Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/71a3e12f-fbf7-3372-a45d-b1090c83489c.roa
File:                     71a3e12f-fbf7-3372-a45d-b1090c83489c.roa (raw, json)
Hash identifier:          xihCowztuWCJwX58RPJwYnidQtcfMqKwprftfen/q7E=
Subject key identifier:   73:25:75:A9:37:30:A7:E9:B5:5D:76:55:C7:77:75:A8:18:60:5F:A7
Certificate issuer:       /CN=7a9c27a4-fe2b-4b21-8288-edfc10a93f26
Certificate serial:       010D0C9F4328584ADD6681CC5BF221C7D4B541F0
Authority key identifier: 73:E8:E1:8C:A8:F6:D1:73:1B:9A:33:F4:4B:9A:06:75:66:96:1E:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/71a3e12f-fbf7-3372-a45d-b1090c83489c.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     15026
IP address blocks:        139.61.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:81:cc:5b:f2:21:c7:d4:b5:41:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a9c27a4-fe2b-4b21-8288-edfc10a93f26
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=13ff6402-e8c1-4173-a4cc-e3814f1b7d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6b:b5:43:04:6a:b5:8c:b6:16:25:10:f1:e4:
                    6c:d7:10:bc:e5:e3:17:da:9e:9d:da:f6:a9:d4:be:
                    11:83:68:54:fa:7b:d0:23:15:3a:6d:35:e2:f7:22:
                    a8:20:7b:fa:bb:c3:f4:73:7c:2b:64:03:b0:00:d5:
                    dd:79:08:7c:50:ce:06:ee:d4:14:4d:3b:32:8a:e2:
                    d9:db:0c:80:14:a6:55:b1:a6:78:ce:97:2a:17:3f:
                    3e:c4:dd:a3:58:15:1d:64:3c:15:ca:3d:70:e7:04:
                    cd:82:66:c6:32:ac:ab:24:9c:ec:f3:fa:c5:e4:06:
                    de:ca:83:50:8b:bd:12:2d:05:c6:2f:fd:1d:7c:7f:
                    fa:00:a6:04:9d:97:de:c7:4d:3f:77:64:d6:ce:d2:
                    43:94:51:3f:93:56:fa:96:a0:99:f0:a2:74:d3:fb:
                    87:e5:73:ba:64:0d:b8:bd:ab:0f:3b:2e:05:61:cf:
                    03:87:2c:b9:f9:9c:e5:24:ac:10:86:f1:62:03:4e:
                    2b:16:f7:6d:ff:84:c0:74:78:2e:c6:ef:f4:55:ac:
                    9a:ee:23:ad:1f:cb:02:fd:56:dd:d1:2c:65:66:7d:
                    2e:17:4d:ee:62:15:a8:bb:92:27:4a:b7:7c:75:0b:
                    ca:7c:73:f9:42:1d:1e:61:97:55:2b:71:a1:3d:6a:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:25:75:A9:37:30:A7:E9:B5:5D:76:55:C7:77:75:A8:18:60:5F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/71a3e12f-fbf7-3372-a45d-b1090c83489c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.crl

            X509v3 Authority Key Identifier:
                keyid:73:E8:E1:8C:A8:F6:D1:73:1B:9A:33:F4:4B:9A:06:75:66:96:1E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.61.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ea:f5:a0:45:3d:27:c2:6e:f4:1f:cf:a7:4c:6e:b3:eb:50:
         ed:c1:95:17:e7:96:4a:32:b2:38:61:21:1a:aa:49:c1:4a:fd:
         69:05:12:03:14:6d:98:34:57:c2:ea:26:d9:fe:c0:1c:5b:82:
         19:61:f8:d6:a2:0a:99:9d:d5:01:cf:d8:64:f7:d8:9c:06:d2:
         a8:e6:d7:d3:c1:95:34:f2:54:46:4a:6f:e5:92:27:55:1f:b2:
         bc:85:de:b3:e2:30:ad:a0:fd:3b:e4:f0:54:ea:56:67:0f:a9:
         b3:20:10:97:80:83:78:09:3e:b3:0d:50:b5:69:13:b1:e5:04:
         8e:df:f2:b8:90:a5:0d:eb:cf:e2:7a:e3:fc:7e:59:60:d1:a6:
         83:d5:c9:ce:6d:18:a4:c0:0b:87:ec:00:e0:6f:3a:c2:9a:95:
         a2:7e:a0:2b:41:e2:cd:2c:e4:46:3a:6d:6c:7c:4a:90:66:79:
         9d:87:9b:39:36:68:26:e1:f7:a0:96:15:f5:d1:b7:61:b6:e7:
         eb:8d:64:db:47:fd:cd:35:ab:87:99:02:bf:cc:c2:2f:ff:7f:
         03:48:af:18:82:c9:aa:9f:7f:5f:43:d7:43:b7:2d:fd:aa:06:
         0d:03:b9:51:14:27:05:2d:46:74:fa:15:42:aa:1f:a2:92:a2:
         61:55:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:55:08 2025 by rpki-client