Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/f53cfa92-ab4c-345d-a7be-595718595df5.roa
File:                     f53cfa92-ab4c-345d-a7be-595718595df5.roa (raw, json)
Hash identifier:          cENSjOSOiM08DldQVoYYitlkbPcWfg/KIZvZO7r3SqE=
Subject key identifier:   33:C5:BB:9B:CB:6C:5E:F0:3F:0C:13:3E:FD:05:EE:52:27:C7:EA:98
Certificate issuer:       /CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
Certificate serial:       010D0C9F4328584AB0BB7BA9363C28BFC5A8E240
Authority key identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/f53cfa92-ab4c-345d-a7be-595718595df5.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     16509
IP address blocks:        206.15.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:7b:a9:36:3c:28:bf:c5:a8:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=60525168-524e-4f03-b753-9ac32b979cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:56:7d:20:44:3d:3e:ed:a2:b6:d7:f6:91:fd:
                    96:15:1f:80:42:68:7d:e1:1f:ce:74:37:b5:3b:eb:
                    c0:d7:40:ea:78:7d:94:df:ce:2a:96:15:88:9e:52:
                    ac:32:e6:2a:d8:56:87:b6:d5:0f:27:03:0b:e3:4f:
                    f8:ed:ca:5a:a2:b9:4b:b2:a6:b6:97:83:20:cb:a6:
                    d0:fc:a3:06:3c:65:9b:e7:06:f5:02:07:5f:3c:be:
                    23:29:63:0d:68:86:8d:c6:2f:fe:f7:d6:15:e9:ed:
                    e5:0b:a7:96:0a:6c:bc:55:d5:41:17:57:18:7b:61:
                    0d:46:75:16:bc:f6:fc:ea:c5:a9:b7:9d:4b:44:b1:
                    24:e3:33:d4:57:78:c4:23:2d:73:ba:0a:eb:62:db:
                    65:9f:b9:89:54:5a:47:bb:e9:40:b9:73:41:23:bc:
                    0e:52:86:3a:89:81:8d:cd:60:37:c8:0f:69:c0:46:
                    ff:a0:87:45:7e:42:1c:0a:85:81:e9:48:41:49:69:
                    ce:17:6e:92:07:12:f9:9d:1e:5c:3e:fb:90:f1:a4:
                    c0:af:00:a0:16:b5:90:2d:8a:35:af:1c:35:9c:67:
                    18:3b:e9:79:dd:02:9d:fd:bc:ae:cb:3e:be:ed:64:
                    dc:29:d8:75:bd:25:2d:15:f8:26:2a:27:44:61:9b:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C5:BB:9B:CB:6C:5E:F0:3F:0C:13:3E:FD:05:EE:52:27:C7:EA:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/f53cfa92-ab4c-345d-a7be-595718595df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:40:ef:f3:02:74:fd:3e:c2:b8:17:85:39:fa:a9:54:b7:d6:
         bc:a6:a7:44:fc:5f:1d:ee:25:8b:cc:6d:6b:dc:80:12:58:2b:
         e3:70:c9:10:b2:96:7c:8a:dd:f5:a3:46:b1:bd:2c:ff:4a:3f:
         9c:c2:ed:dd:5b:33:54:81:30:de:fa:c8:8d:a3:e0:55:d3:94:
         da:55:17:5d:d6:d6:b7:c3:b1:07:f1:3c:5a:c0:c0:e8:d8:d2:
         79:80:32:72:7a:4f:10:24:d6:c1:72:45:e8:9d:e9:88:8c:26:
         c4:3e:61:59:40:c8:10:a2:0e:bf:10:6f:30:f5:19:81:95:f1:
         ba:1b:26:6c:21:65:66:a9:e7:c6:80:4f:8b:2c:4c:18:e7:10:
         fe:60:fe:63:31:f0:e4:84:0a:58:32:e6:a7:08:7c:36:5a:50:
         10:40:d3:d1:99:19:20:f9:08:8a:12:3f:8e:06:57:38:72:2c:
         64:3a:28:56:64:52:91:41:25:ac:43:dd:b6:87:96:6a:8c:5b:
         c4:a7:77:50:1d:89:60:43:db:fd:51:d9:b2:74:00:25:4a:4c:
         d1:46:2f:fe:5b:dc:3e:a3:52:ec:ab:dd:a9:de:a3:3c:d8:44:
         8d:ac:a9:45:e7:96:d4:7c:c0:2d:a8:e2:4c:e9:0a:07:d3:8c:
         65:0e:76:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:53:39 2025 by rpki-client