Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/441c4f19-758d-3201-afca-03467cbc3620.roa
File:                     441c4f19-758d-3201-afca-03467cbc3620.roa (raw, json)
Hash identifier:          mMDv3r1Ya/S6i2hzE2o44gQ3/RQkU2LIyE2HhiWs7zw=
Subject key identifier:   AC:69:31:EF:11:CD:76:82:A8:90:F9:BD:59:92:E3:8A:8E:77:5B:72
Certificate issuer:       /CN=74bdcdb1-ade3-4be9-818b-4809959ddfcc
Certificate serial:       010D0C9F4328584B0746B0A8B9FF189B2823F500
Authority key identifier: 1C:A2:9E:F3:A1:6B:AC:78:B0:93:45:1A:15:A0:36:2D:89:9C:02:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/441c4f19-758d-3201-afca-03467cbc3620.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     400734
IP address blocks:        139.60.210.0/24 maxlen: 24
                          2620:13c:b000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:b0:a8:b9:ff:18:9b:28:23:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74bdcdb1-ade3-4be9-818b-4809959ddfcc
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=3b23fed9-e36e-4712-b75b-6b7623e9e5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:c4:a8:c6:a2:b7:d5:a6:55:6b:f3:cf:39:
                    24:35:eb:c5:89:2b:93:78:e1:0f:8a:f5:55:b0:20:
                    b7:de:b1:80:4b:48:32:1f:39:f2:9c:2e:f2:20:65:
                    ab:64:bb:8d:12:db:03:27:d2:6f:a9:6d:4d:af:f5:
                    02:f6:58:bc:49:b3:41:9f:44:e7:49:92:ce:67:cd:
                    c3:78:00:b7:db:fe:95:3c:52:f1:da:0e:dd:ed:34:
                    ef:2e:6c:27:ac:a8:e0:5b:67:66:17:9f:dc:db:df:
                    8f:b9:d2:5a:b9:c9:34:ef:95:f1:41:b5:d0:fe:58:
                    a6:5b:dd:1b:54:b8:95:a6:b4:8a:46:99:8c:73:5c:
                    d5:09:41:14:3b:93:c9:56:e2:f4:c0:68:ff:c0:59:
                    b4:6d:94:16:28:93:06:b8:92:01:cf:76:cd:7a:69:
                    cf:81:1c:5a:6b:b8:60:ef:e6:f1:cc:b6:95:fa:ba:
                    c0:87:b4:9e:d8:61:3c:e3:d1:40:17:2a:0b:d6:37:
                    49:34:28:0e:62:03:8f:f7:a3:f4:46:8d:70:e1:52:
                    b4:88:61:2a:dd:bf:e9:7f:19:77:f6:a7:b8:d3:7a:
                    7a:1f:d3:f3:3c:e6:78:ef:bf:b6:12:cc:cd:f9:b3:
                    71:4b:61:3c:6e:9d:bf:13:54:8e:fa:c5:69:40:44:
                    8c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:69:31:EF:11:CD:76:82:A8:90:F9:BD:59:92:E3:8A:8E:77:5B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/441c4f19-758d-3201-afca-03467cbc3620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A2:9E:F3:A1:6B:AC:78:B0:93:45:1A:15:A0:36:2D:89:9C:02:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.210.0/24
                IPv6:
                  2620:13c:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:40:7f:69:4b:84:c5:a7:3e:ae:47:09:8a:f2:fa:67:d9:34:
