Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa
File:                     6cf7fe11-676a-30a2-84a3-46c07752a767.roa (raw, json)
Hash identifier:          TRWGd6Aj3awgv5cKnPOGZFOuMCnBubQZED1H7OG5RY0=
Subject key identifier:   44:78:3D:48:F0:44:40:AA:C3:38:98:4A:98:41:18:B4:09:38:26:B2
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584AA42B8B7A7DCA39872A1F2A80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     16417
IP address blocks:        139.138.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8b:7a:7d:ca:39:87:2a:1f:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=fa43ae29-10c1-4dc0-847b-b3edec19de81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c0:e9:eb:6a:1f:57:cc:1f:04:82:d7:1e:55:
                    70:4e:4c:a6:af:28:df:cf:ed:ba:53:c1:5b:ae:8b:
                    d1:51:36:70:01:c6:7f:9d:48:e7:ec:7b:e7:fa:bc:
                    eb:de:c0:be:d1:7c:a4:ee:ab:40:0c:7d:d3:f2:6f:
                    f8:1a:90:69:17:65:f3:e2:c3:34:a9:fa:10:e6:1f:
                    40:cf:50:d1:1c:fa:30:ae:ce:7d:6a:c0:4e:28:d6:
                    4f:17:f6:1b:a7:d3:a6:d2:2b:fe:fe:7e:dd:14:fe:
                    65:7b:01:ef:09:51:86:be:0b:72:f7:3a:44:77:da:
                    de:a3:8b:33:0b:c9:13:d4:84:82:3b:73:d1:0e:be:
                    3c:5f:80:5d:bc:3a:99:2c:01:2f:28:db:b4:24:34:
                    c5:fe:f8:2a:8d:d1:ef:b4:d0:58:8a:1b:2f:b9:63:
                    43:73:04:e7:0b:da:b1:a8:90:c6:0c:43:30:f0:24:
                    d9:4e:41:30:98:c0:86:a8:2b:bc:c7:ed:b8:ce:0b:
                    3f:d2:fc:78:92:54:86:d0:9d:72:a4:27:51:39:60:
                    e3:eb:89:3d:ea:e6:d3:40:b2:65:f5:1b:0a:7d:28:
                    5b:da:ab:99:12:2a:c3:fa:3d:4e:86:31:2e:80:cb:
                    45:89:f6:ff:83:1d:a2:1e:9d:29:5d:0e:59:0e:2e:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:78:3D:48:F0:44:40:AA:C3:38:98:4A:98:41:18:B4:09:38:26:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6cf7fe11-676a-30a2-84a3-46c07752a767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:95:ea:42:18:37:39:45:03:3d:76:18:6c:a6:67:ed:52:7d:
         d2:bc:a2:df:92:23:5d:51:52:5b:89:d7:5b:49:4e:63:65:d6:
         3e:86:e5:c5:ac:86:ec:b8:9f:b5:b9:df:2a:0c:e7:11:61:d5:
         c1:3e:2c:0b:bd:9a:1b:79:7f:69:77:d4:48:dd:55:ed:c3:50:
         74:91:b1:04:3c:00:0c:69:a9:f5:92:48:97:c9:47:83:4c:1b:
         f1:eb:83:7f:a6:c9:79:b9:ec:cb:86:f3:d6:9a:fb:2b:47:3b:
         a4:9e:e5:bf:db:f3:47:d7:68:be:1e:b2:be:23:ae:e3:da:12:
         c5:53:87:48:d3:b0:75:48:22:ab:1b:6f:19:79:da:fb:70:a2:
         93:ee:c1:fb:42:3a:ab:22:2a:0e:43:79:f9:21:0a:c1:8b:5c:
         52:85:dd:14:8f:a5:c9:74:f2:18:c6:b8:ab:6b:b3:4e:27:0e:
         51:e7:03:58:38:5e:36:00:06:a7:69:46:a8:e6:57:4d:b5:13:
         02:99:a1:4f:26:6e:90:e4:2f:e1:ec:8d:f8:07:9f:4b:5b:5e:
         88:a3:43:8a:f2:94:cd:d7:7f:fb:73:cd:f0:55:b5:67:f4:59:
         b1:51:4a:90:24:52:11:9a:a9:2b:05:7a:2d:88:5a:a5:e3:2c:
         b2:89:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:14:40 2025 by rpki-client