Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa
File:                     4d2e1153-33f9-3d70-a2d1-dc9545320444.roa (raw, json)
Hash identifier:          lv7HNNiScUAbc9HwAfvTZo2vpg8aCJLpKn0oVw3PQ3M=
Subject key identifier:   85:10:D7:29:D4:3C:81:6F:B8:DC:98:D7:D0:13:FF:C9:A0:23:2E:BF
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285849E225152ACD36052672DFB000
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     14297
IP address blocks:        139.131.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:15:2a:cd:36:05:26:72:df:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=410531f8-a190-433a-9044-9933f869d43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:27:8e:50:3f:78:a9:70:d5:b1:f9:be:7f:e6:
                    57:ed:e8:46:da:31:90:c8:f2:03:a5:6d:d6:f4:15:
                    50:67:6b:0d:f4:b9:a6:b9:ca:9d:7d:ca:fb:96:2e:
                    fb:b3:95:4a:94:47:58:ed:9f:72:c5:a3:73:73:91:
                    2e:7a:f7:1f:74:6e:e5:42:a8:5b:ef:ab:ac:67:42:
                    29:c6:3c:64:c6:3f:e5:3d:fc:9a:e6:d5:67:6e:3d:
                    23:38:0d:0e:c2:66:82:e3:6c:26:a2:72:50:5f:e1:
                    9d:9b:9d:7c:46:cc:c4:0c:ab:c3:0c:6e:9f:fe:e4:
                    81:d2:40:42:91:d1:e5:72:99:70:9b:d0:ee:3d:4b:
                    e6:fd:4c:84:5e:74:44:75:77:13:be:0b:25:14:21:
                    20:0c:15:12:27:e3:89:59:9e:91:86:ef:5b:20:b0:
                    2b:2c:8c:d1:a3:9c:4b:ce:6e:9d:2b:a4:5b:29:24:
                    02:3d:13:bd:f5:1c:03:6e:3d:82:82:c8:aa:f6:7d:
                    d1:d1:98:80:54:f1:ee:ae:80:48:e4:a2:f0:1d:32:
                    e2:f7:09:0b:6b:af:ac:df:0c:97:18:53:64:92:79:
                    a2:07:52:30:6b:40:18:07:c3:d5:ad:74:5f:d0:79:
                    a0:a0:5f:19:ef:d2:e7:09:49:59:13:f4:f2:3f:92:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:10:D7:29:D4:3C:81:6F:B8:DC:98:D7:D0:13:FF:C9:A0:23:2E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:1b:35:b9:94:b7:10:d8:e8:9b:49:25:b2:9b:3b:f4:70:47:
         44:21:a1:4e:26:02:79:e9:0c:72:2b:c3:6b:9c:21:0d:1b:50:
         e0:25:2c:76:11:6d:2a:29:8d:b1:bc:10:85:9b:8b:66:3d:c9:
         fc:3a:52:a4:f6:d2:18:8d:11:f1:d2:82:c8:ee:cb:04:88:97:
         55:e8:28:64:7b:96:ab:9d:52:d3:45:11:3b:db:b2:a0:13:3e:
         0b:dd:8d:e2:82:2c:19:be:4e:6c:52:bc:cb:b1:d8:c5:ad:54:
         9d:93:94:62:81:d7:47:aa:c5:d6:e9:bb:e7:93:9a:c1:cd:b0:
         c4:49:0c:58:6f:8d:59:bb:c9:5f:4a:c0:c4:f9:b2:51:5c:05:
         76:72:50:fd:a6:35:09:36:c5:8b:7d:cd:3d:ad:84:96:ff:43:
         3c:56:b7:16:4e:19:f6:27:da:bd:f1:5e:70:db:e1:f1:d2:58:
         52:df:7a:56:ea:31:e4:30:7b:f4:5a:08:8a:a9:96:49:ca:a0:
         f9:26:ef:8c:e1:1f:77:43:38:14:70:de:bb:9e:aa:6c:ac:4d:
         24:14:29:e1:bf:65:a1:00:c4:48:3d:9c:0f:b4:75:29:be:80:
         83:d7:b1:e5:9c:60:56:a2:c9:df:a9:52:20:47:e9:27:fc:14:
         4f:08:09:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:05:03 2025 by rpki-client