Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8d5edccb-a604-3269-b950-73d331fa9d1b.roa
File:                     8d5edccb-a604-3269-b950-73d331fa9d1b.roa (raw, json)
Hash identifier:          Zo0atcuRM97BaEb68fMsZK677+28v7dKNeSfjGi2tas=
Subject key identifier:   71:30:64:A1:80:DC:69:B1:EB:85:EB:2D:F9:4C:37:57:F9:D6:7C:AE
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584AC2E0DA75E64F9A63A8E85F80
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8d5edccb-a604-3269-b950-73d331fa9d1b.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     14297
IP address blocks:        139.131.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:da:75:e6:4f:9a:63:a8:e8:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=2757719b-93d3-4df4-87ff-74f137182954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:f7:31:fb:fb:36:69:b3:6f:04:07:d9:c7:
                    84:1f:13:75:78:e3:21:f8:b9:2d:37:c7:1c:08:6e:
                    08:87:df:a3:85:0f:37:c1:a3:6f:02:9c:c9:3f:79:
                    04:54:44:54:8e:33:b3:05:5f:fb:b2:c6:dc:6b:b2:
                    89:9f:40:c7:ec:78:8a:77:58:45:b1:51:9f:86:0d:
                    78:93:49:6d:8d:e7:85:0b:e8:ea:51:d3:d0:98:08:
                    c3:49:c8:28:dd:79:15:e1:09:c3:f6:f8:96:ca:c2:
                    ac:25:8d:72:dc:77:5f:3d:d9:13:c5:53:35:34:f0:
                    78:23:d5:c8:7c:da:7f:31:4d:9b:a0:6f:e7:a2:68:
                    ca:86:37:e5:ed:8b:77:83:ca:4f:ce:5b:d9:89:86:
                    6f:77:f0:fd:5e:a4:b5:09:f4:cf:6c:25:f2:8a:1d:
                    6c:41:27:04:c2:d8:b1:03:37:74:53:30:2c:70:3f:
                    7e:c3:04:69:fd:b4:c4:13:87:58:51:d9:c0:44:86:
                    ba:71:56:ca:96:9b:e4:70:5b:e9:d7:f9:ac:c5:54:
                    cc:1d:f4:7e:95:e3:f6:4a:64:a0:d5:91:3d:c5:ec:
                    f8:b2:a1:f6:b3:d7:3e:62:33:ab:5f:43:89:d5:d0:
                    26:2d:b0:5c:ba:ac:54:0d:8c:cb:80:21:db:e9:30:
                    ea:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:30:64:A1:80:DC:69:B1:EB:85:EB:2D:F9:4C:37:57:F9:D6:7C:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8d5edccb-a604-3269-b950-73d331fa9d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:df:b2:03:81:7d:dc:70:12:95:0c:a0:b5:9a:62:96:5f:ae:
         ca:f5:a1:33:21:1c:e1:2e:a2:3c:09:cf:1a:e7:24:80:d2:ef:
         c6:4c:62:a0:5d:69:ce:44:36:8c:63:4a:37:a9:13:39:28:18:
         df:55:b6:9c:56:b5:58:78:1a:92:42:1f:46:e6:1d:dc:f6:32:
         82:3c:4b:e6:56:5a:de:34:43:8d:7d:f9:f0:69:2e:71:12:fc:
         f8:38:b4:96:9a:71:aa:af:f8:b4:cc:a7:76:4a:67:98:08:35:
         75:bd:88:42:d2:d9:1c:49:6f:63:cb:48:3d:73:5e:1c:e5:41:
         09:d1:cd:f9:15:a6:f3:60:59:9b:99:cd:bf:9b:6a:02:61:5b:
         4a:ce:0c:6b:77:31:18:b2:de:3b:70:fb:5b:15:03:49:8f:28:
         39:bc:1b:10:3d:aa:5a:19:65:87:bd:5b:73:c0:17:62:7a:b3:
         8a:93:d7:53:4b:fb:5d:29:75:aa:b2:f0:f9:1e:0b:18:09:d2:
         50:35:99:54:b0:f8:ec:6b:87:6b:07:ae:d7:07:81:47:2c:5f:
         59:1c:ca:65:0f:e9:6b:c8:a1:8f:3f:b2:bb:6c:fd:72:fe:70:
         6e:ed:83:e8:56:5d:94:1d:ae:63:16:62:8b:f6:1a:97:7c:fd:
         25:6d:d4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:48 2025 by rpki-client