Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/6a1f6235-91b9-3370-a2d3-15aa35a99f5f.roa
File:                     6a1f6235-91b9-3370-a2d3-15aa35a99f5f.roa (raw, json)
Hash identifier:          gsZWlYuEktl9BuTYws5ir3uO3tOwnRLhn3ttRfh6UTw=
Subject key identifier:   8E:B1:D0:26:77:BF:1E:A7:6F:AC:A9:5E:57:C5:3E:73:72:FA:17:6D
Certificate issuer:       /CN=21536be2-b559-4b5e-9749-413cb6af0bc1
Certificate serial:       010D0C9F4328584AB22175EEA248770B5ECEFCC0
Authority key identifier: D9:6F:83:DF:E3:4D:6B:F6:09:48:86:48:C7:34:0C:5D:69:74:69:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/6a1f6235-91b9-3370-a2d3-15aa35a99f5f.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     16498
IP address blocks:        139.84.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:75:ee:a2:48:77:0b:5e:ce:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21536be2-b559-4b5e-9749-413cb6af0bc1
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=a757d7f0-1286-42c7-a628-8c53885a6e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:86:c4:f6:f5:51:33:57:f6:d1:10:1f:49:
                    0c:55:71:b2:33:5b:5b:36:f6:7a:70:5e:33:48:f7:
                    15:8e:2f:ae:a7:f7:30:e3:eb:b2:a9:1b:10:0a:ce:
                    9f:c8:46:92:3b:5b:e7:76:d8:96:1a:5e:cf:93:4b:
                    cb:d5:ae:c4:05:ed:66:b1:5e:3f:0e:85:b8:f9:3c:
                    ab:fb:61:95:f1:bc:d2:cb:12:57:a7:6a:0f:ef:a7:
                    f6:b7:7d:3d:4e:98:e6:4b:83:50:5b:6e:15:0a:55:
                    b1:3c:bf:ff:3a:72:61:a1:3d:90:3a:1f:66:ff:f3:
                    01:18:b5:0f:dd:5b:46:4c:62:ad:0c:4d:7e:83:19:
                    7e:37:58:53:6a:61:20:f9:c2:b7:64:a5:9d:f2:4f:
                    be:71:44:29:ae:1d:2d:ed:33:ac:15:52:48:28:af:
                    82:17:b3:f0:4d:94:ec:f9:2e:f0:94:0a:74:31:67:
                    3e:bc:1c:10:35:ae:d6:71:b8:d3:a4:c7:7d:88:61:
                    af:7a:b2:bf:12:c1:69:9b:c3:65:67:db:aa:d0:5c:
                    d7:f2:c6:79:ab:f4:a8:7a:ce:1e:62:2f:a5:70:a0:
                    37:2f:67:20:22:3c:62:e8:9c:93:cf:a8:71:91:dd:
                    2c:c3:04:89:51:0d:f6:63:70:eb:dd:fc:d0:9b:94:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B1:D0:26:77:BF:1E:A7:6F:AC:A9:5E:57:C5:3E:73:72:FA:17:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/6a1f6235-91b9-3370-a2d3-15aa35a99f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.crl

            X509v3 Authority Key Identifier:
                keyid:D9:6F:83:DF:E3:4D:6B:F6:09:48:86:48:C7:34:0C:5D:69:74:69:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.84.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:8d:dd:3a:5b:c7:22:aa:68:2a:56:c0:85:04:4b:11:3e:b6:
         b7:92:2e:f4:86:8c:17:3a:42:56:79:f2:a2:94:f6:a3:89:5c:
         53:4b:fd:84:9c:85:f8:33:82:2d:7d:9d:7d:ce:f9:d2:a4:79:
         7d:6a:89:9a:6c:7b:57:03:0a:e3:1d:51:f6:ab:ee:21:f5:95:
         18:ac:99:06:66:32:87:9a:9c:a7:b9:f5:07:68:25:d7:bf:b7:
         ac:f0:d3:0c:54:c5:d8:c3:32:b5:f3:5f:e8:21:68:0e:96:a8:
         67:e1:7f:14:fe:8f:1e:39:3b:8e:35:68:71:b3:56:71:3f:70:
         55:73:af:11:09:a2:32:6b:22:ad:e3:28:26:c0:b0:5a:2b:80:
         61:7b:01:1b:f0:e7:22:43:9c:1b:3c:42:81:08:89:f8:6d:d4:
         c6:f2:8e:f3:2b:d0:29:8e:d1:9e:b6:24:08:11:f1:25:3e:41:
         c3:5d:50:9b:2b:a1:a4:50:9a:a3:73:e3:7a:88:b7:b2:32:b7:
         98:98:58:b4:d3:5b:06:0d:37:36:8b:fc:96:74:d2:37:23:8c:
         5f:6d:c9:d1:a3:91:8a:93:7c:29:21:0e:99:f3:b5:fa:a6:f1:
         e8:62:d9:95:ee:3f:4a:21:83:8e:d1:fe:c7:ad:6d:ec:76:6f:
         b2:27:04:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:34 2025 by rpki-client