Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/33eb63b4-bd21-319c-9e01-dfd209833ce2.roa
File:                     33eb63b4-bd21-319c-9e01-dfd209833ce2.roa (raw, json)
Hash identifier:          sVF03tXjPecgqz1HzZTK03ObOqZMjoogHjjMuv86Cqg=
Subject key identifier:   85:24:CE:58:C6:DB:3F:39:DD:B0:2B:A6:AE:62:3D:E7:D2:10:C3:D1
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584AC2E0DA307C2DE2826E39D920
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/33eb63b4-bd21-319c-9e01-dfd209833ce2.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     14297
IP address blocks:        139.131.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:da:30:7c:2d:e2:82:6e:39:d9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=a6d74d27-72f3-4c15-a093-d79e48a4cb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:ad:8f:10:f1:ea:5a:9b:01:e3:e4:56:28:
                    ff:d4:e1:1b:a0:a7:05:dd:ef:98:a6:0e:92:85:61:
                    b4:b0:82:41:26:05:3e:be:50:bf:18:3f:e9:23:76:
                    9f:df:2d:c6:67:d8:bd:a3:4a:b5:da:47:61:da:c0:
                    65:4a:b4:59:b6:14:95:90:e4:6d:5e:71:51:26:23:
                    13:5b:02:54:b9:4c:b5:1c:79:39:a3:9a:d8:e7:67:
                    81:29:2a:4c:15:11:0d:62:de:83:ad:99:de:b8:f6:
                    e3:a7:51:71:b3:a6:18:07:41:18:24:0a:4c:19:a3:
                    3f:77:a4:1b:19:06:08:37:d2:4f:d1:52:4e:92:8e:
                    48:cc:65:61:11:1c:a4:4b:ca:15:95:88:71:8b:db:
                    c1:7d:5a:e4:e1:ee:f1:07:a3:d6:b2:df:11:76:61:
                    f6:81:51:4b:d1:91:dc:5b:6e:13:2d:5a:f1:64:38:
                    aa:12:3d:59:b6:12:d3:81:c2:36:42:8b:17:90:e7:
                    18:60:80:c4:20:7a:ba:a4:c7:57:f0:d0:94:21:47:
                    9b:56:4b:92:72:24:3a:2b:87:12:3b:ba:ca:42:ae:
                    65:98:7b:72:4f:41:15:16:bb:43:57:1f:8e:34:2b:
                    cc:fd:0a:bf:09:d6:54:58:7f:e0:75:83:95:de:2d:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:24:CE:58:C6:DB:3F:39:DD:B0:2B:A6:AE:62:3D:E7:D2:10:C3:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/33eb63b4-bd21-319c-9e01-dfd209833ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:71:da:c6:49:f9:47:27:17:d0:15:c5:5a:65:b4:73:4b:
         b1:19:6d:25:c7:e0:a3:cf:fd:76:35:63:fc:4c:0f:08:63:67:
         9f:1e:a0:48:7a:d2:d0:9e:3f:40:f6:bd:3f:4f:de:24:34:ba:
         7c:db:4c:a6:c6:aa:d6:da:3d:a2:b9:b6:7b:19:cc:fd:b9:47:
         61:63:ad:50:4d:62:6a:bb:9e:3a:a7:a3:17:bf:41:6d:73:33:
         e3:61:b6:34:3b:ad:ec:1f:65:47:d8:e3:9a:ee:e4:dd:6e:4b:
         6d:0a:2d:e6:0a:dd:43:f1:ea:ef:7e:95:52:3d:0a:63:3a:fd:
         fe:6c:8f:bd:64:d5:4e:55:4a:8d:f6:8b:6b:92:31:ba:66:0c:
         95:40:d7:a6:4e:cb:99:de:77:aa:01:7a:84:62:79:2f:f3:0f:
         f1:a9:cb:75:1d:d0:35:6a:4f:0a:b3:ac:3f:9f:d8:c2:bd:df:
         42:2d:08:a2:c2:50:92:0e:eb:56:44:30:8c:51:26:38:81:4f:
         cd:bd:f7:48:ec:d5:db:53:c9:84:8a:a4:f1:e1:4a:91:17:30:
         2d:3e:1f:43:d5:48:da:6d:c7:34:9d:d5:15:62:cc:15:fa:ca:
         e5:7f:b1:bd:3b:d5:6d:c8:77:2f:7a:bc:22:b0:fe:ad:ba:04:
         ca:5a:e1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:27:59 2025 by rpki-client