Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/8ae61206-0e3b-306d-804c-13aa3425ae40.roa
File:                     8ae61206-0e3b-306d-804c-13aa3425ae40.roa (raw, json)
Hash identifier:          fSc2hH+DypO9DcWrm0yEjVCL2DZ9FAeNk/YxdDR+2Hk=
Subject key identifier:   41:CA:DA:AA:A7:EA:D3:C2:5B:AA:E7:9D:10:D2:C6:AC:66:73:B8:CC
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F43285849C4D4B7C56E8E79E1CF75C140
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/8ae61206-0e3b-306d-804c-13aa3425ae40.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     7385
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b7:c5:6e:8e:79:e1:cf:75:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=3e24750a-9534-4440-bf59-71fe80f9cf33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:fc:a6:0e:94:36:e3:4c:33:58:08:56:bf:
                    27:e4:78:86:17:ed:d2:fe:b7:76:5b:c6:83:82:62:
                    0a:e3:eb:fe:f0:67:32:54:26:38:77:6f:6e:3f:cb:
                    3a:90:fc:58:1e:cd:74:f1:f6:54:54:31:13:a5:f7:
                    de:b0:d4:ed:8d:3b:45:1d:5b:04:68:ac:f0:95:fc:
                    0b:fa:30:e2:33:bb:6f:7d:cd:97:1f:98:16:aa:af:
                    28:04:0c:5b:e6:56:6b:39:d1:f8:90:ec:0b:62:b1:
                    02:c4:9e:b0:de:90:8f:c5:d2:4f:db:3c:12:87:63:
                    82:cd:f3:0b:68:1c:1c:d0:9c:70:e3:27:84:e0:85:
                    62:fd:08:99:79:31:95:e1:80:b8:48:32:61:4c:ec:
                    9b:f7:46:f6:69:8a:a3:98:50:c0:3c:11:e8:e4:a3:
                    b9:36:ed:54:ee:79:35:00:ca:15:52:a7:46:67:54:
                    5c:46:b9:17:9b:44:2a:6b:d6:5c:6b:7b:6e:a7:74:
                    b8:3c:34:cb:05:e1:8d:3b:45:b0:55:cf:f3:4f:8d:
                    67:e5:cb:4d:e9:5d:a1:df:9d:12:b4:c8:44:84:81:
                    b4:aa:90:e4:11:1e:26:06:a5:76:30:7b:d8:78:32:
                    c7:74:26:b1:e9:f3:26:31:6f:f3:13:4a:d6:5e:5f:
                    81:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CA:DA:AA:A7:EA:D3:C2:5B:AA:E7:9D:10:D2:C6:AC:66:73:B8:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/8ae61206-0e3b-306d-804c-13aa3425ae40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f4:e7:ce:9d:22:c5:7c:21:e2:68:99:3d:0e:3e:e4:ff:6f:
         94:63:a4:a7:46:cb:0a:2c:bb:db:18:ff:74:33:08:31:00:8d:
         05:c4:45:69:27:6e:5d:a2:8c:58:e5:0d:9b:07:37:ee:35:7d:
         ee:3f:c3:23:a6:1e:e2:ca:c0:c7:da:8b:25:c1:68:9f:42:9d:
         2d:79:d7:9d:19:c3:95:83:c1:f1:ce:b5:02:d9:db:dd:8a:ce:
         07:3e:2c:3b:68:76:fb:3c:67:e0:d8:68:6a:45:91:ea:d1:47:
         83:58:58:ac:c8:d7:7c:83:63:a2:02:a5:70:e4:a6:79:5b:26:
         85:0b:3d:af:66:6a:08:c2:32:5b:50:13:14:e6:66:76:9d:f4:
         9a:50:27:6c:ca:f2:3a:72:cb:6d:67:be:04:b9:19:93:94:d8:
         32:68:15:e5:a8:3d:9f:9d:ee:44:fc:9c:90:6d:4a:fe:b4:60:
         5c:af:67:75:73:91:b1:63:fe:73:21:d9:c8:d1:42:af:6f:6b:
         3a:9a:8c:e7:cc:9a:90:f6:e0:11:60:64:8a:8e:e8:24:80:07:
         e0:c7:2a:2b:99:69:50:d6:6a:c5:0b:b1:2d:dc:31:92:72:91:
         f7:aa:fd:63:d6:3f:b9:bf:3a:f1:e6:dd:74:aa:90:5f:72:95:
         e0:68:ab:db
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnE1LfFbo554c91wUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz
YjU3MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk
M2UyNDc1MGEtOTUzNC00NDQwLWJmNTktNzFmZTgwZjljZjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov78pg6UNuNMM1gIVr8n5HiGF+3S/rd2W8aD
gmIK4+v+8GcyVCY4d29uP8s6kPxYHs108fZUVDETpffesNTtjTtFHVsEaKzwlfwL
+jDiM7tvfc2XH5gWqq8oBAxb5lZrOdH4kOwLYrECxJ6w3pCPxdJP2zwSh2OCzfML
aBwc0Jxw4yeE4IVi/QiZeTGV4YC4SDJhTOyb90b2aYqjmFDAPBHo5KO5Nu1U7nk1
AMoVUqdGZ1RcRrkXm0Qqa9Zca3tup3S4PDTLBeGNO0WwVc/zT41n5ctN6V2h350S
tMhEhIG0qpDkER4mBqV2MHvYeDLHdCax6fMmMW/zE0rWXl+BoQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEHK2qqn6tPCW6rnnRDSxqxmc7jMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1
ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvOGFlNjEyMDYtMGUzYi0z
MDZkLTgwNGMtMTNhYTM0MjVhZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2
OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3
M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi
MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC
ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACz0586dIsV8IeJomT0OPuT/b5RjpKdGywosu9sY/3QzCDEA
jQXERWknbl2ijFjlDZsHN+41fe4/wyOmHuLKwMfaiyXBaJ9CnS15150Zw5WDwfHO
tQLZ292Kzgc+LDtodvs8Z+DYaGpFkerRR4NYWKzI13yDY6ICpXDkpnlbJoULPa9m
agjCMltQExTmZnad9JpQJ2zK8jpyy21nvgS5GZOU2DJoFeWoPZ+d7kT8nJBtSv60
YFyvZ3VzkbFj/nMh2cjRQq9vazqajOfMmpD24BFgZIqO6CSAB+DHKiuZaVDWasUL
sS3cMZJykfeq/WPWP7m/OvHm3XSqkF9yleBoq9s=
-----END CERTIFICATE-----
Generated at Sat May 10 21:06:27 2025 by rpki-client