Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa
File:                     1a850553-c1f9-3561-bb79-65835fe4fee4.roa (raw, json)
Hash identifier:          6si7UQiXi77xu9eYDG/wGHRri4eq72XZoCXJmOHtSaI=
Subject key identifier:   E3:0C:0B:FD:AF:95:18:27:35:06:59:74:FA:D5:BE:6F:5C:99:FB:F6
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584B0E41541EF27F90C153248380
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     30215
IP address blocks:        139.138.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:54:1e:f2:7f:90:c1:53:24:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=0a0dedf8-2090-43d2-9175-f1231059be96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:23:8b:b1:be:f0:ff:b4:ad:2e:fe:43:38:
                    39:29:fc:72:54:77:58:da:5d:8e:27:b9:4c:ec:8b:
                    04:73:40:4b:d1:78:3a:ef:22:60:97:b6:dd:16:7f:
                    30:33:cd:62:be:07:bd:68:64:24:1b:5c:56:e1:ee:
                    18:64:5f:80:24:dc:08:19:1b:df:f4:0f:f9:c8:5e:
                    3b:8b:3a:48:87:47:e9:1f:b0:48:94:42:30:4a:2f:
                    85:0a:57:51:16:99:ed:80:9d:dd:f8:87:db:ed:fb:
                    8b:a7:8d:a3:5a:c8:ea:bc:01:08:00:d3:f3:e3:c0:
                    54:fd:f0:58:d4:11:f2:61:9a:5f:5f:2f:fb:8d:5e:
                    7b:bc:8d:47:bd:41:04:d0:99:2d:0a:86:bc:59:06:
                    0d:bf:3b:d1:f6:2c:c2:cc:f9:f2:ee:75:b3:f5:f2:
                    f6:78:84:2a:29:41:21:bd:ba:6d:a3:3f:ea:ba:ee:
                    9d:87:4e:27:d2:6a:2c:cf:1a:ce:12:64:5e:4a:76:
                    5a:0e:ef:fb:37:fd:b9:5d:1f:1c:2c:4a:13:bf:7f:
                    6e:a6:75:fe:18:d9:ce:55:f6:28:b4:4a:56:d5:ed:
                    c0:93:dd:3b:63:1d:c8:04:0e:70:4d:05:2e:72:c7:
                    5d:4e:0e:0b:a4:30:c4:df:b8:85:7f:91:24:0f:e0:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0C:0B:FD:AF:95:18:27:35:06:59:74:FA:D5:BE:6F:5C:99:FB:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:90:cf:8d:01:42:cf:a0:ba:57:c5:a4:d2:ca:d1:56:a5:86:
         5f:07:98:ea:47:d1:01:e2:bb:e5:ae:4a:b7:7c:2a:6e:63:b1:
         b3:99:21:63:47:92:03:4e:6b:3e:09:94:ca:01:5d:e5:27:67:
         9d:a4:20:fa:7f:30:0c:20:30:51:97:b4:b5:d3:0d:a8:be:ab:
         b4:f1:7f:50:5e:99:eb:c4:b0:4b:08:d1:3e:fe:46:f9:66:06:
         ef:ba:52:bd:36:2c:6e:21:fd:f4:8e:e7:e1:da:9b:34:b7:02:
         0f:02:e0:b0:ed:52:3a:d7:a7:05:ee:b4:93:cc:03:12:75:35:
         72:ce:8d:24:2a:39:4f:17:71:c0:c9:83:da:37:f2:57:63:c1:
         fe:a6:63:4b:ec:9a:2c:4c:04:60:4c:77:d4:fa:41:60:06:63:
         19:a6:17:04:af:26:a4:19:15:4f:3b:cc:40:28:82:ad:d4:5c:
         5b:be:fe:fe:35:1e:01:b0:8b:73:bd:f2:30:3a:32:00:06:a1:
         df:50:1b:56:22:42:8c:a0:22:22:bb:47:a1:df:bf:1c:09:cf:
         a3:81:7a:e7:10:a2:d9:91:c0:e2:61:52:ab:b3:1c:b1:1d:40:
         a8:ba:53:e7:cc:06:0c:63:3b:8a:35:72:ed:36:1e:a0:0c:27:
         c1:dc:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:36:21 2025 by rpki-client