Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/f5f1bbca-cda0-335e-a870-10735a4a0b93.roa
File:                     f5f1bbca-cda0-335e-a870-10735a4a0b93.roa (raw, json)
Hash identifier:          d+m/wdKcQyQzr8u0V6lnftO2HjwCFqUyVlV0ZqeMYjg=
Subject key identifier:   86:B6:4D:97:FF:8F:54:34:2E:64:54:7C:A4:68:48:B1:E8:7D:BD:8D
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F43285849CBCFA3C804C9AD48EB394B80
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/f5f1bbca-cda0-335e-a870-10735a4a0b93.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     40051
IP address blocks:        139.104.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a3:c8:04:c9:ad:48:eb:39:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=ce3b8b9c-f4a9-4f2a-9a37-6fc2b5944b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:56:08:d9:1d:d4:4d:c5:8b:07:2f:34:44:
                    f1:d7:a1:d4:50:2c:9e:9f:56:39:07:6f:32:d1:23:
                    c0:03:e7:15:1f:a6:1f:e8:3a:46:f9:11:3e:2a:19:
                    49:65:67:6e:78:94:dc:e9:83:d2:d3:50:ec:e5:e4:
                    26:42:9c:26:6a:a8:a4:42:09:e6:fe:c5:a0:d4:0d:
                    68:0a:7b:21:f9:f2:09:79:67:e6:c9:b8:e0:91:b9:
                    4d:39:d5:42:81:ac:7e:e6:da:99:08:57:f4:61:a3:
                    eb:19:0d:14:37:44:43:7b:cd:c1:84:10:37:08:7f:
                    2e:77:6b:1d:6f:66:26:49:78:e6:1c:5a:bf:ef:32:
                    67:58:aa:fd:f5:d2:a1:e2:5c:26:81:56:eb:b5:39:
                    20:da:66:4b:a1:87:b3:0a:3e:f8:ff:64:b2:78:e4:
                    9b:86:33:ee:32:19:1c:35:c7:d3:ce:aa:b7:9c:11:
                    9e:b6:be:02:a1:15:11:bd:9d:cc:47:be:48:c3:a0:
                    cc:22:fc:c6:df:41:f4:f8:47:62:0d:5e:ef:b7:1c:
                    3d:63:b5:07:ca:09:b9:73:8b:37:74:d0:bb:c2:55:
                    26:51:89:35:7f:3b:18:6f:44:a4:04:ec:ac:0f:21:
                    11:d9:13:1b:2f:67:ed:bd:bf:4d:ed:12:bc:83:34:
                    d6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B6:4D:97:FF:8F:54:34:2E:64:54:7C:A4:68:48:B1:E8:7D:BD:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/f5f1bbca-cda0-335e-a870-10735a4a0b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:16:07:1d:a2:17:99:9e:50:b2:0e:2a:a2:30:d7:14:a1:1a:
         b9:85:cd:e1:0b:67:09:db:7f:f1:16:59:22:d1:bb:d3:16:c1:
         b1:1d:e9:70:0c:9d:29:f7:b7:47:69:93:66:84:c3:74:67:24:
         9b:8e:6a:5e:1e:77:a8:88:7a:7b:a2:66:fb:3d:7a:ce:67:2e:
         2b:bb:4c:09:40:46:1f:3a:13:b1:58:7f:86:cc:3e:57:06:66:
         45:f9:48:4f:a2:08:1a:69:f4:63:bb:09:e4:e3:66:74:53:4f:
         4f:cc:00:78:54:fa:f7:f2:c0:6f:1c:d5:72:b4:12:a6:f4:98:
         7a:79:41:51:80:c9:3a:be:2e:f8:a4:99:4d:9c:45:3d:7b:b7:
         a9:03:04:26:50:9f:01:d5:31:e8:55:2a:c4:c5:14:40:4a:7d:
         de:04:3e:09:b6:31:24:c9:dd:20:0c:c3:ea:08:fa:4f:f5:97:
         2c:f5:95:79:47:4a:27:61:c7:de:e3:1a:0a:56:2b:f0:fb:eb:
         8f:45:7e:7e:a4:9f:d8:22:4e:5a:b5:60:47:0f:68:ed:b6:28:
         95:5f:08:4c:23:15:0d:fd:b5:52:2f:bb:06:b6:c0:d2:83:71:
         03:d3:b8:0c:ce:f5:3d:4d:ee:bc:0f:57:b2:83:09:f7:81:7f:
         30:a1:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:34:17 2025 by rpki-client