Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40eb1ca2-30a8-34bf-90e7-bd75bc7f1f28.roa
File:                     40eb1ca2-30a8-34bf-90e7-bd75bc7f1f28.roa (raw, json)
Hash identifier:          z9bN/EH5hrpkgzzb6yR3WpSaf9v+5WmalInWnr2kSD0=
Subject key identifier:   26:63:16:23:6D:91:7E:A6:95:06:41:33:61:B6:15:DC:3B:F8:B9:05
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A814648D06FAFB0E7919D9080
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40eb1ca2-30a8-34bf-90e7-bd75bc7f1f28.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        139.180.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:48:d0:6f:af:b0:e7:91:9d:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=c8d8db65-7e52-4bcd-8be5-a6fc4172ee88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c1:69:5a:95:d8:c1:cb:1c:c1:29:d0:92:cc:
                    6b:a1:91:63:49:a7:d8:cf:3b:ee:68:bf:94:d1:8a:
                    79:0e:c5:6b:78:78:2d:27:89:3e:f6:20:5b:2c:02:
                    a7:b5:44:86:4e:b2:a8:e5:d7:ae:06:c6:f0:d2:94:
                    3a:16:ed:56:09:4a:e5:2f:14:87:24:26:cb:2d:8a:
                    d1:7f:3c:1d:43:45:24:24:1e:d6:11:ef:ed:8f:21:
                    9f:81:1d:73:17:f8:81:cb:fb:4e:ae:dc:94:ee:33:
                    17:a7:d3:b0:aa:5c:88:dd:1f:33:c9:41:47:c2:c7:
                    58:de:93:84:73:b4:3c:88:66:1a:86:5c:58:e1:83:
                    29:98:5f:df:44:ec:97:19:b5:86:ca:6d:09:55:a3:
                    c4:15:32:00:d1:50:af:50:63:53:dd:bc:aa:3d:2d:
                    f5:7d:2e:ce:c7:94:8b:de:6c:e0:0d:41:99:ea:24:
                    cd:b5:33:ee:71:38:71:31:0d:3d:fa:bb:b4:ed:1b:
                    99:47:dd:ed:83:70:39:ca:55:47:d3:9b:0f:5b:86:
                    08:5f:58:ac:de:2a:e4:7c:c6:91:31:ef:05:3b:b4:
                    6d:67:70:00:e0:c7:87:65:75:ea:21:18:bd:83:88:
                    52:c5:ca:6b:40:ef:1c:6a:8f:20:26:6a:87:83:21:
                    a6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:63:16:23:6D:91:7E:A6:95:06:41:33:61:B6:15:DC:3B:F8:B9:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40eb1ca2-30a8-34bf-90e7-bd75bc7f1f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b5:52:d4:4b:e0:d0:d4:c6:67:a3:a1:f4:cc:e8:b2:f7:70:
         21:ed:aa:7a:db:58:1b:0d:e5:57:b8:16:54:02:65:3c:e1:b9:
         d3:dc:e7:77:39:51:18:27:e1:9c:28:29:99:d3:2d:b3:8d:6e:
         ec:5a:68:dd:fa:e7:f6:00:e4:26:20:3b:09:00:31:84:a5:69:
         97:32:f9:91:ef:70:ee:fb:d1:a9:0a:cd:0b:2a:60:ef:5b:d9:
         b6:a9:f3:5b:cd:14:e9:20:cb:57:7f:9c:c0:5d:d1:65:94:54:
         b9:43:eb:00:16:df:2e:5a:1f:0c:94:6c:ce:80:6b:b5:84:27:
         04:1f:ad:cd:36:4a:ac:89:a2:ec:33:7e:dd:50:5b:f6:f5:06:
         1e:3c:f2:36:e5:72:bc:da:2d:9d:ce:52:6d:ee:0d:75:3e:5d:
         21:e0:71:e6:d1:b8:11:5c:88:0f:c4:65:9f:62:60:84:92:8c:
         61:3a:94:95:3a:6b:c9:b3:85:0c:1c:d4:a7:63:61:33:e6:b1:
         9b:18:94:b1:d9:f6:50:0e:62:e3:0b:b7:48:c9:96:37:12:45:
         00:f5:cb:7c:87:2a:53:68:bd:e0:99:25:e0:de:cc:54:91:95:
         d6:b4:5d:da:17:e2:2b:45:f4:63:62:81:f7:74:ef:1b:d0:6d:
         d5:c8:a7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:31:00 2025 by rpki-client