Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/91249acf-806c-34f8-a7cf-94886c24dbd4.roa
File:                     91249acf-806c-34f8-a7cf-94886c24dbd4.roa (raw, json)
Hash identifier:          qHxwp2GIuXkE8VUDfZ3wfnhFeayMhB62wTFGdNgsnvw=
Subject key identifier:   93:36:B9:36:6B:B2:48:DB:09:7E:5A:F4:56:81:39:14:99:4A:4C:8C
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285849E22523334F04107060B3C000
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/91249acf-806c-34f8-a7cf-94886c24dbd4.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     14297
IP address blocks:        139.131.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:23:33:4f:04:10:70:60:b3:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=bd261539-f8d4-4629-a7c8-ec73fabaf1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:62:cd:3c:a2:b6:87:7f:5e:f2:ff:e7:90:
                    a8:2b:c4:17:36:56:91:b6:9f:c8:a6:d3:3a:13:81:
                    2a:ac:01:00:60:58:42:77:80:27:46:dc:8b:84:31:
                    00:6f:45:c4:bb:a4:ae:26:d5:a6:22:cb:e2:a6:ba:
                    df:dc:57:3a:64:28:a3:d0:a7:ae:53:d6:79:9d:6c:
                    a2:1d:ab:0a:f6:c4:fe:32:5d:39:21:bc:57:46:1d:
                    bd:53:ab:5a:49:9f:ad:73:db:b1:81:4a:a1:63:68:
                    a2:73:d6:51:a2:f9:cf:61:c8:15:ed:1e:95:8a:05:
                    d4:38:14:00:14:ed:c6:ff:50:d3:ec:58:b6:8a:01:
                    c6:97:55:89:03:99:1a:77:de:48:ee:a6:b6:24:32:
                    09:2b:a7:ce:0c:cc:81:82:1f:ac:25:4c:f3:f5:83:
                    a6:dc:ea:03:bf:95:71:93:3a:a4:cd:29:a4:9e:d6:
                    ed:a3:b9:d7:11:c6:33:e5:38:72:5b:25:3a:f2:47:
                    96:a7:06:5f:7f:fe:c4:6b:05:17:59:0f:58:af:5f:
                    a8:47:10:d7:f1:a6:8a:e9:3a:70:ad:bb:f8:6a:91:
                    4c:a3:b0:80:7f:28:ab:11:f5:2b:99:87:aa:38:8f:
                    16:27:38:50:ae:03:ca:f5:8a:13:a0:ea:ec:a9:97:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:36:B9:36:6B:B2:48:DB:09:7E:5A:F4:56:81:39:14:99:4A:4C:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/91249acf-806c-34f8-a7cf-94886c24dbd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:4c:cb:a7:c4:d1:1b:55:e9:1e:0c:9e:94:73:e3:14:c1:d1:
         e2:97:3c:8a:32:94:27:37:11:a3:a9:1b:2e:96:9e:ef:33:3a:
         d8:6b:ec:8a:37:de:93:c5:37:fb:80:1f:87:c4:a0:eb:ec:69:
         3b:b7:8c:01:c5:dc:5d:dd:6a:b7:7f:30:83:02:7d:e7:15:6c:
         e6:9c:7b:e6:10:49:6a:7c:48:85:bd:b3:89:09:75:3e:6c:63:
         1a:8c:ea:bc:6a:33:28:e8:36:a4:a1:16:85:24:d4:c7:69:8e:
         18:2e:c8:2d:a6:a1:85:57:53:a9:47:66:8e:b7:56:8b:64:95:
         61:e7:f3:bd:f2:63:cf:98:2e:36:3f:a7:93:e3:b8:7c:34:2f:
         d0:e9:64:1c:37:a8:58:bb:05:cf:5f:ce:bd:7b:c0:c0:64:c8:
         dc:e6:dc:1e:80:80:e5:21:d7:7d:fe:78:dc:5c:22:df:d9:0c:
         92:bb:4c:90:f8:82:59:64:69:72:72:a4:7d:da:35:9e:1b:61:
         06:13:4a:ec:29:f4:f6:c8:d8:4b:f9:a9:b0:e7:5b:f2:f0:f2:
         b0:d1:6e:19:6f:11:35:71:61:96:f5:17:68:44:03:1b:2a:ef:
         0a:a6:28:39:bf:d6:6e:79:6d:63:8e:49:d3:1a:ff:15:54:8d:
         62:b8:e6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:48:49 2025 by rpki-client