Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/76c36af7-77f3-3e0e-87df-87813161c189.roa
File:                     76c36af7-77f3-3e0e-87df-87813161c189.roa (raw, json)
Hash identifier:          TdIA7I4noEodpeFsSbJa1F09LoRm1BqtT3Ahy6JxFlI=
Subject key identifier:   71:6A:5E:70:07:2F:BD:9C:EE:0B:FE:57:D9:95:7D:4B:62:E3:3E:30
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F4328584AE461473DAF86B16980663A80
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/76c36af7-77f3-3e0e-87df-87813161c189.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        139.138.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:47:3d:af:86:b1:69:80:66:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=8b88ad02-fba2-4e40-b4f2-e8b5fffe78ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:07:a4:de:80:8e:65:38:22:dc:45:ec:62:
                    54:fe:a0:ee:53:a8:45:28:07:dc:91:55:92:f1:44:
                    af:2f:17:f0:5c:88:a1:3f:e5:13:7e:2f:91:33:f2:
                    b4:88:30:6d:85:66:6f:e0:fb:db:09:06:9b:b3:01:
                    94:63:c7:9c:f4:78:31:03:27:71:ae:e0:6d:70:41:
                    ef:34:35:a2:e6:c1:1f:e4:b0:2e:14:3b:e8:ba:3a:
                    3b:0a:0e:fa:1e:8f:ac:6c:4f:c4:93:7b:df:33:4d:
                    cf:3c:eb:05:40:aa:72:a6:d3:47:d2:4b:47:51:16:
                    68:01:d1:eb:35:29:5e:29:9e:74:4b:08:13:c3:b4:
                    0c:74:ee:cc:8c:a2:04:f0:09:66:0f:d2:51:b8:82:
                    8d:3b:be:a3:d9:b5:f7:e2:02:85:24:57:33:84:4a:
                    e3:59:72:d3:26:61:43:b5:22:c8:46:6d:c8:b7:ee:
                    4f:da:cf:65:69:25:5d:b7:81:c7:4e:14:26:b2:42:
                    3c:55:4e:3b:ef:42:66:e4:f2:a9:2a:b0:da:2d:89:
                    0d:65:3f:0b:49:4f:f2:d9:12:34:de:12:9c:ac:d8:
                    b7:7d:ca:10:54:b2:b9:96:1d:11:45:ea:b1:16:83:
                    8b:0c:8c:6d:52:64:9a:68:ac:9c:84:d4:bf:bb:8a:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6A:5E:70:07:2F:BD:9C:EE:0B:FE:57:D9:95:7D:4B:62:E3:3E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/76c36af7-77f3-3e0e-87df-87813161c189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:da:34:98:20:81:e1:29:a5:46:57:14:4c:ff:f0:cb:75:2a:
         d3:c0:bc:e4:1c:7c:c5:ce:39:d4:bb:25:88:a4:ac:c9:27:34:
         22:85:f5:dd:38:ec:9f:23:ec:db:55:b0:a9:26:3a:a0:d6:27:
         ff:cd:05:55:7c:a0:23:da:a9:34:4a:12:04:07:32:c0:8d:bb:
         67:d4:40:57:30:2e:f7:fc:bd:e0:9d:8b:74:bf:f4:34:d5:c7:
         ab:0a:83:3c:91:a2:8e:12:dd:96:36:34:ee:44:8d:73:f7:62:
         85:27:7f:2d:91:27:f8:4d:a4:cc:cb:fe:04:b2:28:96:4d:1d:
         87:a2:04:2c:65:6b:47:c2:ba:64:aa:a8:d9:2c:64:45:4d:75:
         d8:00:d3:76:ad:37:20:cd:36:8e:d1:80:72:2b:67:c9:cf:14:
         f9:63:eb:30:a9:83:c6:2d:27:63:65:e5:18:a4:5b:a1:f4:9c:
         f1:e7:e5:8c:b3:8b:7a:0c:e2:d1:0f:09:c6:31:a6:2b:8c:b1:
         1b:61:67:21:33:1f:84:d8:f4:9a:3a:28:2d:c4:5e:c9:2f:cd:
         cf:c8:32:5e:3f:55:f7:9b:6c:c7:d4:14:df:53:6f:cc:9d:10:
         b8:cc:4f:96:ac:dd:ac:82:1e:af:f5:90:c7:28:37:52:31:d1:
         94:a4:96:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUc9r4axaYBmOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDQ1ZWRmZjEtMzYwZC00YWUyLWEwNDUtY2NmN2RiYzRi
ZWViMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk
OGI4OGFkMDItZmJhMi00ZTQwLWI0ZjItZThiNWZmZmU3OGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgIHpN6AjmU4ItxF7GJU/qDuU6hFKAfckVWS
8USvLxfwXIihP+UTfi+RM/K0iDBthWZv4PvbCQabswGUY8ec9HgxAydxruBtcEHv
NDWi5sEf5LAuFDvoujo7Cg76Ho+sbE/Ek3vfM03PPOsFQKpyptNH0ktHURZoAdHr
NSleKZ50SwgTw7QMdO7MjKIE8AlmD9JRuIKNO76j2bX34gKFJFczhErjWXLTJmFD
tSLIRm3It+5P2s9laSVdt4HHThQmskI8VU4770Jm5PKpKrDaLYkNZT8LSU/y2RI0
3hKcrNi3fcoQVLK5lh0RReqxFoOLDIxtUmSaaKychNS/u4pSlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFqXnAHL72c7gv+V9mVfUti4z4wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80NDVl
ZGZmMS0zNjBkLTRhZTItYTA0NS1jY2Y3ZGJjNGJlZWIvNzZjMzZhZjctNzdmMy0z
ZTBlLTg3ZGYtODc4MTMxNjFjMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDQ1ZWRmZjEtMzYwZC00YWUyLWEw
NDUtY2NmN2RiYzRiZWViLzQ0NWVkZmYxLTM2MGQtNGFlMi1hMDQ1LWNjZjdkYmM0
YmVlYi5jcmwwHwYDVR0jBBgwFoAUALfGp0iKEmAtlAFMsF6IiFiwUZ8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80NDVlZGZmMS0zNjBkLTRhZTItYTA0NS1jY2Y3
ZGJjNGJlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4pgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDaNJgggeEppUZXFEz/8Mt1KtPAvOQcfMXOOdS7JYikrMknNCKF9d04
7J8j7NtVsKkmOqDWJ//NBVV8oCPaqTRKEgQHMsCNu2fUQFcwLvf8veCdi3S/9DTV
x6sKgzyRoo4S3ZY2NO5EjXP3YoUnfy2RJ/hNpMzL/gSyKJZNHYeiBCxla0fCumSq
qNksZEVNddgA03atNyDNNo7RgHIrZ8nPFPlj6zCpg8YtJ2Nl5RikW6H0nPHn5Yyz
i3oM4tEPCcYxpiuMsRthZyEzH4TY9Jo6KC3EXskvzc/IMl4/VfebbMfUFN9Tb8yd
ELjMT5as3ayCHq/1kMcoN1Ix0ZSklvE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:25:02 2025 by rpki-client