Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/68d96e0d-763a-3e53-a84a-0ae4ea723ba7.roa
File:                     68d96e0d-763a-3e53-a84a-0ae4ea723ba7.roa (raw, json)
Hash identifier:          LWdbbhk+1iUwV9kx0BtT+17fMbx/1ZP2TrnrVlIuFuU=
Subject key identifier:   AC:7F:11:D5:25:FC:D0:77:DA:5A:FB:E8:EB:A1:C4:1B:5A:5F:23:FC
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584B4E771782C77B77BB61BCFC00
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/68d96e0d-763a-3e53-a84a-0ae4ea723ba7.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     53927
IP address blocks:        139.131.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:17:82:c7:7b:77:bb:61:bc:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=3cf4e203-e844-4c4e-be5b-f2ad112e22b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c6:e2:ec:f5:78:e4:e1:29:2b:13:bb:7c:61:
                    78:0e:90:e3:24:6e:b2:18:16:c7:a4:f1:0a:6e:41:
                    5b:60:54:7f:87:da:6e:73:cb:f2:02:90:f8:ea:0c:
                    98:cc:dc:ea:78:b1:aa:37:6e:c9:2b:f1:bc:b7:15:
                    a8:b9:16:4b:fc:b2:06:b3:80:3e:06:0c:c2:c4:c1:
                    5f:43:4f:11:b2:d8:62:7d:ce:f9:8a:05:e5:71:e5:
                    f9:84:d4:f6:83:85:05:73:58:fb:5a:b4:02:0d:8a:
                    d1:63:fe:c7:b8:90:3b:0f:4f:3f:67:e7:ed:32:71:
                    40:e0:09:37:17:b5:5a:eb:d2:5f:e2:a8:a6:c1:13:
                    41:f1:f8:be:60:da:f9:c6:3b:e2:14:36:ef:f1:35:
                    9e:40:02:66:13:53:22:76:3e:70:e2:3d:c2:4a:0e:
                    57:8f:d1:3d:15:48:28:d1:80:d3:4f:8b:b0:c1:35:
                    13:91:2b:48:67:d8:0d:ec:f6:5d:75:3d:12:61:de:
                    e0:f7:97:78:cd:1c:3f:f7:1d:ac:79:67:b7:45:5b:
                    64:05:2d:26:36:e2:3d:14:7d:cb:b4:53:1f:da:ad:
                    ae:57:f0:83:62:7a:a2:53:ae:18:04:8d:1f:7a:e9:
                    b2:50:df:19:34:46:6b:ca:76:d1:13:c8:ea:5d:b4:
                    4c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7F:11:D5:25:FC:D0:77:DA:5A:FB:E8:EB:A1:C4:1B:5A:5F:23:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/68d96e0d-763a-3e53-a84a-0ae4ea723ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b7:f6:25:e5:52:0c:0f:ab:e2:e2:70:ea:d6:e8:47:4b:1c:
         13:ed:89:79:66:f8:0a:56:36:77:9b:71:da:c5:38:4a:3b:ce:
         31:fe:a6:2b:41:2f:d4:79:bc:c9:cf:eb:7a:97:1f:c3:e3:81:
         99:d8:55:41:4e:b7:85:d1:9b:b0:ea:6c:d2:6a:fa:f9:11:7d:
         fc:be:b1:9f:45:92:c0:0f:b8:39:33:ab:4f:46:aa:50:13:5b:
         4a:06:69:62:7c:26:2e:04:ea:01:4c:9d:d5:e1:64:46:ce:c0:
         2a:de:1f:da:10:65:42:b5:8f:12:33:25:a7:b4:ab:dd:00:93:
         e1:51:62:fa:fe:df:89:79:e0:84:c0:1c:f8:a4:16:75:1e:09:
         77:a3:22:c6:15:a9:26:6c:12:20:c6:d9:fc:38:3c:86:32:4b:
         b8:4a:4d:04:3f:d5:40:26:4d:8d:23:cf:73:fc:e4:07:a8:ec:
         81:91:5c:ab:c4:8f:34:ce:f8:ba:d0:0c:44:9b:a9:65:bc:68:
         94:de:06:12:cc:b9:ed:40:aa:4f:d7:00:b6:0c:cb:ac:9b:f9:
         3f:fd:e1:a5:42:07:0c:f6:56:28:25:52:b1:f6:20:76:1f:8e:
         72:64:27:51:0e:7a:08:d0:d2:8f:96:55:07:ee:71:fd:c5:fe:
         20:44:4c:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxeCx3t3u2G8/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk
M2NmNGUyMDMtZTg0NC00YzRlLWJlNWItZjJhZDExMmUyMmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Mbi7PV45OEpKxO7fGF4DpDjJG6yGBbHpPEK
bkFbYFR/h9puc8vyApD46gyYzNzqeLGqN27JK/G8txWouRZL/LIGs4A+BgzCxMFf
Q08Rsthifc75igXlceX5hNT2g4UFc1j7WrQCDYrRY/7HuJA7D08/Z+ftMnFA4Ak3
F7Va69Jf4qimwRNB8fi+YNr5xjviFDbv8TWeQAJmE1Midj5w4j3CSg5Xj9E9FUgo
0YDTT4uwwTUTkStIZ9gN7PZddT0SYd7g95d4zRw/9x2seWe3RVtkBS0mNuI9FH3L
tFMf2q2uV/CDYnqiU64YBI0feumyUN8ZNEZrynbRE8jqXbRMLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKx/EdUl/NB32lr76OuhxBtaXyP8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNjhkOTZlMGQtNzYzYS0z
ZTUzLWE4NGEtMGFlNGVhNzIzYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4MfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADe39iXlUgwPq+LicOrW6EdLHBPtiXlm+ApWNnebcdrFOEo7zjH+pitB
L9R5vMnP63qXH8PjgZnYVUFOt4XRm7DqbNJq+vkRffy+sZ9FksAPuDkzq09GqlAT
W0oGaWJ8Ji4E6gFMndXhZEbOwCreH9oQZUK1jxIzJae0q90Ak+FRYvr+34l54ITA
HPikFnUeCXejIsYVqSZsEiDG2fw4PIYyS7hKTQQ/1UAmTY0jz3P85Aeo7IGRXKvE
jzTO+LrQDESbqWW8aJTeBhLMue1Aqk/XALYMy6yb+T/94aVCBwz2ViglUrH2IHYf
jnJkJ1EOegjQ0o+WVQfucf3F/iBETBk=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:22:38 2025 by rpki-client