Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e0379946-4a18-3a0c-a538-1fa6a4f52463.roa
File:                     e0379946-4a18-3a0c-a538-1fa6a4f52463.roa (raw, json)
Hash identifier:          9Bgi0a1IjpZkyeyq+WfcRATpn4tveoHmiVby/olTsHg=
Subject key identifier:   73:F2:06:F1:D3:BD:50:3F:BD:D7:2E:EA:32:E6:FA:79:D5:13:C0:81
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584AC2E0EA09082508577297C040
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e0379946-4a18-3a0c-a538-1fa6a4f52463.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     14297
IP address blocks:        139.131.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:ea:09:08:25:08:57:72:97:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=f7bb999c-fa17-4ca4-965b-74217e4a1e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:de:7f:39:9e:a0:cb:25:22:ee:3a:ae:62:3a:
                    19:ec:9e:33:92:fc:24:38:18:74:83:e0:bc:4c:bf:
                    7d:f0:77:17:d8:de:b0:c0:ff:43:d3:13:2c:cc:24:
                    d2:17:6f:f4:92:ac:0a:5f:e2:a4:63:1f:9a:08:7d:
                    2d:50:f0:16:9f:50:0f:79:09:a4:8a:5f:ba:84:bb:
                    c6:3b:f5:88:f3:c8:92:a6:a4:47:89:60:29:49:59:
                    54:09:68:10:86:2d:e1:b2:2c:1c:e0:4d:78:4d:7f:
                    6e:2e:6e:84:8b:f7:09:54:13:a7:cf:38:e7:c6:bb:
                    da:ff:4c:65:02:52:9b:06:23:b8:92:0a:67:13:70:
                    e3:08:27:9c:e1:40:42:b7:19:82:66:d5:dc:22:94:
                    92:90:1b:46:65:41:eb:ef:be:20:65:5d:49:a8:c0:
                    b0:39:cb:89:25:e4:67:ac:34:00:c0:3c:de:e7:b7:
                    a6:ed:35:eb:6e:87:8e:7e:4d:3e:70:4f:c6:27:20:
                    16:6f:ed:42:e5:00:ea:2a:73:e9:a7:04:4d:41:e7:
                    9f:50:72:52:a4:59:4f:4b:ab:f6:60:a6:96:02:e9:
                    e0:55:2d:26:1e:ba:f5:2e:5e:a0:69:3a:2a:98:42:
                    9b:d8:93:91:9a:df:67:79:5c:cd:bb:0f:67:5b:e2:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F2:06:F1:D3:BD:50:3F:BD:D7:2E:EA:32:E6:FA:79:D5:13:C0:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e0379946-4a18-3a0c-a538-1fa6a4f52463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b6:f7:24:a1:b5:84:e6:fc:f6:3e:6d:a2:b5:f8:21:42:e7:
         42:70:d7:a4:b0:6a:03:55:e8:92:d6:58:7e:fc:08:51:9d:6c:
         35:70:f6:ff:da:37:7e:c4:df:60:04:69:5b:31:96:6e:86:39:
         95:2b:95:58:c9:9f:bc:47:28:5b:8f:71:f2:ae:68:6c:4b:2b:
         69:84:1e:26:f9:3b:4b:f3:b7:24:99:9d:c3:4b:d8:66:fe:26:
         a8:39:e3:26:00:64:42:1c:02:e0:ee:67:a0:e3:ce:7d:d4:fc:
         76:41:04:57:35:5e:c1:e4:20:4d:1e:21:eb:cb:89:62:28:17:
         d5:24:5a:aa:39:03:b7:35:c2:39:3c:09:39:45:94:f6:f9:09:
         cc:d9:1a:65:96:2e:09:dd:c9:cc:f1:ed:27:5d:6a:2d:c5:de:
         3e:1e:c0:c9:42:1c:11:61:aa:b9:2d:57:94:a3:c8:9d:d8:96:
         af:9b:a2:f7:98:70:09:84:2a:68:f9:4f:51:f8:f6:46:3f:2f:
         f3:a6:bc:d0:97:03:10:13:10:95:a0:6a:04:cc:07:0b:89:b6:
         f5:ed:f9:17:21:23:e3:47:ce:d5:17:b0:b2:56:c3:05:25:ae:
         3f:95:82:9c:a7:35:c6:14:9e:5c:3a:88:2a:2f:1f:99:4a:71:
         2f:df:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:21:14 2025 by rpki-client