Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a964ef0b-f1aa-3607-ada9-c8e0c0c96454.roa
File:                     a964ef0b-f1aa-3607-ada9-c8e0c0c96454.roa (raw, json)
Hash identifier:          lcKRlY1QMVXiNlF5gHgSJ73Y5LKOu0wqfJikYBuWjtI=
Subject key identifier:   EB:33:25:64:AD:04:9D:B5:73:BA:3E:D8:39:92:3D:A7:3D:F5:8E:E3
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584AC2E0EA1C8D4DD6195C04F740
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a964ef0b-f1aa-3607-ada9-c8e0c0c96454.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     14297
IP address blocks:        139.131.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:ea:1c:8d:4d:d6:19:5c:04:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=c3a33318-cab9-47cc-ae16-fe42a3ced5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b7:16:c8:28:9d:c2:0c:1d:91:14:08:53:08:
                    0a:bd:59:21:b0:40:fb:a3:b4:01:1b:83:05:5b:37:
                    6f:8b:9c:9e:4a:6c:1e:cc:49:ca:d7:42:98:9a:ec:
                    06:6d:85:50:f8:e2:da:70:81:2d:a2:19:1f:c7:8f:
                    12:74:94:e9:31:5f:cd:a7:95:7c:18:f2:bd:df:e1:
                    6a:c2:51:46:5e:2c:00:3a:e1:7e:15:07:4b:2a:ba:
                    1c:12:71:bd:7e:16:d6:bb:79:84:8d:7e:58:85:a9:
                    d5:11:27:90:e9:3a:ed:a4:aa:d3:27:d0:94:c5:74:
                    03:20:c1:6b:8f:1d:3f:80:3e:93:b8:a1:d1:35:8e:
                    e2:4a:5a:e9:14:22:ad:ec:b9:2e:c6:c9:2d:74:63:
                    6b:e0:2f:5e:00:e0:8d:eb:e7:9f:a5:c5:4b:db:96:
                    a1:36:d4:e7:36:b8:d8:ca:26:60:3e:52:da:a7:e7:
                    39:02:b7:8b:f2:48:29:0e:02:8b:9e:18:c5:55:e4:
                    ca:9b:6d:b1:ca:f8:0c:9d:38:0e:e9:db:d6:7e:20:
                    64:3d:0c:55:e5:dd:da:cd:9a:fe:c4:c9:ba:90:5c:
                    f4:f6:f2:28:cf:ff:f2:ad:55:7d:bd:27:7b:fc:54:
                    3d:db:c9:68:eb:2b:a5:15:9a:36:54:29:5f:23:1f:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:33:25:64:AD:04:9D:B5:73:BA:3E:D8:39:92:3D:A7:3D:F5:8E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/a964ef0b-f1aa-3607-ada9-c8e0c0c96454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:0a:a2:ea:12:f1:c3:61:c6:8e:27:65:8b:4c:e6:23:35:fc:
         4e:15:1c:9e:17:f7:c7:82:30:71:bc:8a:ed:1e:e0:f8:a3:70:
         38:c6:64:c9:dd:0b:81:82:a3:75:a8:d2:12:6b:31:ba:91:b7:
         5f:e9:fc:08:b9:92:60:92:2f:27:ad:ca:a9:89:4f:18:dc:4c:
         4e:df:cc:f9:1e:71:d8:de:94:2e:3d:89:aa:f7:e6:86:89:ba:
         02:f2:c5:97:f4:e8:42:75:2e:e0:1c:f3:ae:ce:02:27:f4:86:
         ca:f7:29:db:14:a7:1d:55:4d:0a:ca:1d:48:e7:54:27:6f:b7:
         93:6a:5e:d3:41:85:aa:b0:c7:cf:28:37:a9:4a:b6:a3:c5:6a:
         b8:a6:11:28:66:9f:8a:40:3d:6c:f5:6e:d8:4f:bd:0f:a3:ba:
         8f:7c:3e:45:60:29:dd:f1:af:00:c4:51:39:13:18:ac:60:1f:
         01:8e:f0:1b:37:4e:d4:72:19:ee:f1:5e:cb:8b:82:62:32:55:
         82:c7:6a:3c:86:4e:0f:cc:95:af:42:e3:d2:a8:92:3e:2f:31:
         3a:51:19:9c:65:4d:56:51:45:fe:4d:12:c7:da:1d:b6:0a:0e:
         c6:df:07:b6:1b:7e:dd:e0:ad:c4:69:05:9d:4d:ba:82:9c:05:
         d7:9e:33:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OocjU3WGVwE90AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
YzNhMzMzMTgtY2FiOS00N2NjLWFlMTYtZmU0MmEzY2VkNWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rcWyCidwgwdkRQIUwgKvVkhsED7o7QBG4MF
Wzdvi5yeSmwezEnK10KYmuwGbYVQ+OLacIEtohkfx48SdJTpMV/Np5V8GPK93+Fq
wlFGXiwAOuF+FQdLKrocEnG9fhbWu3mEjX5YhanVESeQ6TrtpKrTJ9CUxXQDIMFr
jx0/gD6TuKHRNY7iSlrpFCKt7LkuxsktdGNr4C9eAOCN6+efpcVL25ahNtTnNrjY
yiZgPlLap+c5AreL8kgpDgKLnhjFVeTKm22xyvgMnTgO6dvWfiBkPQxV5d3azZr+
xMm6kFz09vIoz//yrVV9vSd7/FQ928lo6yulFZo2VClfIx95QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOszJWStBJ21c7o+2DmSPac99Y7jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYTk2NGVmMGItZjFhYS0z
NjA3LWFkYTktYzhlMGMwYzk2NDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4P6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK0KouoS8cNhxo4nZYtM5iM1/E4VHJ4X98eCMHG8iu0e4PijcDjGZMnd
C4GCo3Wo0hJrMbqRt1/p/Ai5kmCSLyetyqmJTxjcTE7fzPkecdjelC49iar35oaJ
ugLyxZf06EJ1LuAc867OAif0hsr3KdsUpx1VTQrKHUjnVCdvt5NqXtNBhaqwx88o
N6lKtqPFarimEShmn4pAPWz1bthPvQ+juo98PkVgKd3xrwDEUTkTGKxgHwGO8Bs3
TtRyGe7xXsuLgmIyVYLHajyGTg/Mla9C49Kokj4vMTpRGZxlTVZRRf5NEsfaHbYK
DsbfB7Ybft3grcRpBZ1NuoKcBdeeM9M=
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:29:55 2025 by rpki-client