Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a96ca553-25fb-3d69-8e2e-f1c813e78eb8.roa
File:                     a96ca553-25fb-3d69-8e2e-f1c813e78eb8.roa (raw, json)
Hash identifier:          BxONq2LrRM80u0LsbV0OVhdaQjWT7Sp0agA//Tyqf2o=
Subject key identifier:   3C:A9:F2:72:E1:12:4D:C3:65:C4:BF:DB:8C:E8:32:E8:6B:27:18:AA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1965A89E7ED6E430AD34680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a96ca553-25fb-3d69-8e2e-f1c813e78eb8.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        139.142.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:5a:89:e7:ed:6e:43:0a:d3:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=ef38b1c9-de06-462d-943e-73e93db8b0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ff:4d:f6:a5:02:fd:d8:ed:ee:95:46:02:55:
                    02:5e:be:ad:87:d1:8e:2d:be:a1:55:3e:d9:e2:2c:
                    f1:29:9e:5b:7a:04:6e:c7:23:61:94:d7:39:1b:2e:
                    d3:bd:b5:20:ec:0d:c5:45:e1:49:b5:d9:3f:5e:3a:
                    7d:f2:cd:ed:c9:a1:05:69:ef:f7:eb:74:cc:db:43:
                    d3:27:65:bb:6e:c7:ba:33:c7:a9:e1:6f:70:13:8b:
                    ce:20:d6:da:ed:12:9b:8e:d4:5f:75:fd:a5:b5:93:
                    3c:d5:24:7e:60:24:2c:c0:41:8d:66:d9:ec:5b:8c:
                    95:fc:1e:b9:ac:71:46:b1:76:a5:ea:10:c4:e4:de:
                    d7:07:5f:c4:f8:67:74:aa:72:c8:d4:b6:fd:cf:6b:
                    c8:8b:e2:fb:57:e2:10:3b:60:b3:31:e3:f8:51:2e:
                    a3:27:4b:96:69:57:ce:87:3d:86:4c:8d:93:f6:b0:
                    1d:cb:a6:94:98:99:2f:6b:de:57:a2:75:c6:aa:e1:
                    3c:0e:d4:9d:ad:31:79:15:0b:98:80:90:c5:42:4a:
                    9c:b7:f4:49:1e:01:9c:17:bb:78:a6:06:87:35:ae:
                    8f:87:59:89:fb:e6:f0:70:00:1c:3c:b0:7e:7f:c0:
                    f4:fb:dc:df:d6:20:99:b6:e5:80:0e:c4:65:c7:9b:
                    f8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A9:F2:72:E1:12:4D:C3:65:C4:BF:DB:8C:E8:32:E8:6B:27:18:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a96ca553-25fb-3d69-8e2e-f1c813e78eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:d1:aa:ea:c9:cc:0f:84:2a:0f:89:70:b2:05:71:7a:13:
         7e:d8:09:d4:52:23:78:f8:79:ff:97:d1:2c:eb:7c:f7:01:c4:
         0c:7a:f3:c8:02:61:db:0c:27:b7:b8:4d:0e:b6:39:47:76:2d:
         de:0a:b4:20:08:e7:05:31:2e:3d:2d:8c:cd:ae:7f:45:a8:3e:
         01:bd:db:be:50:c7:f5:05:48:6b:76:e1:51:77:56:82:ef:f5:
         f7:31:ac:96:f9:cc:80:71:40:8c:57:ac:a9:30:aa:12:25:97:
         33:95:3c:2d:c1:05:83:db:fb:b3:53:3a:a4:81:d3:62:4a:61:
         85:ea:7a:f4:17:ce:3d:95:f5:2e:f6:c8:1c:5c:0e:56:ad:ee:
         b6:c6:51:5d:8a:0d:3a:f1:d4:b7:6c:f7:da:cf:a2:f5:19:0e:
         b2:e3:fc:79:59:16:03:ff:16:64:52:b5:3d:15:7a:84:35:8d:
         ab:79:41:fd:11:4c:bb:b8:7b:1b:e3:e9:81:96:7c:0e:a8:73:
         e1:0c:e0:2d:d7:e6:ae:c0:40:b2:f3:e4:2c:84:f9:46:0c:ea:
         0e:ce:3e:22:d4:50:b0:13:67:e1:65:53:fd:03:40:e3:84:6a:
         81:b3:b4:08:b4:0f:17:d6:be:0d:a4:35:2e:d0:96:c9:79:6a:
         7e:2c:e8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:41:50 2025 by rpki-client