Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c2e3ab5c-67dc-3a51-b5a4-2708d0fc99e8.roa
File:                     c2e3ab5c-67dc-3a51-b5a4-2708d0fc99e8.roa (raw, json)
Hash identifier:          gqdTcBplrMrPU//OmYD/TR6djLhKqeA6thetfw0K0xk=
Subject key identifier:   94:81:C0:C2:3E:87:DC:FA:C5:92:DD:20:DA:17:8E:D6:2E:8A:CA:FC
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285849E22523BBE4FA9CE4C38A5540
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c2e3ab5c-67dc-3a51-b5a4-2708d0fc99e8.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     14297
IP address blocks:        139.131.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:23:bb:e4:fa:9c:e4:c3:8a:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=25610d1b-70d0-497e-bac0-20116362996c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:3f:a7:5a:92:11:8d:29:1e:70:37:6e:a0:
                    fd:6f:5d:dc:0d:c4:0f:7b:99:63:cc:42:2f:22:ec:
                    11:2a:68:ff:cf:1d:52:ba:7d:94:1f:3f:df:12:1d:
                    35:9f:15:42:25:d9:19:65:eb:34:8b:e1:a8:28:24:
                    f6:e8:bc:c8:b8:ca:27:d4:88:7a:ff:9b:a2:4c:4f:
                    7f:09:03:f2:f1:23:bb:a9:b5:bc:47:26:20:7b:d2:
                    a5:52:b0:4c:31:17:50:b0:cd:b1:ee:2b:01:14:98:
                    cc:db:66:9e:6d:ca:1d:d5:d8:00:42:68:80:4e:66:
                    d6:68:e2:f4:b4:3a:3f:7b:ee:78:05:9b:2c:15:f0:
                    03:02:ac:07:bc:f4:9b:1d:3b:9b:4b:76:9d:af:35:
                    7b:d5:ee:b2:17:5c:cf:85:16:4f:93:61:0d:7f:2d:
                    7b:9d:58:e2:2c:29:5c:66:de:d6:8e:e4:5f:3a:8d:
                    25:fd:e1:ef:81:d2:f0:0b:06:46:85:8a:13:10:6a:
                    50:8f:85:a0:66:db:3a:1b:2e:a2:08:ca:18:b4:83:
                    0f:5d:95:62:59:5e:7f:8c:ee:08:c0:00:8b:73:cc:
                    5f:2e:46:c7:ae:a2:10:1a:3d:18:53:bf:4f:d9:24:
                    aa:ce:21:bd:41:02:0b:47:39:85:59:f4:a0:77:26:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:81:C0:C2:3E:87:DC:FA:C5:92:DD:20:DA:17:8E:D6:2E:8A:CA:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c2e3ab5c-67dc-3a51-b5a4-2708d0fc99e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:af:55:0a:b4:26:86:34:39:29:49:68:0a:65:df:f1:ff:a9:
         63:09:d9:eb:f4:0d:a0:02:de:e4:0c:ff:fd:b8:a6:f9:e1:a3:
         6e:42:73:e3:39:e4:2d:bc:b9:59:73:b8:a6:6a:1e:ff:4d:55:
         fd:19:aa:a0:2a:ff:fd:a7:fa:78:08:63:44:2b:6b:b4:d5:9e:
         13:7b:c9:c8:98:55:22:4c:87:06:81:7f:37:40:fa:90:de:a4:
         58:93:a2:10:f6:82:7e:be:a6:6b:c0:65:dd:85:a8:73:70:1b:
         3d:c0:59:24:65:6f:2e:0e:7b:b3:3d:3e:40:dd:8e:03:a2:8b:
         5a:d3:cd:83:7a:27:99:91:bf:aa:f7:24:89:d2:e5:43:eb:0e:
         e7:50:a8:b7:f2:ea:bc:35:81:a4:30:95:36:6d:46:b4:8c:3b:
         50:60:ee:45:5b:09:94:cd:0b:96:24:54:4b:ee:23:99:e0:60:
         db:55:e5:18:d2:bb:88:24:73:e7:2a:b6:76:f0:e1:01:b8:85:
         b0:b7:5a:32:6f:af:11:a3:be:50:0f:a8:d2:56:b1:82:18:34:
         34:21:8a:e9:5d:18:08:a5:5a:19:1e:47:21:50:aa:21:92:c5:
         a1:8e:87:a5:bc:10:87:eb:c7:37:d1:54:47:13:1d:11:8e:c2:
         f1:e4:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:57:45 2025 by rpki-client