Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/06322d38-bbe2-3557-8d34-4a809d951d9d.roa
File:                     06322d38-bbe2-3557-8d34-4a809d951d9d.roa (raw, json)
Hash identifier:          rrVO78kQwZGD5ih4Fj+TCehkHKFzFqQAz/8agIIK6Bs=
Subject key identifier:   72:44:A0:D6:D4:3C:48:A7:0B:56:41:E6:73:BC:C6:68:39:3C:7B:D4
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584AD23BBFA22CFC4A8745744EC0
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/06322d38-bbe2-3557-8d34-4a809d951d9d.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     8137
IP address blocks:        139.104.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:bf:a2:2c:fc:4a:87:45:74:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=ea0ae786-5fee-4e2c-951e-40f08c8ce0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:ee:2c:a2:17:6d:36:20:12:e7:be:87:ea:
                    d2:45:74:0c:9c:12:95:c4:b4:51:ff:72:60:7f:0b:
                    20:8e:de:2f:41:72:e9:9a:04:a1:3f:7e:f3:ec:c6:
                    e2:d4:c3:08:91:b9:e2:6c:d0:9b:52:dc:15:97:16:
                    ce:72:99:4b:6a:8e:2c:25:f8:2e:32:19:1a:63:fa:
                    59:e6:a7:61:cb:cc:45:05:0a:42:15:37:52:5e:22:
                    a1:06:32:3b:5b:29:dc:a1:8b:eb:bb:a5:43:9e:67:
                    9c:b4:9b:6f:22:d3:d5:7e:5e:62:33:62:de:3b:51:
                    3d:27:85:be:dd:b2:2d:8a:f4:87:c7:32:a0:34:34:
                    93:de:4c:25:bf:d5:72:06:22:2c:4c:06:74:87:5a:
                    08:78:a7:2b:c1:e8:86:35:38:bc:04:3c:5c:43:c5:
                    49:f2:77:d3:07:53:d2:f0:f3:ed:e9:a1:7d:71:93:
                    dd:d6:cd:24:bf:7a:1a:8a:55:ad:6b:97:a0:ac:93:
                    e3:cf:89:28:b4:4b:be:a7:b5:da:ac:b9:01:6c:e3:
                    95:cb:bb:53:b7:6f:5e:dc:92:4a:2e:86:09:74:7a:
                    a6:7e:61:26:5b:c5:10:9c:6f:cc:9e:1f:3d:6d:54:
                    18:b3:ab:08:a9:9e:c4:2d:ce:e3:96:d9:20:24:41:
                    68:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:44:A0:D6:D4:3C:48:A7:0B:56:41:E6:73:BC:C6:68:39:3C:7B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/06322d38-bbe2-3557-8d34-4a809d951d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:75:82:e7:44:8b:a7:46:4d:fb:17:5e:64:f6:42:79:14:bc:
         d8:30:31:40:16:2f:4d:da:c6:05:a4:ae:ec:13:d6:00:28:b7:
         aa:c1:20:67:15:31:ec:e0:ed:71:0b:71:9d:c0:b7:09:d8:4a:
         29:9a:2d:c1:8b:51:59:75:61:af:12:10:52:cc:a7:a3:3e:75:
         0f:82:06:c2:08:e4:0e:dd:5e:5d:3d:3a:6f:50:d9:60:0f:a6:
         90:91:b5:76:5e:84:48:d3:01:da:42:1c:91:de:f7:99:dd:55:
         0d:19:7f:0c:5c:aa:c5:77:c4:be:01:90:df:61:c5:7e:02:93:
         a0:4f:c0:2b:24:41:68:31:a8:e9:12:a2:f6:10:a3:70:1a:5f:
         c5:08:4e:81:ef:9f:45:d3:64:b6:94:a8:17:9c:bf:7c:09:f4:
         f5:18:0b:b2:75:65:96:8d:88:7c:43:83:16:06:5f:6b:53:72:
         46:ba:79:cf:6d:0f:5c:ad:86:76:a5:0e:cc:2b:b0:ef:15:2f:
         35:92:38:36:f9:16:fe:0d:c7:0c:36:f4:27:42:b8:6f:d5:72:
         b5:41:12:b8:27:9c:d8:f2:c9:70:90:57:24:e3:b5:f7:ca:23:
         b2:8a:c2:4f:e5:53:49:b3:a8:c0:86:e8:bf:44:f1:46:ef:a2:
         b2:f9:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:26:08 2025 by rpki-client