Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c2f7dbe6-2d84-3d0e-9698-0d1bc0f0c6ca.roa
File:                     c2f7dbe6-2d84-3d0e-9698-0d1bc0f0c6ca.roa (raw, json)
Hash identifier:          ONTXTCiy0Y7ywfBnOAOi5LbSn0j0n6MXeMmltnKujr8=
Subject key identifier:   C8:F9:41:47:2A:1B:F6:BF:70:FD:00:EF:2E:89:3E:66:AF:78:FB:20
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F43285849C4D4B7B0D81C28CEA5766580
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c2f7dbe6-2d84-3d0e-9698-0d1bc0f0c6ca.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     29933
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b7:b0:d8:1c:28:ce:a5:76:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=6ada4058-c1a3-42b6-bd5a-dd36de3eddfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:85:f9:d6:2e:cb:bb:bf:70:35:3e:86:c0:
                    b5:44:8d:27:99:d5:3d:a3:22:4f:7e:06:5f:ff:42:
                    66:f3:99:33:93:66:7b:af:25:5a:9e:69:14:dc:f6:
                    a4:a0:53:bf:c1:0e:66:78:40:45:59:b4:86:92:3a:
                    59:3d:b6:9c:46:a1:eb:f4:1a:0c:5c:6e:de:87:a0:
                    99:ad:38:33:b0:9a:47:e7:16:bc:a4:bf:61:7a:82:
                    c5:37:54:76:6c:88:77:b0:83:0b:89:3e:87:ad:a4:
                    26:29:f1:ea:70:80:6e:b7:8b:ab:23:ea:ea:1b:43:
                    cb:83:be:91:a7:9a:82:8f:40:e2:93:6f:cb:65:50:
                    0f:18:0c:fc:ca:4f:76:df:41:7e:e0:bf:dc:82:e5:
                    1e:ab:0c:ed:30:b8:5d:f0:18:d6:60:c2:b1:e0:e4:
                    5b:d7:8a:e2:04:62:7d:93:47:6e:d8:17:29:48:ad:
                    cb:d3:5a:f7:f8:d4:9f:11:a3:c4:8e:02:e2:42:07:
                    ff:17:a0:4d:45:ca:31:e8:4d:12:86:6a:73:ce:73:
                    b7:51:55:4a:c5:a8:c2:26:49:b6:e9:8b:ae:45:89:
                    9b:7b:20:1f:b6:06:66:a8:19:08:68:27:e9:4e:d1:
                    e4:e0:f2:7a:67:1c:4e:e4:5d:b0:3b:73:60:93:24:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F9:41:47:2A:1B:F6:BF:70:FD:00:EF:2E:89:3E:66:AF:78:FB:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c2f7dbe6-2d84-3d0e-9698-0d1bc0f0c6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:71:4e:d8:d6:e2:71:3c:4b:a9:c8:42:90:54:d6:48:bb:78:
         ab:0d:38:53:96:21:83:76:cc:16:25:c9:d8:2d:14:2b:a8:83:
         2d:1c:ed:4b:3f:7c:94:14:2f:16:de:a5:6b:66:e1:30:77:e6:
         ed:14:2e:4a:21:89:61:b8:6f:4f:c9:b1:5d:c4:4f:eb:82:bd:
         d1:61:19:e4:43:e1:31:d6:65:43:68:ae:7e:74:e3:a8:e6:d9:
         03:79:48:ca:88:a6:75:06:9a:42:10:7b:2e:86:19:98:c5:be:
         80:ed:15:81:ac:f2:28:44:d2:cd:dd:db:3f:2f:89:7d:dd:36:
         8b:fb:a7:85:8a:41:19:2e:07:c6:59:6b:e0:a1:96:8f:30:55:
         b2:21:36:62:cf:50:d3:f0:a2:96:a3:e6:8b:30:50:6a:03:c9:
         b8:0a:cf:29:c2:7e:87:35:48:7c:35:17:a8:31:3e:02:ef:b7:
         15:a3:b6:f1:20:4e:82:2c:6f:58:f2:9f:2f:71:cc:bd:87:c9:
         8b:d0:0f:5c:b0:40:da:c6:cd:3e:b2:5f:df:bf:91:8a:b0:fc:
         1b:d6:d4:81:84:b2:14:3b:d4:37:bd:f9:7a:b8:95:d5:b1:98:
         80:3e:74:fb:cd:f1:26:b8:9c:62:57:f9:d7:20:c3:f7:48:9c:
         81:77:05:a3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnE1Lew2BwozqV2ZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz
YjU3MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk
NmFkYTQwNTgtYzFhMy00MmI2LWJkNWEtZGQzNmRlM2VkZGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyWF+dYuy7u/cDU+hsC1RI0nmdU9oyJPfgZf
/0Jm85kzk2Z7ryVanmkU3PakoFO/wQ5meEBFWbSGkjpZPbacRqHr9BoMXG7eh6CZ
rTgzsJpH5xa8pL9heoLFN1R2bIh3sIMLiT6HraQmKfHqcIBut4urI+rqG0PLg76R
p5qCj0Dik2/LZVAPGAz8yk9230F+4L/cguUeqwztMLhd8BjWYMKx4ORb14riBGJ9
k0du2BcpSK3L01r3+NSfEaPEjgLiQgf/F6BNRcox6E0ShmpzznO3UVVKxajCJkm2
6YuuRYmbeyAftgZmqBkIaCfpTtHk4PJ6ZxxO5F2wO3NgkyT4JQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMj5QUcqG/a/cP0A7y6JPmavePsgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1
ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvYzJmN2RiZTYtMmQ4NC0z
ZDBlLTk2OTgtMGQxYmMwZjBjNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2
OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3
M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi
MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC
ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIFxTtjW4nE8S6nIQpBU1ki7eKsNOFOWIYN2zBYlydgtFCuo
gy0c7Us/fJQULxbepWtm4TB35u0ULkohiWG4b0/JsV3ET+uCvdFhGeRD4THWZUNo
rn5046jm2QN5SMqIpnUGmkIQey6GGZjFvoDtFYGs8ihE0s3d2z8viX3dNov7p4WK
QRkuB8ZZa+Chlo8wVbIhNmLPUNPwopaj5oswUGoDybgKzynCfoc1SHw1F6gxPgLv
txWjtvEgToIsb1jyny9xzL2HyYvQD1ywQNrGzT6yX9+/kYqw/BvW1IGEshQ71De9
+Xq4ldWxmIA+dPvN8Sa4nGJX+dcgw/dInIF3BaM=
-----END CERTIFICATE-----
Generated at Sun May 11 06:15:12 2025 by rpki-client