         2a:8a:db:a0:7e:04:24:8d:4e:c2:75:c0:d1:d5:8a:e1:3b:cf:
         1a:2e:c2:b1:80:a6:11:e6:09:a3:4f:36:92:92:80:16:7d:c1:
         6a:7a:01:cb:26:59:c2:b3:70:2b:dc:79:2e:cd:d6:6d:f4:37:
         db:9d:58:46:c3:02:cf:7a:7c:f0:59:9b:cd:cf:7a:ef:62:9f:
         71:b9:d2:aa:2d:1c:39:65:c4:e1:53:70:26:bf:9a:5d:ac:cc:
         b0:c5:3b:29:47:f6:0e:ea:71:4b:97:ad:d3:9d:a6:04:b7:cb:
         3a:6c:02:f8:3c:38:f8:f0:e4:76:51:73:0a:8d:61:34:40:87:
         a7:73:e6:6a:28:c3:1a:a1:30:c2:cb:c7:8a:d9:07:50:9e:a9:
         70:d7:ad:de:28:63:14:09:56:ca:71:da:1c:01:33:91:4f:4b:
         67:03:f2:92:67:92:d4:d0:db:f6:c3:f8:74:31:13:dc:86:7d:
         b2:1f:ad:36:b2:d9:93:a0:9e:5b:96:1d:46:18:1c:23:62:7e:
         14:3b:bf:fb:31:39:80:6c:6b:c6:bc:98:fe:ed:69:18:51:30:
         21:b6:32:e0:77:b0:83:ad:3e:54:12:d1:f5:3d:e3:07:a9:9d:
         b6:5f:a5:93
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEsHRrCouf8Ymygj9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiZGNkYjEtYWRlMy00YmU5LTgxOGItNDgwOTk1OWRk
ZmNjMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
M2IyM2ZlZDktZTM2ZS00NzEyLWI3NWItNmI3NjIzZTllNWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm3EqMait9WmVWvzzzkkNevFiSuTeOEPivVV
sCC33rGAS0gyHznynC7yIGWrZLuNEtsDJ9JvqW1Nr/UC9li8SbNBn0TnSZLOZ83D
eAC32/6VPFLx2g7d7TTvLmwnrKjgW2dmF5/c29+PudJauck075XxQbXQ/limW90b
VLiVprSKRpmMc1zVCUEUO5PJVuL0wGj/wFm0bZQWKJMGuJIBz3bNemnPgRxaa7hg
7+bxzLaV+rrAh7Se2GE849FAFyoL1jdJNCgOYgOP96P0Ro1w4VK0iGEq3b/pfxl3
9qe403p6H9PzPOZ477+2EszN+bNxS2E8bp2/E1SO+sVpQESMZwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFKxpMe8RzXaCqJD5vVmS44qOd1tyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NGJk
Y2RiMS1hZGUzLTRiZTktODE4Yi00ODA5OTU5ZGRmY2MvNDQxYzRmMTktNzU4ZC0z
MjAxLWFmY2EtMDM0NjdjYmMzNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzRiZGNkYjEtYWRlMy00YmU5LTgx
OGItNDgwOTk1OWRkZmNjLzc0YmRjZGIxLWFkZTMtNGJlOS04MThiLTQ4MDk5NTlk
ZGZjYy5jcmwwHwYDVR0jBBgwFoAUHKKe86FrrHiwk0UaFaA2LYmcAiEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NGJkY2RiMS1hZGUzLTRiZTktODE4Yi00ODA5
OTU5ZGRmY2MuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAizzSMA8E
AgACMAkDBwQmIAE8sAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAk0B/aUuExac+rkcJivL6Z9k0KorboH4E
JI1OwnXA0dWK4TvPGi7CsYCmEeYJo082kpKAFn3BanoByyZZwrNwK9x5Ls3WbfQ3
251YRsMCz3p88Fmbzc9672KfcbnSqi0cOWXE4VNwJr+aXazMsMU7KUf2DupxS5et
052mBLfLOmwC+Dw4+PDkdlFzCo1hNECHp3PmaijDGqEwwsvHitkHUJ6pcNet3ihj
FAlWynHaHAEzkU9LZwPykmeS1NDb9sP4dDET3IZ9sh+tNrLZk6CeW5YdRhgcI2J+
FDu/+zE5gGxrxryY/u1pGFEwIbYy4Hewg60+VBLR9T3jB6mdtl+lkw==
-----END CERTIFICATE-----
Generated at Sat Oct 11 03:14:25 2025 by rpki-client