Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e650ec6f-555a-3073-8abb-72c4f3d294dd.roa
File:                     e650ec6f-555a-3073-8abb-72c4f3d294dd.roa (raw, json)
Hash identifier:          piI0L2kzNo4nM5+WFs/jyzxOGN84gHDb5+oeKi8dW1w=
Subject key identifier:   EA:F3:FA:CA:BE:55:DC:9D:C3:CF:B6:28:84:7B:BB:65:FC:20:47:C9
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584AC2E0E9750F8BEBC9F1339C00
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e650ec6f-555a-3073-8abb-72c4f3d294dd.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     14297
IP address blocks:        139.131.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:e9:75:0f:8b:eb:c9:f1:33:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=f091246c-83f9-4170-a075-d1a2ddf7f9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:aa:6f:7a:80:e3:f0:10:da:de:ff:df:7f:
                    32:9e:ee:14:7d:4c:a1:ab:4a:65:20:f7:7d:65:cc:
                    64:f9:c2:b1:56:9a:34:20:8b:9e:a8:2e:1e:73:8c:
                    e2:43:e0:9b:05:db:4b:e1:51:c2:4e:89:af:77:89:
                    19:99:10:43:6e:93:16:40:a8:71:59:96:11:b4:15:
                    a0:9f:e8:f9:d6:dc:7b:74:a8:fc:47:de:a9:8f:c9:
                    09:e8:0b:f3:53:33:74:b8:17:cc:d3:de:47:6c:93:
                    25:c1:e0:fe:93:76:07:6b:bd:e6:ce:86:07:e3:28:
                    6c:3f:ef:a4:a9:d5:be:1d:ed:cd:c3:f2:5f:30:ef:
                    6a:b1:c2:ec:f9:b2:fe:92:29:c2:c6:28:1b:c0:6d:
                    d5:7a:84:86:af:c3:94:e1:09:df:c3:0d:6e:de:04:
                    f0:3b:12:f7:c0:2f:d4:78:29:81:e4:ba:90:5e:7a:
                    d5:52:37:3b:10:1a:ea:52:67:6c:2e:5b:a9:c9:34:
                    59:22:f8:f6:2e:b1:d9:e2:b1:1a:26:2e:af:cb:6c:
                    36:d1:c8:9a:bf:ca:3c:51:c0:b7:19:b6:ee:b1:71:
                    5a:4e:cb:3b:54:e3:e3:f1:a9:2a:a1:7f:3c:72:bb:
                    ec:c3:18:8e:49:d2:09:32:0c:bf:c3:da:39:7a:95:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F3:FA:CA:BE:55:DC:9D:C3:CF:B6:28:84:7B:BB:65:FC:20:47:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e650ec6f-555a-3073-8abb-72c4f3d294dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:3e:5d:eb:25:a3:e2:db:4d:ae:53:77:10:5c:c2:72:f1:22:
         74:38:cc:4c:59:f4:6a:eb:33:6f:85:81:90:bc:f9:e3:c0:6c:
         44:55:3e:71:bf:cd:9c:08:44:10:aa:33:d0:4b:e9:aa:93:53:
         ce:6b:6b:46:a3:a9:32:d4:29:b5:1a:55:73:6e:d7:ab:d6:f3:
         31:51:47:70:a6:05:e2:ad:f4:95:59:bd:08:63:79:e8:a5:39:
         2a:21:00:99:2f:64:66:64:4c:63:54:fc:34:57:df:a7:3a:17:
         f2:2d:78:8b:8d:f7:36:2f:08:96:20:37:6a:e7:df:76:89:38:
         fe:af:e1:f0:d5:2b:ba:48:f4:8d:77:3f:98:1f:e3:ab:8e:75:
         dc:b5:23:b3:63:3c:4f:bc:e7:7b:4b:c1:f6:22:20:10:e5:5f:
         7f:e5:f6:60:5d:63:71:de:07:6e:31:13:06:43:c1:77:e4:b7:
         07:98:d5:32:86:de:85:40:4a:ad:17:f1:a0:24:28:55:ee:56:
         f8:01:ec:29:32:e0:4f:fe:b9:31:33:3b:59:9c:66:e1:77:87:
         b9:28:28:ed:45:7b:c9:db:bc:2f:48:43:fa:8d:5d:9e:a6:ce:
         c9:63:83:df:e3:b6:88:df:8f:48:37:f6:19:37:8e:ca:81:5c:
         a9:8e:31:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Ol1D4vryfEznAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
ZjA5MTI0NmMtODNmOS00MTcwLWEwNzUtZDFhMmRkZjdmOWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVyqb3qA4/AQ2t7/338ynu4UfUyhq0plIPd9
Zcxk+cKxVpo0IIueqC4ec4ziQ+CbBdtL4VHCTomvd4kZmRBDbpMWQKhxWZYRtBWg
n+j51tx7dKj8R96pj8kJ6AvzUzN0uBfM095HbJMlweD+k3YHa73mzoYH4yhsP++k
qdW+He3Nw/JfMO9qscLs+bL+kinCxigbwG3VeoSGr8OU4Qnfww1u3gTwOxL3wC/U
eCmB5LqQXnrVUjc7EBrqUmdsLlupyTRZIvj2LrHZ4rEaJi6vy2w20ciav8o8UcC3
GbbusXFaTss7VOPj8akqoX88crvswxiOSdIJMgy/w9o5epUFvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOrz+sq+Vdydw8+2KIR7u2X8IEfJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZTY1MGVjNmYtNTU1YS0z
MDczLThhYmItNzJjNGYzZDI5NGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDi4NAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0+Xeslo+LbTa5TdxBcwnLxInQ4zExZ9GrrM2+FgZC8+ePAbERVPnG/
zZwIRBCqM9BL6aqTU85ra0ajqTLUKbUaVXNu16vW8zFRR3CmBeKt9JVZvQhjeeil
OSohAJkvZGZkTGNU/DRX36c6F/IteIuN9zYvCJYgN2rn33aJOP6v4fDVK7pI9I13
P5gf46uOddy1I7NjPE+853tLwfYiIBDlX3/l9mBdY3HeB24xEwZDwXfktweY1TKG
3oVASq0X8aAkKFXuVvgB7Cky4E/+uTEzO1mcZuF3h7koKO1Fe8nbvC9IQ/qNXZ6m
zsljg9/jtojfj0g39hk3jsqBXKmOMQU=
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:46:51 2025 by rpki-client