Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d8581e1e-173b-368e-be6f-ded3bfbd4fbf.roa
File:                     d8581e1e-173b-368e-be6f-ded3bfbd4fbf.roa (raw, json)
Hash identifier:          MaAmymw+yCqcvvbE6TlQxcLBGe6bUTLn5NqAps7vXyg=
Subject key identifier:   E3:6A:9B:0B:5E:7D:61:39:C7:CF:5D:3F:6E:25:15:BF:E3:CF:BF:6D
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285849E22515196CDF42596A1CF340
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d8581e1e-173b-368e-be6f-ded3bfbd4fbf.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     14297
IP address blocks:        139.131.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:15:19:6c:df:42:59:6a:1c:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=274aa63a-6df9-47e2-867f-11c42af4779f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:74:b2:af:e6:ed:9c:d5:6b:2d:c1:1b:77:
                    eb:a8:c7:56:79:c4:11:b2:1f:9a:a8:d4:4f:e8:1c:
                    15:41:df:9c:8f:0e:dd:9a:4d:a5:3b:55:46:09:e0:
                    8e:b7:1a:da:12:cd:37:ae:b7:e5:9b:c7:46:ab:2e:
                    56:a5:ba:59:79:09:e5:f0:93:4e:c1:be:25:a4:de:
                    71:d5:b2:57:84:92:82:3c:9e:24:06:f0:cd:af:96:
                    e2:ef:60:d9:4d:05:c8:05:c0:8d:2b:f3:cf:43:91:
                    88:df:e7:32:59:4d:57:c3:23:e6:b4:d7:16:08:6d:
                    f3:84:f8:57:48:6d:33:fc:2a:2d:b4:8c:34:37:07:
                    b9:5e:b5:17:70:d6:86:a7:05:ca:51:3d:e3:52:06:
                    c6:11:e1:bd:1a:d3:32:b0:7d:b5:46:f6:43:a4:ff:
                    2b:62:68:40:1f:ca:cc:16:38:49:1e:de:bf:ae:d8:
                    b8:1b:fe:29:05:f4:e6:77:bb:ba:01:30:2f:29:6e:
                    93:15:d7:31:19:1f:f1:45:0e:01:29:e6:8f:4f:1b:
                    cb:0f:2b:a5:8c:8d:4e:6f:8e:9a:88:4f:6e:ee:8b:
                    f9:84:57:96:a9:64:be:a8:04:45:24:93:61:7d:34:
                    44:1e:72:56:23:a9:33:72:fa:7d:7b:16:47:99:97:
                    4e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6A:9B:0B:5E:7D:61:39:C7:CF:5D:3F:6E:25:15:BF:E3:CF:BF:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d8581e1e-173b-368e-be6f-ded3bfbd4fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:38:c0:e8:d2:55:67:10:61:76:22:85:93:7c:03:f7:1a:d8:
         c2:5b:97:84:62:f6:81:1d:41:20:a5:10:79:05:28:ec:22:1c:
         b0:c8:50:bd:47:cc:f7:07:48:b1:1d:3e:ce:a8:cd:84:57:21:
         78:73:fd:33:f1:a6:bf:d3:c9:29:79:15:af:86:fa:84:5a:0c:
         16:f5:cd:2a:f5:4a:91:18:9d:ba:76:f6:83:00:16:0d:86:56:
         64:02:78:be:c1:30:40:6b:47:7c:e7:79:58:fc:e5:42:73:14:
         e6:74:0c:f0:e6:a3:77:ae:5a:ee:74:8d:84:e6:1d:a2:e2:79:
         ed:a4:b1:5b:d3:5c:ac:52:38:71:c1:bb:46:5e:7c:c1:00:08:
         9a:f4:38:1e:01:5e:cd:30:55:f4:d5:94:54:40:9a:63:81:60:
         b4:3d:15:b5:f7:c5:64:e8:7a:83:0b:61:0a:88:3c:d4:ae:3e:
         94:2d:8e:99:92:49:31:5c:2d:2f:3f:63:a5:96:52:d5:00:f5:
         1f:15:32:6f:56:4e:bb:84:d9:e6:3c:69:77:50:df:5f:5e:f0:
         b0:e9:87:44:ec:09:d2:4a:e8:c5:58:7a:70:0b:90:2b:8d:d4:
         66:ef:79:85:34:7f:31:57:ae:a3:b4:fc:94:1b:92:eb:ed:ac:
         ee:33:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:05:33 2025 by rpki-client