Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/5ce42828-d9a3-3d5b-a1ab-be0b68da1c15.roa
File:                     5ce42828-d9a3-3d5b-a1ab-be0b68da1c15.roa (raw, json)
Hash identifier:          0eUoVZVLeZ+yjxFsTy7RE7oRk2HuqzeFOkpW3XSzYdc=
Subject key identifier:   C0:66:2D:73:1D:69:92:81:52:C1:34:F5:06:05:3C:1D:F2:9D:5D:99
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584B84E772378C350F937728DAC0
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/5ce42828-d9a3-3d5b-a1ab-be0b68da1c15.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     812
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:72:37:8c:35:0f:93:77:28:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=980c839b-85d0-4527-94b2-638c965bdbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e2:77:bf:3e:cb:5a:d9:36:97:54:8d:b8:4a:
                    92:f9:60:df:96:57:1e:a3:7d:a0:4a:b0:8c:a7:33:
                    c1:c1:ea:94:92:d4:e0:a4:fe:4e:bd:a1:88:0e:07:
                    06:00:79:f8:98:29:24:be:03:30:cd:f6:53:f8:83:
                    03:e6:a3:ae:54:a8:a8:be:e3:08:f0:61:c2:1b:e7:
                    32:e1:6a:0a:d4:35:83:03:ab:70:d1:85:c9:4a:ca:
                    4a:8f:13:93:03:b7:bb:a9:be:00:62:d4:c0:17:02:
                    3d:7a:59:19:76:82:ef:d3:b0:ec:31:a2:f1:0c:f9:
                    24:43:14:34:d1:b5:e8:68:b5:e8:26:67:7e:a5:88:
                    75:08:7f:59:8c:0a:a5:22:25:43:45:4a:b7:74:7a:
                    a4:34:a5:1a:c2:00:63:1f:0d:e3:1d:ef:9f:a4:43:
                    cf:ce:d7:5e:af:24:cc:2a:22:cc:80:a5:91:5e:5b:
                    48:c0:12:b9:b8:1c:91:5f:13:0e:1b:84:c7:28:05:
                    72:38:ab:93:2a:79:f7:6f:13:67:ec:80:4a:52:22:
                    ab:eb:aa:69:92:19:8a:32:c0:37:05:58:52:17:c5:
                    f2:20:d5:ba:0a:10:a1:5b:bb:f7:eb:89:7f:75:89:
                    35:21:d0:c9:8a:7d:b2:5a:d8:a1:64:fb:c6:86:fb:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:66:2D:73:1D:69:92:81:52:C1:34:F5:06:05:3C:1D:F2:9D:5D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/5ce42828-d9a3-3d5b-a1ab-be0b68da1c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:cb:43:5c:f2:a2:c5:d3:bf:70:e2:00:57:93:a8:66:fd:45:
         e4:cb:b3:08:3e:1f:71:03:b9:95:5d:e9:86:53:07:4b:65:db:
         bf:55:3a:ce:bb:97:2f:bd:5f:d1:40:2c:29:b1:14:fc:13:56:
         21:96:44:8a:cf:a1:b7:3d:7b:39:78:c0:3c:4d:9b:ea:30:b4:
         c1:d7:b6:38:ea:fc:c3:a4:5e:df:3e:1d:9b:c8:b2:c5:33:cb:
         ee:61:3c:2a:62:bf:be:82:3e:27:06:9a:a6:22:c5:90:03:e4:
         91:14:41:ba:e1:7a:04:b8:c0:1f:64:2f:0c:fd:e2:b6:57:3f:
         69:0c:fb:1a:29:e1:6c:6b:23:36:14:53:ee:45:42:a2:55:22:
         ff:eb:4d:6c:58:e1:47:b9:ed:36:e9:1d:38:67:d8:6e:ea:5c:
         c5:83:74:5d:ff:6f:0c:51:2d:63:88:d2:94:89:29:2b:e4:33:
         2f:3d:51:5e:3c:1a:8d:18:ce:67:51:88:df:de:09:05:36:f0:
         33:46:8a:2d:ec:80:f5:d6:32:73:44:19:54:d1:c7:72:81:f7:
         95:5e:62:16:0d:f7:c2:1b:e6:63:31:96:75:8e:14:90:08:1e:
         03:cf:4b:ed:1f:95:21:87:bb:61:1c:25:e0:54:6a:5a:b3:2f:
         de:72:1e:73
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuE53I3jDUPk3co2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz
YjU3MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk
OTgwYzgzOWItODVkMC00NTI3LTk0YjItNjM4Yzk2NWJkYmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOJ3vz7LWtk2l1SNuEqS+WDfllceo32gSrCM
pzPBweqUktTgpP5OvaGIDgcGAHn4mCkkvgMwzfZT+IMD5qOuVKiovuMI8GHCG+cy
4WoK1DWDA6tw0YXJSspKjxOTA7e7qb4AYtTAFwI9elkZdoLv07DsMaLxDPkkQxQ0
0bXoaLXoJmd+pYh1CH9ZjAqlIiVDRUq3dHqkNKUawgBjHw3jHe+fpEPPztderyTM
KiLMgKWRXltIwBK5uByRXxMOG4THKAVyOKuTKnn3bxNn7IBKUiKr66ppkhmKMsA3
BVhSF8XyINW6ChChW7v364l/dYk1IdDJin2yWtihZPvGhvt2OQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMBmLXMdaZKBUsE09QYFPB3ynV2ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1
ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvNWNlNDI4MjgtZDlhMy0z
ZDViLWExYWItYmUwYjY4ZGExYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2
OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3
M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi
MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC
ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAILLQ1zyosXTv3DiAFeTqGb9ReTLswg+H3EDuZVd6YZTB0tl
279VOs67ly+9X9FALCmxFPwTViGWRIrPobc9ezl4wDxNm+owtMHXtjjq/MOkXt8+
HZvIssUzy+5hPCpiv76CPicGmqYixZAD5JEUQbrhegS4wB9kLwz94rZXP2kM+xop
4WxrIzYUU+5FQqJVIv/rTWxY4Ue57TbpHThn2G7qXMWDdF3/bwxRLWOI0pSJKSvk
My89UV48Go0YzmdRiN/eCQU28DNGii3sgPXWMnNEGVTRx3KB95VeYhYN98Ib5mMx
lnWOFJAIHgPPS+0flSGHu2EcJeBUalqzL95yHnM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:29 2025 by rpki-client