Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c67d0528-a5bc-3583-8b32-802b61fb538c.roa
File:                     c67d0528-a5bc-3583-8b32-802b61fb538c.roa (raw, json)
Hash identifier:          O6HVF6ftkUSK6MYlyQMfKZR/IeN7CLtp/dmYG1RZ1aw=
Subject key identifier:   43:91:73:E3:10:1E:71:73:A4:CF:5F:5B:07:0F:4E:8C:D4:6C:E0:A8
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584902EBFB5E7757A1E2D8299180
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c67d0528-a5bc-3583-8b32-802b61fb538c.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     14297
IP address blocks:        139.131.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:eb:fb:5e:77:57:a1:e2:d8:29:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=c21a772a-1d87-449f-8440-8754f6d85402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:75:65:75:ae:cc:d0:35:3b:5f:1e:b9:12:34:
                    37:4c:6b:8a:ff:db:91:33:ed:57:13:d2:c9:34:78:
                    e5:da:b5:b5:f3:b9:56:95:ca:e1:1f:bb:9a:3e:4f:
                    63:fb:4d:6e:52:18:8c:27:e0:61:ee:5c:5e:ca:88:
                    27:94:55:c0:f3:a1:88:96:6b:f4:4c:cf:39:3c:21:
                    8b:6a:ca:67:f5:ad:a2:ed:c4:36:24:40:18:36:18:
                    03:08:3c:83:0b:69:34:2b:9f:8e:d5:cc:81:fa:f3:
                    51:26:a7:58:1b:8b:1c:cb:45:ad:51:4d:d3:39:56:
                    5a:ff:76:7d:2a:dd:10:80:db:88:7b:14:19:9a:40:
                    e2:5a:28:ef:1e:91:27:e3:fa:dd:b3:eb:04:02:39:
                    40:c3:f5:57:f1:3f:bd:fe:0a:7c:1f:32:f1:51:3b:
                    a5:c0:bb:b1:41:41:01:df:81:59:3a:e8:2e:a4:64:
                    80:8d:c8:db:d4:c1:2b:0e:5b:e9:a2:e3:5f:cb:8a:
                    98:8f:56:63:f0:be:19:5c:a6:4c:ca:73:9a:8e:ae:
                    31:74:9b:2b:a4:1e:32:29:d6:3e:41:71:13:84:43:
                    5b:12:19:ff:cb:d4:a2:c7:ce:13:b2:93:ab:0e:6b:
                    9a:f2:a5:cc:82:75:39:88:85:c9:b8:3d:e6:9b:98:
                    ce:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:91:73:E3:10:1E:71:73:A4:CF:5F:5B:07:0F:4E:8C:D4:6C:E0:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c67d0528-a5bc-3583-8b32-802b61fb538c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:d6:b2:63:65:56:e6:ff:0a:2d:3c:11:4e:a3:df:df:d1:
         85:f2:86:13:7a:be:3d:4a:c5:39:d2:05:23:66:07:5d:dd:27:
         fc:b6:ad:51:d6:f3:67:9c:8b:cf:ee:91:bc:19:03:e9:b7:88:
         9b:4d:14:8d:3d:b4:fa:3a:c7:7f:2b:1f:b8:19:eb:35:44:66:
         16:9f:9e:c1:99:5a:3a:1b:4c:bf:f9:ec:40:c0:ea:bb:f8:c0:
         af:46:a2:35:8f:7f:c8:37:ee:96:91:a7:68:a4:6f:a0:77:62:
         bb:c0:8d:6a:cd:60:13:c2:40:fe:c2:09:97:6b:0a:75:4d:a0:
         73:7a:ba:b2:de:ca:20:79:9a:69:63:50:cd:98:8c:4a:41:b3:
         5c:5d:df:71:ba:af:b6:47:9a:6c:a8:0f:1d:1d:2e:fb:74:ae:
         e9:84:23:b1:80:1b:19:7e:a8:70:05:9b:73:9c:91:05:6e:60:
         59:38:c3:46:46:fd:60:8a:02:df:96:a5:28:86:70:e5:9e:e9:
         0b:a3:40:d8:12:aa:05:4c:3c:bc:d7:b0:88:54:82:bc:a2:b9:
         02:01:16:f7:2d:67:b7:a4:fa:f2:96:09:1c:2c:87:de:b3:ad:
         67:73:d1:a2:09:81:08:24:b0:e8:b1:6c:09:5b:fc:b3:4c:83:
         13:13:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:36:05 2025 by rpki-client