8c:dd:62:89:88:b8:26:
         f9:2b:0e:26:82:86:59:27:3e:c3:cf:90:60:38:86:84:98:62:
         22:4a:94:e8:72:7b:0a:5b:01:4a:29:ba:db:0d:99:f1:8a:a4:
         df:2a:f6:4d:48:42:70:42:ee:87:ec:12:58:6e:de:50:07:f8:
         dd:4f:ed:cf:4c:46:5c:a5:87:f4:4c:87:f2:ea:44:66:09:21:
         8d:27:23:5c:cd:d8:13:c3:7c:0d:8e:42:ad:12:f1:9a:ee:30:
         b0:a7:d9:33:df:09:10:c7:98:00:df:e3:07:95:2c:9b:82:f8:
         0b:f0:95:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+rG8GsCYa0h9vaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk
ZGU5MTE5YmEtZTA1Ny00Nzg0LWIxODEtM2I5OTRjMTM3ZmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L2p7oorS5SONXcMaWcHwYDx3tlfjkD11+JK
M3PHVQ+/fUezzhBXDrw6kuiGoE76WUyqAh/hXKoQZ2wKiiX0SzxQC6hBkjsBaArV
M1aztz0309SiR66ux3ykFtajjwt51CnkM+7kT3/G+IYoCsjBy+G9F28vevNAQ4CI
nrkNYieg1HYWTDbuJcrczdchQ+99qInTjlXNPx6KeMFNOPLMt12+uIx1x+4/SamN
ujB2M6od7155ihWg8oAhICJF9ZpUjKrpspWDdTdkywQlsNKvYXo1GGBQSLZY9D6p
+xFjbNa9MPLjXacIO/8XvFx5/S2bbxuVUKGl3AYu5Q575WuA0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLtrQPHTv2nI4C/W1BCzpveAmdAdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYWYwOGQ3ZGYtNzA0OC0z
ZDY0LWE4MGMtNzllZWY0OGY5NjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjJXAL/l05opMjWghN9QkGkuEkOA62t7JjIYVjbJ5tk/fHigFncJb9S
+7o6E8jaIJgdcF3XRrekdMUWDKGMpCikJFypXrG3z8Q/89fz9QGUElSHpTrS9wqZ
O0VICty1M+lvB3xq24GSR5UWNfztEJ3OFOHFjtFWkBEVbcYkw4qUuxlgMbiByqnr
jN1iiYi4JvkrDiaChlknPsPPkGA4hoSYYiJKlOhyewpbAUoputsNmfGKpN8q9k1I
QnBC7ofsElhu3lAH+N1P7c9MRlylh/RMh/LqRGYJIY0nI1zN2BPDfA2OQq0S8Zru
MLCn2TPfCRDHmADf4weVLJuC+AvwlXs=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:23:18 2025 by rpki-client