Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/c13dba69-5578-3a01-b3d5-6497abf84b01.roa
File:                     c13dba69-5578-3a01-b3d5-6497abf84b01.roa (raw, json)
Hash identifier:          lJARPcX858k4gfpv9sEpj+wVOTKPLGk1uPPFogaEAWo=
Subject key identifier:   24:81:B7:9A:42:D9:0C:89:F1:9B:BB:9B:DC:C7:97:E5:54:1A:F8:DF
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584A3A15838A183D1BE6C94B14C0
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/c13dba69-5578-3a01-b3d5-6497abf84b01.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     35847
IP address blocks:        139.94.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:83:8a:18:3d:1b:e6:c9:4b:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=7c8649e1-635a-4c27-9c60-68a0253df710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:5f:5c:ab:19:39:bb:8f:73:cb:82:7f:38:
                    0a:f0:c8:4e:db:5c:64:b0:8d:f2:e8:63:61:83:db:
                    c4:f3:85:1e:ef:72:88:df:b7:bc:9a:43:d9:e0:ad:
                    8b:85:c8:fd:2b:4d:a1:95:58:b4:b9:22:a7:e8:ba:
                    54:d2:f8:ee:b7:07:55:6a:ec:9e:cc:2b:c8:f4:83:
                    d7:46:9b:78:0a:6c:a8:0f:0a:a5:b7:43:cc:88:37:
                    d0:4e:35:07:7c:f2:c8:a9:77:6f:97:c8:1b:fe:b5:
                    a3:ea:ad:aa:c4:29:1a:eb:f9:d4:d1:75:f2:3f:46:
                    d7:5d:11:c8:df:9e:98:22:73:af:21:db:97:12:42:
                    a7:60:b5:47:ba:2c:0c:55:b8:c2:d3:59:64:28:02:
                    bb:ae:19:1b:05:ad:2d:9d:ff:c1:3e:39:f9:4e:9e:
                    05:dd:64:c0:5d:5f:ce:96:57:51:0b:6c:6a:64:c3:
                    83:3b:ea:d0:8d:42:a4:c5:95:34:dd:c8:cb:2d:5d:
                    37:a3:b2:73:dd:80:6b:be:ba:d5:cb:c4:09:94:48:
                    91:89:3c:e0:ba:54:9e:76:20:4f:19:83:88:b6:eb:
                    44:64:fc:89:da:ef:a3:59:f9:8b:42:d1:83:de:9f:
                    b6:6f:b4:fc:a9:98:e9:ba:6f:00:3a:ef:17:09:0b:
                    9d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:81:B7:9A:42:D9:0C:89:F1:9B:BB:9B:DC:C7:97:E5:54:1A:F8:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/c13dba69-5578-3a01-b3d5-6497abf84b01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:e2:1e:6f:43:e3:fc:b3:13:66:31:fd:72:c4:66:2c:9f:9e:
         20:04:7b:ae:2e:1a:dc:ef:40:33:79:65:61:0d:68:50:50:9b:
         38:0a:44:13:4d:f0:c6:e6:ce:d3:33:e2:3c:8b:bd:4b:46:3d:
         f6:4d:d5:32:27:ea:d2:06:5a:11:00:ca:9f:ed:da:a4:e9:6c:
         53:53:d6:88:16:44:5d:de:cd:2a:96:9b:6b:c2:57:07:66:8a:
         60:67:05:2a:a5:a9:b4:06:6f:3c:b5:9b:2a:c7:0a:c0:8b:ad:
         02:f9:13:9b:0c:67:7d:57:78:96:c6:23:54:ac:58:99:1a:f4:
         cd:13:07:58:61:86:a0:a8:49:7e:b6:05:01:05:1b:66:1d:27:
         c8:2c:fa:35:a5:c9:bc:29:ba:5e:15:0a:d8:f2:cd:89:07:e7:
         2a:69:92:3e:1f:9f:74:f0:8d:a8:4e:02:98:cf:a8:74:63:fb:
         3d:26:28:a3:e9:5c:f7:a8:4e:fe:6e:4e:60:59:48:72:f3:2c:
         6f:25:85:6f:61:eb:0e:a6:5d:55:d7:8d:cb:82:99:60:56:45:
         89:44:1d:52:c4:4d:f7:d7:37:73:01:44:7c:94:ec:6c:3b:59:
         2c:20:b8:bb:ad:0f:df:fb:86:6b:7a:99:98:ff:1c:58:6f:92:
         4a:0d:fe:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:39:12 2025 by rpki-client