Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c2f7dbe6-2d84-3d0e-9698-0d1bc0f0c6ca.roa
File:                     c2f7dbe6-2d84-3d0e-9698-0d1bc0f0c6ca.roa (raw, json)
Hash identifier:          5SzsNSEgFPxwg6P9U0E2/RwFwAKEEY5tGjn1N/DusVY=
Subject key identifier:   F7:5B:07:69:2C:6B:B6:E7:B0:71:AC:49:A4:6A:B5:62:62:A6:14:A0
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584B84E771B341C7ECCC393A4820
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c2f7dbe6-2d84-3d0e-9698-0d1bc0f0c6ca.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     29933
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:71:b3:41:c7:ec:cc:39:3a:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=f5f584a8-beef-42ff-93d0-63308d3f249f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:d9:02:3e:5c:70:bb:2e:6c:29:b2:b0:49:
                    89:be:2a:96:21:c0:8d:b3:ee:af:9c:c8:d0:dc:cf:
                    a5:ef:ee:79:6e:02:ab:1e:94:c4:3d:af:0a:60:ab:
                    85:81:83:1b:7c:28:2d:39:f6:13:3a:d7:fd:77:81:
                    27:40:a8:6f:ad:41:c6:58:39:37:e0:03:d4:fe:40:
                    a1:71:f1:e5:42:9b:a6:f9:4a:40:bd:df:79:76:f5:
                    e0:8d:5c:ed:e7:30:b2:f0:28:78:d9:37:c0:fc:c8:
                    d8:00:c3:4e:54:ca:48:ac:fa:e7:a2:73:77:7f:6d:
                    69:16:16:02:fe:63:9f:86:5e:38:d2:2b:6b:95:f9:
                    ca:64:c5:bc:b3:c3:b1:5f:84:04:a0:07:f7:44:c7:
                    2f:90:9f:54:91:eb:f8:e0:70:e1:bc:e8:73:14:e5:
                    8e:68:26:b4:a1:51:16:71:f4:49:16:1a:3c:ee:00:
                    05:95:ad:a8:df:0e:64:02:41:a5:35:c0:f5:7b:d7:
                    2d:cc:bb:19:96:b4:1e:b9:f6:86:5c:05:ed:d1:02:
                    8c:1d:ee:3f:c4:7b:29:4c:5c:8d:9f:d7:56:dd:a7:
                    05:93:a1:1e:7b:5b:32:6d:99:4a:15:8d:dd:f5:53:
                    88:ff:50:69:c5:33:9d:d0:7f:f4:93:b5:99:4c:c6:
                    15:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5B:07:69:2C:6B:B6:E7:B0:71:AC:49:A4:6A:B5:62:62:A6:14:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c2f7dbe6-2d84-3d0e-9698-0d1bc0f0c6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a9:41:7a:7e:48:79:65:1b:61:3a:fc:bb:cf:53:75:ad:f5:
         9d:b6:37:04:0b:c9:77:1f:bc:dd:57:ec:66:5b:82:08:83:75:
         19:99:58:99:fc:df:8b:84:8f:94:12:38:52:db:88:6f:87:db:
         0e:c7:d8:e6:f7:6d:2f:c7:c9:bc:5d:9b:8a:f7:20:19:9b:12:
         aa:f1:90:ef:33:12:3a:49:4e:16:87:df:01:d9:81:bd:4e:8b:
         50:08:6a:a5:18:75:5e:4c:ed:10:1e:dc:7a:0d:af:b6:a1:13:
         aa:45:87:fc:92:cf:d5:ca:c2:18:0d:46:eb:df:6a:1f:0e:1f:
         d8:8d:53:ae:e3:5c:8f:cc:86:17:47:54:61:10:bd:21:ff:ba:
         d5:27:72:7a:33:66:f6:20:e0:21:13:97:01:63:9f:0f:9e:eb:
         82:9e:6b:75:52:8f:8b:27:10:88:7c:1e:56:b3:df:57:33:59:
         63:6a:c2:e4:6c:ac:43:c2:be:b9:57:2b:f0:ce:bc:bb:84:b8:
         dc:c8:7d:3b:94:77:1f:98:9b:9b:49:fb:ae:f6:c8:b3:59:53:
         09:52:f0:0b:33:df:f6:50:28:07:19:a0:0c:35:e1:32:e9:3b:
         5e:5b:41:d7:30:72:70:6f:2b:63:07:b5:06:a9:77:e2:53:db:
         c7:ec:22:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:28 2025 by rpki-client