Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/757db988-b3f6-35bd-bf19-c861e85bf57a.roa
File:                     757db988-b3f6-35bd-bf19-c861e85bf57a.roa (raw, json)
Hash identifier:          GC8obG6JTdU5rK724Q1ZmugKVM7EzZg9e/q5o3aWvPI=
Subject key identifier:   78:BB:BF:2A:DE:83:B4:BA:D8:69:66:9E:49:98:0D:F9:60:11:A2:4F
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F4328584B1AD17EFBD4340C01F67C9B80
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/757db988-b3f6-35bd-bf19-c861e85bf57a.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     5788
IP address blocks:        139.173.72.0/21 maxlen: 24
                          139.173.80.0/21 maxlen: 24
                          139.173.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:7e:fb:d4:34:0c:01:f6:7c:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=aa76412a-917b-4f4d-af55-8e0909aafd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:61:bd:62:67:38:4b:a9:28:96:d8:ff:67:
                    80:97:b2:fd:3f:a6:ac:33:09:0a:d5:0d:58:d3:cb:
                    61:fd:4b:bf:51:1a:9c:46:db:a7:ef:45:04:ae:06:
                    8f:89:6b:d4:d5:25:3f:c5:c6:f7:87:a7:d8:3d:af:
                    f6:62:e9:17:d5:2b:36:d2:a1:0e:0b:07:5e:24:9f:
                    c1:c9:e4:54:c8:c5:7c:85:79:73:21:a0:f2:9c:32:
                    3b:b7:1b:c6:cb:62:e5:42:33:6c:fb:f7:56:e0:72:
                    2b:00:da:06:2c:05:e2:4e:ab:fe:04:4f:8f:b7:ee:
                    7a:18:a5:95:8a:81:99:b6:bc:b4:6c:10:6e:01:16:
                    d2:a3:d7:a3:eb:ea:f9:59:80:29:f7:2b:8f:bf:a1:
                    c4:c8:3c:91:88:ff:3a:56:4a:10:4f:c9:74:38:3a:
                    28:d9:cf:1b:68:09:7a:ab:f2:86:3a:b8:9b:79:5f:
                    43:57:4c:60:b9:a7:c5:35:aa:2c:ed:bd:25:05:b5:
                    9a:9f:e3:24:ca:cc:a7:95:24:2c:43:80:3e:a9:34:
                    6c:a2:52:b6:1c:a2:ad:9f:c5:e7:10:f2:97:55:48:
                    6a:3c:52:a0:83:b2:35:53:51:4e:c4:d1:db:a4:30:
                    d2:1a:9a:e2:b2:93:85:16:2c:10:be:0e:89:fd:ef:
                    89:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BB:BF:2A:DE:83:B4:BA:D8:69:66:9E:49:98:0D:F9:60:11:A2:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/757db988-b3f6-35bd-bf19-c861e85bf57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.173.72.0-139.173.87.255
                  139.173.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:8e:84:b5:4f:90:da:a9:2e:cb:df:28:89:62:75:c3:e8:a5:
         03:86:8d:1e:61:f3:34:d4:3f:5e:94:bf:9b:42:58:1e:98:13:
         c9:e6:d4:42:94:15:86:41:30:04:5a:61:f7:49:cf:e4:d9:3a:
         4c:fc:1d:70:b0:21:73:3f:08:eb:fa:c6:31:5f:31:2f:d8:7b:
         06:28:fd:42:dc:5a:56:f4:e8:4f:91:5f:96:79:e1:06:4f:0d:
         10:65:da:f9:aa:49:16:01:02:3e:06:df:af:c7:9d:f7:bf:89:
         e4:3e:76:89:2b:15:81:35:fa:1b:10:68:98:ca:52:02:53:57:
         b6:7e:cc:80:f4:8b:e2:58:03:6d:81:d1:6e:24:67:0e:3e:16:
         26:dd:69:80:8a:9a:45:de:f6:cc:49:44:b9:71:0a:a3:a9:ed:
         d2:8d:1b:02:a0:4d:97:0e:bc:7f:66:3f:ca:b6:6e:0e:66:ae:
         46:78:5c:36:e3:22:60:29:ed:bc:a3:af:c9:ca:bf:58:a9:4b:
         45:8a:f9:30:db:c3:c0:59:a6:1a:d3:58:a6:43:d2:5b:13:70:
         08:97:2d:73:6e:5a:4c:20:fc:ef:cd:92:1c:d7:47:8f:af:40:
         82:c0:bd:f8:9c:e5:b9:11:5c:fa:cc:b3:33:40:56:05:3b:42:
         dc:e2:3e:c9
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEsa0X771DQMAfZ8m4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUwMzFhNzAtNmVhOC00NTIxLWFjYmQtMDIxN2FkYTRj
ZjU3MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
YWE3NjQxMmEtOTE3Yi00ZjRkLWFmNTUtOGUwOTA5YWFmZDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryRhvWJnOEupKJbY/2eAl7L9P6asMwkK1Q1Y
08th/Uu/URqcRtun70UErgaPiWvU1SU/xcb3h6fYPa/2YukX1Ss20qEOCwdeJJ/B
yeRUyMV8hXlzIaDynDI7txvGy2LlQjNs+/dW4HIrANoGLAXiTqv+BE+Pt+56GKWV
ioGZtry0bBBuARbSo9ej6+r5WYAp9yuPv6HEyDyRiP86VkoQT8l0ODoo2c8baAl6
q/KGOribeV9DV0xguafFNaos7b0lBbWan+MkysynlSQsQ4A+qTRsolK2HKKtn8Xn
EPKXVUhqPFKgg7I1U1FOxNHbpDDSGprispOFFiwQvg6J/e+JqQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFHi7vyreg7S62GlmnkmYDflgEaJPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NTAz
MWE3MC02ZWE4LTQ1MjEtYWNiZC0wMjE3YWRhNGNmNTcvNzU3ZGI5ODgtYjNmNi0z
NWJkLWJmMTktYzg2MWU4NWJmNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTUwMzFhNzAtNmVhOC00NTIxLWFj
YmQtMDIxN2FkYTRjZjU3LzU1MDMxYTcwLTZlYTgtNDUyMS1hY2JkLTAyMTdhZGE0
Y2Y1Ny5jcmwwHwYDVR0jBBgwFoAUaUC6AnOab36XYxkORGEp6YzixzcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81NTAzMWE3MC02ZWE4LTQ1MjEtYWNiZC0wMjE3
YWRhNGNmNTcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAOLrUgD
BAOLrVADBAGLrfQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAa46EtU+Q2qkuy98oiWJ1w+ilA4aNHmHzNNQ/
XpS/m0JYHpgTyebUQpQVhkEwBFph90nP5Nk6TPwdcLAhcz8I6/rGMV8xL9h7Bij9
QtxaVvToT5FflnnhBk8NEGXa+apJFgECPgbfr8ed97+J5D52iSsVgTX6GxBomMpS
AlNXtn7MgPSL4lgDbYHRbiRnDj4WJt1pgIqaRd72zElEuXEKo6nt0o0bAqBNlw68
f2Y/yrZuDmauRnhcNuMiYCntvKOvycq/WKlLRYr5MNvDwFmmGtNYpkPSWxNwCJct
c25aTCD8782SHNdHj69AgsC9+JzluRFc+syzM0BWBTtC3OI+yQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:39 2025 by rpki-client