Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/13198a09-1fe4-346b-a2c9-96893883df36.roa
File:                     13198a09-1fe4-346b-a2c9-96893883df36.roa (raw, json)
Hash identifier:          IunuMGemXVVtZmQyb7ICqnlMRpgKwF6rnnmKGuL/M9c=
Subject key identifier:   C0:EA:24:F8:E8:54:A8:D8:0E:48:57:BB:68:78:2F:D1:FF:76:0F:F2
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F4328584A7FE09496A2BAD8923C605D80
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/13198a09-1fe4-346b-a2c9-96893883df36.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     8987
IP address blocks:        139.121.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:94:96:a2:ba:d8:92:3c:60:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=c659a784-16f5-4d92-b393-38c3f9480e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:00:7c:3a:d8:a1:91:1b:94:a6:4e:cb:af:1f:
                    d7:a1:1e:b8:51:e8:4f:ab:40:12:0b:af:bb:bd:37:
                    38:af:28:0f:e3:89:69:38:9d:9d:96:f5:d7:21:09:
                    be:18:ed:08:84:76:ed:70:7e:6f:4e:7f:b0:68:aa:
                    a2:b9:ec:e2:b6:ec:a4:38:25:30:3b:e0:8a:87:ae:
                    36:6a:4f:c4:df:87:da:f2:fa:d4:d2:9a:78:aa:3f:
                    6a:34:c0:70:77:ac:af:72:fd:8a:92:10:73:45:20:
                    6b:1a:72:30:e8:5b:ad:76:54:2a:58:1e:1a:5c:9c:
                    99:0b:06:54:8b:e5:52:c2:d5:9f:0e:a1:f1:06:cb:
                    c8:d1:59:ea:4a:1a:6b:2b:b6:b7:6a:18:03:fe:34:
                    c8:9b:4e:51:63:3f:56:04:ec:92:86:be:bc:8b:5f:
                    34:74:f0:35:3e:77:be:51:e7:78:b9:e4:2a:48:c4:
                    f8:d8:08:ca:17:69:f6:27:45:18:e5:db:38:0d:59:
                    be:d9:75:27:fd:c4:57:f3:0f:3e:65:ba:af:05:e2:
                    ad:ec:77:30:74:d3:83:23:40:27:b0:3e:cf:82:40:
                    e9:99:96:49:f5:ae:85:37:d8:bc:b4:ba:8c:b6:7b:
                    c5:63:63:c6:b6:97:0f:de:3a:a1:cc:62:17:37:90:
                    f4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EA:24:F8:E8:54:A8:D8:0E:48:57:BB:68:78:2F:D1:FF:76:0F:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/13198a09-1fe4-346b-a2c9-96893883df36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:96:01:fa:b6:12:8d:0d:a1:c8:6d:35:45:3a:dd:2b:2b:d2:
         17:6b:50:88:10:a4:42:0a:36:05:d8:7c:c6:a2:8e:64:13:09:
         5f:70:f4:00:e9:f6:74:12:59:93:69:78:16:14:9c:40:d8:ae:
         7d:7d:a6:43:c8:bb:2e:eb:a2:cf:4b:ca:c1:aa:bd:1a:16:62:
         93:3e:2d:6c:7c:3e:5c:04:e9:3e:80:bc:00:87:eb:5b:0d:a6:
         1f:f0:87:7c:d4:09:fb:b4:46:da:0e:35:58:18:97:b0:31:37:
         30:58:d4:fd:2b:8a:74:12:b6:f4:98:13:1c:5f:f4:a4:df:db:
         0a:3a:a5:f7:d4:1c:92:23:bc:e7:4d:92:6f:96:54:c4:d4:16:
         3a:13:01:17:42:27:83:ea:18:2d:c3:c2:3a:83:84:38:a8:2e:
         f7:8d:da:a4:da:01:1b:48:2f:bc:3c:f6:ab:e8:01:a9:7d:c7:
         f3:b6:7e:2a:e6:32:dd:d0:87:3a:2e:3a:11:ab:70:7f:81:f5:
         4a:0c:35:7c:c3:48:ad:aa:5f:7a:eb:ce:53:19:a6:14:f7:c1:
         79:e9:41:39:bf:ef:70:ac:70:ea:eb:e1:ec:21:9e:ea:db:c1:
         32:58:74:a4:99:44:0c:dc:c4:c1:8f:e6:22:bf:9d:7b:c0:41:
         3c:b1:bd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:21:53 2025 by rpki-client