Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/2719a139-f0aa-3c7b-b4e5-114bd402086f.roa
File:                     2719a139-f0aa-3c7b-b4e5-114bd402086f.roa (raw, json)
Hash identifier:          V/OZSphQr229KSGsImSUxGIzCbprIgDNlsIOFEyMZAQ=
Subject key identifier:   B7:62:E8:DB:1D:A3:B5:B9:70:3C:56:3D:11:40:11:06:3F:1E:51:92
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584AC2E0F048435BF329EFE94000
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/2719a139-f0aa-3c7b-b4e5-114bd402086f.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     11251
IP address blocks:        139.104.96.0/19 maxlen: 24
                          139.104.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f0:48:43:5b:f3:29:ef:e9:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=06c919c5-e6da-4d23-9e10-715f1bfb929f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:57:ca:79:9d:cb:17:43:22:32:9d:1b:4d:
                    dc:c4:bf:54:35:8f:04:80:6d:c1:2a:68:27:49:21:
                    a4:77:63:23:85:3d:cb:30:8c:64:49:58:7f:64:05:
                    04:e3:8a:6d:a1:d6:a9:81:e7:57:9c:4f:c6:3b:08:
                    cf:f7:28:16:18:6e:d9:4e:a7:07:81:03:2c:3a:5b:
                    6e:70:42:2f:fe:c9:83:5e:a2:9b:e1:76:6b:74:bd:
                    26:ad:9e:15:e3:6f:5e:6a:90:fd:6b:40:6c:91:11:
                    e3:a7:c7:e2:0e:d0:ed:87:2a:23:58:ff:03:03:61:
                    64:5b:10:58:6b:ec:7f:72:2b:13:11:14:f8:3e:a5:
                    e1:ec:11:65:14:81:58:2b:32:b5:f0:54:be:57:ec:
                    08:98:b3:c9:a1:70:f5:97:10:c5:50:de:86:43:e6:
                    e9:12:03:c9:93:a7:d4:cf:b4:30:e4:13:5f:71:ea:
                    f1:e8:23:63:44:b4:44:6a:9f:b4:49:21:3a:27:39:
                    93:8d:1e:70:ff:b5:12:2d:bc:89:9f:75:ae:87:79:
                    1e:2a:88:44:b2:0f:48:05:99:47:cd:6d:05:9e:7d:
                    ee:a3:20:da:c2:7b:af:d3:9c:b3:37:fc:5d:ac:e0:
                    7b:5a:6f:f6:cb:94:c0:f9:aa:f5:ad:45:12:ae:f4:
                    e1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:62:E8:DB:1D:A3:B5:B9:70:3C:56:3D:11:40:11:06:3F:1E:51:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/2719a139-f0aa-3c7b-b4e5-114bd402086f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.96.0/19
                  139.104.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e2:0e:25:ad:0d:d4:db:b0:3e:a9:28:8a:a2:a8:f1:fd:4c:
         25:90:d1:3e:ff:35:16:59:a6:7e:7a:d5:cd:5b:a0:5d:b6:85:
         65:39:e6:ae:df:25:c4:6d:5d:f6:1a:13:48:73:69:b1:19:94:
         ee:cb:57:41:d2:97:6b:e9:dd:7a:08:c8:e9:8d:9e:b6:f6:d3:
         f7:50:bf:0e:ea:9c:53:97:b1:08:63:06:e8:d5:df:98:d9:94:
         83:84:bd:02:66:f3:f9:51:9f:ee:47:b4:0f:54:8e:93:57:90:
         28:40:67:c2:57:e7:a8:0c:bb:3e:e0:96:0a:50:98:f2:e6:5a:
         0a:95:01:dc:44:60:3c:6e:fc:db:13:3e:54:e3:b8:a9:90:8b:
         a1:cc:33:e6:10:0c:dd:0f:0e:e4:c1:4b:4e:27:00:c3:c7:ed:
         64:cb:37:41:0a:26:4b:d4:ee:4a:9a:0b:96:55:72:2a:06:c5:
         ac:41:9f:05:42:f8:8c:53:db:2a:09:2c:24:2d:32:ac:54:b7:
         6a:cb:7b:3e:fd:7f:1a:db:15:95:c4:e9:8b:e5:29:44:52:ea:
         02:22:69:4d:ea:7c:0d:30:fd:db:9e:63:94:6f:a8:82:33:33:
         b3:29:59:de:fd:9a:c3:52:f2:68:2e:2a:58:d2:58:42:62:e9:
         17:e1:7f:f6
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErC4PBIQ1vzKe/pQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmM5YmQ2ODQtODgzYi00MWI4LTk4OTAtOGNkNzgxMTc4
OThjMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
MDZjOTE5YzUtZTZkYS00ZDIzLTllMTAtNzE1ZjFiZmI5MjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVZXynmdyxdDIjKdG03cxL9UNY8EgG3BKmgn
SSGkd2MjhT3LMIxkSVh/ZAUE44ptodapgedXnE/GOwjP9ygWGG7ZTqcHgQMsOltu
cEIv/smDXqKb4XZrdL0mrZ4V429eapD9a0BskRHjp8fiDtDthyojWP8DA2FkWxBY
a+x/cisTERT4PqXh7BFlFIFYKzK18FS+V+wImLPJoXD1lxDFUN6GQ+bpEgPJk6fU
z7Qw5BNfcerx6CNjRLREap+0SSE6JzmTjR5w/7USLbyJn3Wuh3keKohEsg9IBZlH
zW0Fnn3uoyDawnuv05yzN/xdrOB7Wm/2y5TA+ar1rUUSrvThqQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLdi6Nsdo7W5cDxWPRFAEQY/HlGSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mYzli
ZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3ODExNzg5OGMvMjcxOWExMzktZjBhYS0z
YzdiLWI0ZTUtMTE0YmQ0MDIwODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmM5YmQ2ODQtODgzYi00MWI4LTk4
OTAtOGNkNzgxMTc4OThjL2ZjOWJkNjg0LTg4M2ItNDFiOC05ODkwLThjZDc4MTE3
ODk4Yy5jcmwwHwYDVR0jBBgwFoAUUaHv6hItj28wFZq7IItgmAGJg3gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mYzliZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3
ODExNzg5OGMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFi2hgAwQF
i2jAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEDiDiWtDdTbsD6pKIqiqPH9TCWQ0T7/NRZZpn561c1boF22
hWU55q7fJcRtXfYaE0hzabEZlO7LV0HSl2vp3XoIyOmNnrb20/dQvw7qnFOXsQhj
BujV35jZlIOEvQJm8/lRn+5HtA9UjpNXkChAZ8JX56gMuz7glgpQmPLmWgqVAdxE
YDxu/NsTPlTjuKmQi6HMM+YQDN0PDuTBS04nAMPH7WTLN0EKJkvU7kqaC5ZVcioG
xaxBnwVC+IxT2yoJLCQtMqxUt2rLez79fxrbFZXE6YvlKURS6gIiaU3qfA0w/due
Y5RvqIIzM7MpWd79msNS8mguKljSWEJi6Rfhf/Y=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:33 2025 by rpki-client