Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa
File:                     747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa (raw, json)
Hash identifier:          ibKX+leN9WSza6wyuGPK0ge4eS0ya/L2aJ1lOj/bQsg=
Subject key identifier:   4C:0F:3C:73:70:50:31:96:3A:C6:26:15:72:28:53:A1:4C:D9:D8:89
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285849E225239D8B8AA6EC3DC9D900
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     14297
IP address blocks:        139.131.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:23:9d:8b:8a:a6:ec:3d:c9:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=88763b30-0af0-42ca-9e8f-d6abb1c5a09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:e7:b7:1d:33:b2:b6:32:95:c8:be:de:fd:
                    f0:02:b1:dc:b1:d5:c1:73:73:44:cd:80:bf:45:9a:
                    25:78:83:47:c2:e2:9e:6d:a3:f2:18:3d:c4:f4:e0:
                    65:34:3d:95:1b:32:c6:19:9e:0b:e1:8a:af:d2:2f:
                    7e:8d:e7:5c:9e:29:20:2f:f3:0d:67:86:11:4d:96:
                    6e:77:3d:d9:0d:7c:25:6a:64:d3:15:26:f7:c4:27:
                    6b:c1:62:f9:7d:e4:b1:7c:d5:60:c4:82:ef:8e:54:
                    98:4b:b7:d7:b5:15:4a:a4:7f:a5:bc:4a:0a:be:47:
                    55:7a:63:a6:cf:3e:53:83:d6:78:f7:17:a1:19:88:
                    ea:74:9d:0e:5f:4e:a0:6d:d1:a2:29:1a:e2:fa:9a:
                    32:a7:3a:2f:f1:de:d8:4c:15:85:84:10:ef:4c:fd:
                    cf:f1:94:a1:f3:5a:89:6f:82:26:6e:74:53:53:30:
                    62:37:bd:78:df:cd:47:49:2a:d9:e8:25:c0:d8:85:
                    86:5c:d5:26:9c:0a:2b:77:d0:b3:76:2f:57:fc:a8:
                    b1:b3:e1:c4:2d:89:dc:08:62:3a:3e:01:9d:06:00:
                    63:92:6b:10:25:b7:75:46:b3:a1:27:51:b7:91:ad:
                    d3:df:3c:68:45:d8:25:06:44:d1:62:a5:bf:72:02:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0F:3C:73:70:50:31:96:3A:C6:26:15:72:28:53:A1:4C:D9:D8:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f9:a5:24:55:a9:e0:e7:f2:31:61:c2:94:54:17:3a:32:61:
         a3:d0:ee:2e:13:7f:0f:d4:7a:26:a1:a1:ff:f3:12:40:8c:21:
         8c:7b:b5:5a:67:e6:ac:ed:2a:03:a0:f5:ce:d1:80:a8:52:08:
         ee:bb:47:9e:7f:58:8a:3c:40:76:0a:35:88:9e:16:47:1d:e8:
         fc:54:28:e6:a6:c2:0e:dc:67:61:80:53:b9:19:c6:a9:4b:cf:
         ca:03:49:38:24:9e:0e:b0:52:d0:1b:00:9e:50:2e:27:a8:58:
         c0:0f:38:da:a3:da:08:d2:ee:b3:4a:bd:63:51:c0:35:55:60:
         ff:2b:45:1b:78:ff:75:59:bb:38:0e:d8:86:c1:b7:7e:33:cb:
         b0:07:89:36:93:41:5e:cd:01:6a:a3:95:88:e3:8e:3f:6d:1a:
         e4:a4:62:12:9c:6e:e3:77:ba:44:b0:25:a6:b7:42:fa:2d:f5:
         e4:f2:d1:19:78:61:87:b8:75:03:f4:43:0c:83:e4:00:a9:13:
         4d:c6:21:36:e8:22:72:b9:9f:b3:e1:ef:bc:3e:df:6e:b4:b1:
         73:cb:5b:62:99:f2:1a:80:61:f6:12:aa:ac:be:9f:ba:30:aa:
         73:a1:9a:15:61:63:ee:ad:d3:6a:38:af:54:24:94:0e:e9:1e:
         78:bc:c5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:43:55 2025 by rpki-client