Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/5ac9dd6d-a595-3664-bc88-12c31f44ccaf.roa
File:                     5ac9dd6d-a595-3664-bc88-12c31f44ccaf.roa (raw, json)
Hash identifier:          0HXtw6otp+YRHf0dw1hjFQbbIdxdBfl+p+ywILO4a8c=
Subject key identifier:   FC:0A:13:FD:71:F1:51:D2:D5:EE:4B:B8:5C:3D:48:51:DF:2D:33:F4
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584902EBFAD213423770FE1E0500
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/5ac9dd6d-a595-3664-bc88-12c31f44ccaf.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     14297
IP address blocks:        139.131.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:eb:fa:d2:13:42:37:70:fe:1e:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=14528018-b203-4f9c-9036-08d4a97344e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ec:58:08:8d:0a:fa:a3:5e:46:3d:d7:db:d0:
                    8d:e9:b3:f8:51:dd:cc:40:07:78:5a:0a:02:67:6f:
                    2f:e9:25:fb:a8:f1:0b:b0:55:e5:fd:ae:93:24:10:
                    13:3a:80:17:61:c0:f7:86:ff:76:b4:d8:c2:11:ca:
                    2a:ba:91:a5:a6:28:ed:7b:51:23:48:23:c2:bd:11:
                    d0:0e:d0:6e:69:d2:bb:0c:27:2b:b3:ad:cd:66:07:
                    62:f4:33:e4:7d:58:f0:fe:2f:78:0d:7d:47:b4:87:
                    7a:0a:e6:8e:30:94:6f:73:ec:84:ca:33:58:6a:e2:
                    ae:88:0e:24:74:ed:4e:1e:f4:2f:dc:39:8a:64:d8:
                    55:7d:7d:ce:5a:d6:05:c4:e7:67:ca:ba:4d:dc:9f:
                    dd:70:78:3f:8b:7e:16:3e:9d:c2:31:04:69:e1:ce:
                    cf:c0:d0:5e:d4:1a:a5:34:7f:af:de:ec:5a:d3:d9:
                    27:f1:2d:90:94:92:6b:ad:58:be:59:ed:35:33:9c:
                    c0:da:1a:a3:79:87:48:e1:19:d3:fe:ca:70:97:2a:
                    d1:2a:60:50:7d:a8:e0:fa:3c:18:53:91:bd:f1:3f:
                    50:2c:2a:80:ff:cf:63:8f:7a:7b:6e:a1:b3:0d:a3:
                    b9:eb:53:c6:ff:e5:d3:47:79:87:d2:af:61:84:f6:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0A:13:FD:71:F1:51:D2:D5:EE:4B:B8:5C:3D:48:51:DF:2D:33:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/5ac9dd6d-a595-3664-bc88-12c31f44ccaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:97:31:c1:9b:74:4e:03:25:2b:71:6d:8e:13:b6:53:ad:
         4f:dd:ff:d2:85:2b:90:ce:06:26:ea:93:4c:b9:f0:af:68:b2:
         da:50:55:12:e8:f2:c2:39:3e:62:df:8f:75:c1:87:8c:3d:1b:
         6b:48:d7:71:1b:3c:cc:3c:a4:b6:fa:25:1c:33:45:db:db:f6:
         98:c7:6e:12:5d:b8:c3:16:41:13:19:8e:5b:47:77:e1:a9:17:
         bd:95:2d:12:69:f7:03:5e:2f:83:91:e6:87:e9:7b:8b:17:51:
         7d:f6:a4:0b:43:e2:27:a2:66:9e:64:31:b6:07:10:06:1d:23:
         d0:0e:fe:76:0f:a8:d2:dd:cc:80:2d:d6:0c:e1:cd:ae:1b:a8:
         1f:45:f7:65:43:6d:9c:57:be:20:69:10:e0:25:a2:34:58:fc:
         a5:b3:d4:4e:ba:9d:a3:50:d0:7d:98:6e:54:92:b8:d5:75:1d:
         bc:87:b3:dd:95:97:3c:6f:e8:2b:75:a9:1f:aa:18:f0:53:6a:
         55:b9:8b:4b:ef:1d:ac:9b:95:bb:1b:f8:8a:a2:e2:c0:c9:57:
         50:17:11:42:df:c2:b9:99:11:48:39:35:12:d7:54:47:48:b2:
         88:7c:7a:fb:dc:b9:ee:26:88:c2:6e:c5:18:2b:d6:0e:0a:62:
         4e:c9:68:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/rSE0I3cP4eBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
MTQ1MjgwMTgtYjIwMy00ZjljLTkwMzYtMDhkNGE5NzM0NGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOxYCI0K+qNeRj3X29CN6bP4Ud3MQAd4WgoC
Z28v6SX7qPELsFXl/a6TJBATOoAXYcD3hv92tNjCEcoqupGlpijte1EjSCPCvRHQ
DtBuadK7DCcrs63NZgdi9DPkfVjw/i94DX1HtId6CuaOMJRvc+yEyjNYauKuiA4k
dO1OHvQv3DmKZNhVfX3OWtYFxOdnyrpN3J/dcHg/i34WPp3CMQRp4c7PwNBe1Bql
NH+v3uxa09kn8S2QlJJrrVi+We01M5zA2hqjeYdI4RnT/spwlyrRKmBQfajg+jwY
U5G98T9QLCqA/89jj3p7bqGzDaO561PG/+XTR3mH0q9hhPZRxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwKE/1x8VHS1e5LuFw9SFHfLTP0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNWFjOWRkNmQtYTU5NS0z
NjY0LWJjODgtMTJjMzFmNDRjY2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4OGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/slzHBm3ROAyUrcW2OE7ZTrU/d/9KFK5DOBibqk0y58K9ostpQVRLo
8sI5PmLfj3XBh4w9G2tI13EbPMw8pLb6JRwzRdvb9pjHbhJduMMWQRMZjltHd+Gp
F72VLRJp9wNeL4OR5ofpe4sXUX32pAtD4ieiZp5kMbYHEAYdI9AO/nYPqNLdzIAt
1gzhza4bqB9F92VDbZxXviBpEOAlojRY/KWz1E66naNQ0H2YblSSuNV1HbyHs92V
lzxv6Ct1qR+qGPBTalW5i0vvHayblbsb+Iqi4sDJV1AXEULfwrmZEUg5NRLXVEdI
soh8evvcue4miMJuxRgr1g4KYk7JaM8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:37:41 2025 by rpki-client