Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/8c7ba11c-12e1-3e5f-938f-147bd5c68723.roa
File:                     8c7ba11c-12e1-3e5f-938f-147bd5c68723.roa (raw, json)
Hash identifier:          eP1t03VRCpff91Q5DV4/Ia3GqSAlvIcOAvmrqkgi/Sw=
Subject key identifier:   19:A6:A3:DE:0D:08:10:1E:6E:C6:2E:AB:38:0B:5B:40:4E:9D:1B:24
Certificate issuer:       /CN=ba584605-7948-4c75-be73-29a89eca8940
Certificate serial:       010D0C9F43285849BF3F6699F3EDF77E66230F40
Authority key identifier: EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/8c7ba11c-12e1-3e5f-938f-147bd5c68723.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     399315
IP address blocks:        139.102.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:66:99:f3:ed:f7:7e:66:23:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba584605-7948-4c75-be73-29a89eca8940
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=d6b81935-3045-40ba-a213-10203b02bc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:74:09:a8:68:c4:c2:ec:b2:b4:f4:af:7c:
                    aa:5d:0b:2a:e3:78:2e:01:34:05:06:f5:ef:49:05:
                    03:60:e3:8c:6e:f0:af:c2:00:b0:36:a1:40:65:9a:
                    a2:d1:df:86:19:ae:a7:3d:01:aa:30:cc:5b:7b:4e:
                    9e:e3:a8:8a:07:0d:0f:22:8c:63:e5:a9:7f:46:58:
                    11:71:e7:e5:b4:a6:a6:ca:38:6d:52:2b:0b:f2:77:
                    c8:24:b0:74:3b:a4:5a:d0:b8:88:2a:b3:df:1d:c2:
                    e4:19:6a:08:25:47:a5:5a:b2:90:51:a9:f9:1c:fc:
                    b0:9a:50:21:5d:37:9b:32:d0:01:23:36:4e:d9:a4:
                    96:42:60:97:aa:fc:f5:e3:ea:c9:ac:2d:46:c8:b7:
                    74:2e:b5:a2:f0:24:49:27:91:2c:d6:96:5b:68:e7:
                    b2:b4:e9:e1:8b:77:bb:41:df:d7:6a:c1:67:b2:b0:
                    3a:ab:0a:ac:22:08:80:d5:1f:e9:7f:a5:bd:c5:f6:
                    0a:e1:f6:3e:ae:bd:b1:20:24:1f:01:1d:bc:47:78:
                    43:5e:fb:a1:2a:03:13:c5:07:bd:cc:27:d9:5f:52:
                    2b:a0:26:0c:d3:66:19:7c:57:99:7d:cb:42:6a:1b:
                    04:05:0c:3e:30:88:1b:f3:80:22:c0:8a:05:6d:99:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A6:A3:DE:0D:08:10:1E:6E:C6:2E:AB:38:0B:5B:40:4E:9D:1B:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/8c7ba11c-12e1-3e5f-938f-147bd5c68723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940/ba584605-7948-4c75-be73-29a89eca8940.crl

            X509v3 Authority Key Identifier:
                keyid:EA:FF:D7:5D:D2:C1:0F:4F:09:3A:53:31:FC:8C:CF:9F:FE:4E:14:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba584605-7948-4c75-be73-29a89eca8940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:88:f9:7a:63:0b:7e:40:08:43:20:6f:86:2f:55:9f:85:e9:
         33:eb:eb:a2:ac:c9:8c:37:3e:b5:c9:a3:04:42:62:10:84:a9:
         47:bc:d2:1b:23:84:93:65:96:ea:6d:00:4d:c8:c4:54:bb:24:
         e0:77:5b:8a:88:e1:d2:de:92:cb:c1:3b:70:62:8a:37:c0:44:
         7a:f5:bf:26:0e:08:43:c9:c6:b7:5a:4c:f0:a2:05:ac:63:f6:
         51:16:2d:fe:f4:79:dc:b9:78:e2:de:a6:78:9c:8c:4c:4f:b0:
         0f:27:41:a0:a5:2c:b3:c8:74:ea:36:a2:4a:42:62:99:c6:d8:
         fc:78:b3:7d:76:24:68:99:fc:c6:bf:db:b4:40:12:ed:01:b8:
         08:6d:4d:f8:cc:28:bd:4f:77:9f:34:aa:21:31:67:a0:52:97:
         98:a6:1d:db:d6:56:a7:ae:bf:c7:b4:78:5c:86:4f:a3:3f:2c:
         a0:42:4e:b6:fd:24:20:40:67:18:b3:b0:d3:26:c4:e8:c9:e5:
         b6:4e:43:04:78:02:be:6e:9d:db:f7:ed:d9:00:ec:52:fb:f3:
         59:f9:2c:dd:43:92:28:07:55:7e:17:78:66:fe:3e:61:93:ab:
         48:69:27:76:6c:d2:7d:61:04:85:5d:9a:5b:15:a7:a7:f8:52:
         d2:f8:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:36:25 2025 by rpki-client