Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/974ff7ae-7cf3-3c09-bdbf-28451326b447.roa
File:                     974ff7ae-7cf3-3c09-bdbf-28451326b447.roa (raw, json)
Hash identifier:          VUMTnJDgJR+k3NhZjybk0I5U0lCvklxVuP9SoqZHV6s=
Subject key identifier:   95:43:A1:31:A7:AC:05:83:B7:BF:A7:0B:87:45:56:B1:02:3E:BC:F6
Certificate issuer:       /CN=f195db10-ef56-4145-99a8-ea6962c2a136
Certificate serial:       010D0C9F4328584A8B0B5E7AF3D22777ED879B80
Authority key identifier: 49:2D:7A:2F:F0:78:AB:A6:09:B8:9C:52:E1:CF:A8:AF:A7:4C:7A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/974ff7ae-7cf3-3c09-bdbf-28451326b447.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        172.81.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:5e:7a:f3:d2:27:77:ed:87:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f195db10-ef56-4145-99a8-ea6962c2a136
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=6d5f7381-5c3f-4148-a4c6-d12a910a0969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:69:13:6c:0d:28:9b:59:76:1f:c5:d9:49:
                    68:cd:1f:2d:3e:87:32:e5:41:ae:87:c1:62:14:9c:
                    a7:13:cc:77:95:d2:08:95:b0:dd:58:f3:b1:c2:9c:
                    93:26:c1:48:1d:ce:d9:bb:5c:0a:af:44:96:d1:51:
                    5b:95:3f:38:c1:a2:7f:0c:dc:03:de:6b:6a:af:ab:
                    8d:ac:22:b1:2b:b7:3a:f8:68:c5:22:9c:ac:ef:e4:
                    91:b4:fe:e5:d3:a7:6d:c9:e2:a6:10:d1:ad:4e:59:
                    7a:06:9b:17:38:e6:c0:69:04:ec:46:15:f5:28:95:
                    b9:9d:76:d6:21:a3:95:74:41:3d:3b:98:09:24:ff:
                    5e:65:56:a9:c0:c0:4f:5c:61:43:56:f4:6a:54:5b:
                    38:c5:b5:26:eb:c2:50:b9:7b:04:48:82:aa:df:06:
                    ed:5d:56:ed:4e:80:0e:44:aa:85:24:98:3f:22:37:
                    b1:a3:09:05:77:1d:50:b2:bb:41:f3:d3:30:8c:88:
                    91:85:b7:d3:67:86:2c:95:17:16:ea:68:72:5c:2f:
                    7f:96:4c:26:b4:58:28:0d:02:3a:c4:c6:06:a1:c2:
                    ff:cc:0c:8b:0d:a2:20:57:db:1f:df:fe:a4:68:c0:
                    91:37:75:f9:4c:b7:33:ca:64:f7:92:38:59:9e:c3:
                    79:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:43:A1:31:A7:AC:05:83:B7:BF:A7:0B:87:45:56:B1:02:3E:BC:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/974ff7ae-7cf3-3c09-bdbf-28451326b447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.crl

            X509v3 Authority Key Identifier:
                keyid:49:2D:7A:2F:F0:78:AB:A6:09:B8:9C:52:E1:CF:A8:AF:A7:4C:7A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6f:5a:23:92:e4:e9:6b:f1:41:7a:9c:a0:9a:86:f7:fb:a9:
         7c:34:8a:57:f2:f4:6c:e5:df:6e:ad:7a:38:ad:f4:d9:d2:91:
         a5:5d:12:e5:b0:e6:a5:d3:c0:65:01:a5:7a:73:6a:53:4d:91:
         07:53:93:a8:29:ac:55:de:cf:4b:e7:c8:04:ee:18:71:3c:f5:
         14:a1:28:0c:90:9f:92:b0:4d:1d:e4:6d:b8:3d:d6:b9:41:7c:
         a2:9d:5a:95:55:7e:45:8d:07:09:f0:c8:64:6a:a1:d1:b4:42:
         62:56:cd:c4:94:f5:bd:61:83:75:db:a4:f0:50:8e:56:66:45:
         c3:46:59:16:8e:84:8c:aa:be:fb:f0:68:1d:28:45:65:b3:99:
         6e:00:cd:4f:c5:dd:56:15:8e:f1:ee:b9:de:0a:eb:30:db:9c:
         3f:ab:eb:39:00:05:c9:4e:c2:78:76:3e:00:98:93:6d:29:76:
         fb:cd:37:09:b2:a0:1e:a5:20:58:d0:2b:1f:90:32:e1:21:43:
         6a:78:bb:f7:c7:b5:f8:96:f9:da:a1:b1:c3:5b:e8:94:a4:86:
         59:0c:57:a3:61:c0:6b:3b:ed:4f:67:d5:e3:02:79:4d:5a:8f:
         5f:47:94:f1:fa:0e:a8:30:d6:92:ee:61:5c:53:e0:c5:84:5d:
         f1:c9:d6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:42:14 2025 by rpki-client