Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/13198a09-1fe4-346b-a2c9-96893883df36.roa
File:                     13198a09-1fe4-346b-a2c9-96893883df36.roa (raw, json)
Hash identifier:          1b29INxSrMzuy1f7FEAoHDheY2OXn/bJyaY/kUhQ3hY=
Subject key identifier:   7B:D7:FF:97:1D:88:E2:D5:38:F4:3E:7E:2B:07:CD:86:DC:8C:19:90
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F43285849A089D339383F939E1E153400
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/13198a09-1fe4-346b-a2c9-96893883df36.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     8987
IP address blocks:        139.121.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d3:39:38:3f:93:9e:1e:15:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=4c0136b9-eee4-4daa-94aa-61ad64a0a93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bc:c4:cb:f8:82:f0:78:53:0d:b2:67:b1:38:
                    92:84:06:f9:04:5f:94:5b:92:bd:d3:ec:be:3c:60:
                    87:fa:53:e2:c2:03:55:90:67:d0:4a:f3:da:6b:ef:
                    40:85:da:fc:6e:2c:16:a3:ec:8a:fd:ce:ca:d9:ea:
                    96:92:4c:8d:35:c8:86:4d:52:71:23:cc:58:f7:aa:
                    91:39:ff:45:c6:bd:3c:ae:7a:bb:a6:05:75:06:04:
                    9d:22:35:e7:60:67:7d:6d:e5:22:3a:65:9a:d6:10:
                    49:b0:47:73:c4:9b:b5:cb:7b:34:46:69:27:ee:27:
                    06:23:dc:41:36:53:87:a2:92:3b:ae:da:ab:27:4d:
                    9c:65:b2:c8:e1:11:66:43:75:13:69:f1:89:68:ff:
                    14:5d:61:d5:a8:0a:3a:33:72:cf:40:a1:5c:92:ff:
                    e5:a8:99:0b:a8:d1:ef:3e:1d:c2:9f:7f:8e:6d:03:
                    9f:11:f8:c0:bb:56:c1:33:38:fd:a0:83:52:7d:5e:
                    92:7c:dd:b7:53:94:b2:bd:f9:3d:38:3e:88:87:4c:
                    e2:4c:02:55:61:9d:51:36:16:53:0d:88:82:16:bf:
                    c8:28:13:38:a4:1b:9b:52:37:2b:db:45:e4:90:54:
                    69:23:10:08:6a:ad:23:4c:14:ba:8b:61:7e:96:56:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D7:FF:97:1D:88:E2:D5:38:F4:3E:7E:2B:07:CD:86:DC:8C:19:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/13198a09-1fe4-346b-a2c9-96893883df36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:5f:e2:d7:d9:25:3a:0f:c2:5b:2d:3b:11:be:48:31:50:37:
         3d:85:f6:21:c9:3c:2d:f4:32:f0:29:94:b1:91:30:16:54:0b:
         95:2f:60:7e:0b:fe:fd:e6:ce:32:ac:1e:f9:d1:ce:e8:bb:f8:
         d9:76:28:c3:3c:65:0c:ad:f3:f2:44:f4:ca:f8:e0:7e:17:08:
         53:20:a8:dc:98:66:d2:e0:f5:94:7b:3b:1b:85:50:93:57:c7:
         64:20:b2:c4:fa:7a:26:87:b5:24:f5:00:08:c4:2a:c7:59:2c:
         fb:5e:e1:2b:41:fb:b4:7e:1c:6d:ea:1c:53:e5:6d:8e:a5:78:
         84:85:0e:e7:ae:1b:7b:66:fe:0c:36:c5:a8:5b:9d:7b:c8:89:
         e8:e9:c1:4a:fb:2f:a4:57:f8:14:b6:49:62:7b:72:45:eb:3d:
         22:d8:81:d3:81:bc:6f:07:fb:7c:cb:00:1c:35:be:22:f2:4c:
         8e:56:20:2b:1e:37:39:9a:d8:f4:7f:68:3c:f5:17:07:3e:b4:
         cf:37:33:16:03:1f:9b:b3:1a:6e:41:80:fe:09:28:25:5b:60:
         b4:fa:2a:34:9d:71:8d:c0:2a:b4:ba:0f:d4:de:96:93:44:71:
         ed:c4:ff:fa:a0:b1:0c:a6:41:29:ba:13:64:21:ba:82:c9:bd:
         7c:4d:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:15 2025 by rpki-client