Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/56d1460e-74a5-38f4-bcda-1e45f2a66969.roa
File:                     56d1460e-74a5-38f4-bcda-1e45f2a66969.roa (raw, json)
Hash identifier:          HPsvhn6VJUoWXM/u9svsNJ7lmXNbicq098izjUHcY2c=
Subject key identifier:   11:38:ED:31:C0:BC:D2:CF:F8:7E:03:8D:71:C0:89:EA:20:B5:E1:12
Certificate issuer:       /CN=21536be2-b559-4b5e-9749-413cb6af0bc1
Certificate serial:       010D0C9F4328584A506AF00F232DF48C86B13D00
Authority key identifier: D9:6F:83:DF:E3:4D:6B:F6:09:48:86:48:C7:34:0C:5D:69:74:69:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/56d1460e-74a5-38f4-bcda-1e45f2a66969.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     31898
IP address blocks:        139.84.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:f0:0f:23:2d:f4:8c:86:b1:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21536be2-b559-4b5e-9749-413cb6af0bc1
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=389da7ff-16ac-4cba-887d-7965b0bfcc19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cf:07:b8:05:d9:c3:da:07:41:a6:4c:6a:38:
                    f6:94:30:8c:24:2f:a1:7a:6b:f4:62:b2:2b:b3:b4:
                    c9:02:03:90:79:04:4d:ca:22:5c:f4:59:7d:c9:12:
                    f6:98:91:df:a0:64:51:01:3a:8e:06:46:69:59:72:
                    39:22:4b:31:2e:7b:9a:bb:5d:84:f7:72:7d:d3:4c:
                    1a:73:35:87:f7:21:82:f3:a8:e4:83:71:49:de:01:
                    10:4d:31:71:44:a5:b1:fa:64:dd:3e:e1:2a:0f:58:
                    b9:74:85:16:18:d7:5f:fe:c6:7d:6a:2f:27:7b:57:
                    e9:68:43:1b:d3:6c:ca:3d:1b:1d:82:53:68:bf:6f:
                    1a:90:2e:af:f0:00:f1:79:56:2f:01:7a:81:54:c0:
                    f8:14:25:13:85:dc:a3:3d:5a:f9:5c:68:08:b1:f0:
                    e1:c8:aa:28:dc:4d:ee:89:c7:4c:84:c5:41:96:49:
                    0f:f3:6b:a6:33:e7:59:7e:e1:da:2d:5a:57:74:bf:
                    ec:25:bc:b6:15:08:fe:4e:55:1a:39:ce:fe:fa:8c:
                    1e:2a:05:e5:04:14:1a:54:3e:db:92:f6:e3:07:76:
                    5d:13:93:3f:f0:3e:d3:d7:11:99:68:3c:19:e0:f8:
                    c8:49:a5:0b:84:85:71:ad:1c:70:73:8a:bb:24:e4:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:38:ED:31:C0:BC:D2:CF:F8:7E:03:8D:71:C0:89:EA:20:B5:E1:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/56d1460e-74a5-38f4-bcda-1e45f2a66969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.crl

            X509v3 Authority Key Identifier:
                keyid:D9:6F:83:DF:E3:4D:6B:F6:09:48:86:48:C7:34:0C:5D:69:74:69:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.84.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:3b:dd:46:62:11:bc:4f:4c:c5:91:9e:f0:2f:3b:a8:38:ea:
         6d:2c:73:b2:27:43:07:5d:4a:96:87:3d:d0:9a:44:34:5d:7f:
         d1:b3:df:b4:26:fb:19:62:75:f0:20:d2:64:54:5f:4a:a6:4f:
         87:b5:84:26:bd:aa:a7:c6:37:6f:4e:a8:91:23:99:5b:17:5a:
         61:d5:b3:2b:b3:4e:04:15:ec:cf:8b:30:f7:1d:21:c4:32:09:
         93:8b:f1:48:6f:a9:93:62:0c:5b:cb:ad:8e:34:68:c6:6e:a0:
         be:d2:6e:86:6a:ae:a0:f1:75:1b:41:35:59:49:79:b5:89:de:
         20:34:4b:32:32:e1:df:e6:67:ae:60:39:56:d9:d2:66:27:3e:
         8e:af:26:25:60:57:23:31:aa:41:11:1f:43:2d:4d:27:bb:cc:
         52:57:c7:e5:ec:1f:32:36:83:e8:df:87:c9:8c:fc:25:68:c5:
         4c:9b:0c:24:66:05:c5:09:14:ca:79:57:ed:bf:96:cb:29:c1:
         66:52:89:4e:a2:e9:b5:e0:64:fa:88:77:12:96:ec:2d:fc:ba:
         df:f0:bf:16:bc:a9:6d:d2:86:a1:ef:5b:84:dd:c3:a1:84:eb:
         0e:b0:86:ba:af:b4:42:f7:de:d2:f6:00:3f:02:67:ad:ba:d1:
         ae:47:d2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:27:48 2025 by rpki-client