Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa
File:                     e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa (raw, json)
Hash identifier:          1CDvIq/a6mM2FD7/ma6hPg938DK1VVSouGKv18RoZ20=
Subject key identifier:   CF:71:5B:8B:D8:9C:18:4E:D2:62:BB:69:BD:E0:59:6C:94:9C:A5:A8
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584D44FA3C27AC1895C2BF807480
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     174
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:3c:27:ac:18:95:c2:bf:80:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=8a92b387-f014-407a-bd11-e868fe3b2d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:6c:8e:2a:d0:f0:e5:c7:35:d0:b6:c7:9e:
                    12:77:c2:00:d4:b6:b3:09:df:39:a5:dc:1e:e5:ee:
                    5c:df:f7:6d:01:c8:f9:b4:b3:6a:c0:e1:4d:04:cb:
                    fb:c9:49:e7:5f:1e:a4:8d:14:2c:f7:85:1e:f7:b5:
                    fe:ef:03:22:93:58:10:70:28:8e:5f:bc:54:2f:58:
                    91:12:dd:1c:c2:bf:91:a8:b7:ec:f2:64:8b:cc:a5:
                    72:d4:37:ce:6d:a4:60:b6:61:e0:59:a6:08:5f:88:
                    3b:85:f7:47:71:6d:99:ed:47:25:ab:ef:63:e3:d7:
                    72:b6:e5:15:9c:39:f7:d4:41:c9:fb:cb:9b:21:3c:
                    6d:95:2c:63:72:31:43:00:a0:60:b6:f7:09:d4:97:
                    3e:e0:17:cc:c4:ca:ae:2e:0d:30:30:61:bd:3f:33:
                    66:bb:38:60:15:52:04:9b:c8:56:9a:fc:a5:d4:26:
                    49:d2:51:f0:31:21:ef:0f:d4:74:a0:77:d7:82:8a:
                    53:48:b1:2f:0a:89:6a:91:99:58:95:a8:99:6b:ec:
                    bb:c0:3a:c2:61:6e:85:4a:33:82:87:33:8a:b7:a9:
                    cf:d2:21:3c:46:30:9b:52:ac:3d:46:d0:16:de:0b:
                    30:e5:84:c3:de:bb:87:66:af:58:d6:5d:33:59:1d:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:71:5B:8B:D8:9C:18:4E:D2:62:BB:69:BD:E0:59:6C:94:9C:A5:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:cf:d3:7f:01:9c:97:22:5f:92:7f:ba:0a:ee:94:25:d9:4b:
         d5:05:ea:e7:36:8d:0a:0d:d7:62:5e:19:cb:d4:05:8b:06:02:
         b4:ec:b1:c8:24:13:11:a4:03:f5:f5:17:c3:32:22:49:6b:92:
         ac:81:0c:4d:26:89:16:e0:6c:b9:2b:5a:25:a7:b9:c5:20:8f:
         56:e2:53:fa:c4:1b:a0:ac:77:d1:c9:b6:e2:39:3f:fa:34:2c:
         24:b8:04:fc:95:a9:46:7c:6d:f1:e6:e1:37:39:33:3d:9a:80:
         f4:18:07:8d:85:3d:66:ca:80:e9:32:b0:4f:1e:e9:dc:17:58:
         5e:63:aa:75:55:34:f9:16:3f:5f:91:c5:7a:93:bd:81:d3:d8:
         f5:46:bd:e6:9d:85:ab:d7:e7:89:87:ed:d7:57:5b:08:99:89:
         25:ce:78:e6:f3:05:ef:bb:7b:2f:4e:41:4c:e7:70:73:53:f6:
         17:e3:e0:88:ad:82:85:8e:3b:60:48:8b:4f:97:2d:41:34:9f:
         49:61:19:b5:c6:3c:24:13:8d:b4:49:dd:c2:43:18:b4:55:76:
         09:92:55:bd:fc:6c:21:33:24:f6:79:9c:ce:71:2d:55:52:28:
         22:69:cf:73:d1:cc:37:f5:3b:cb:4c:b8:0a:e9:d7:7f:b3:49:
         83:9a:a1:b4
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1E+jwnrBiVwr+AdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz
YjU3MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
OGE5MmIzODctZjAxNC00MDdhLWJkMTEtZTg2OGZlM2IyZDVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtetsjirQ8OXHNdC2x54Sd8IA1LazCd85pdwe
5e5c3/dtAcj5tLNqwOFNBMv7yUnnXx6kjRQs94Ue97X+7wMik1gQcCiOX7xUL1iR
Et0cwr+RqLfs8mSLzKVy1DfObaRgtmHgWaYIX4g7hfdHcW2Z7Uclq+9j49dytuUV
nDn31EHJ+8ubITxtlSxjcjFDAKBgtvcJ1Jc+4BfMxMquLg0wMGG9PzNmuzhgFVIE
m8hWmvyl1CZJ0lHwMSHvD9R0oHfXgopTSLEvColqkZlYlaiZa+y7wDrCYW6FSjOC
hzOKt6nP0iE8RjCbUqw9RtAW3gsw5YTD3ruHZq9Y1l0zWR1fQwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFM9xW4vYnBhO0mK7ab3gWWyUnKWoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1
ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvZTZiNTkwNjAtZmJlYi0z
MTRjLTkyZTEtZmRiODg1ZmJlZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2
OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3
M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi
MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC
ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADDP038BnJciX5J/ugrulCXZS9UF6uc2jQoN12JeGcvUBYsG
ArTsscgkExGkA/X1F8MyIklrkqyBDE0miRbgbLkrWiWnucUgj1biU/rEG6Csd9HJ
tuI5P/o0LCS4BPyVqUZ8bfHm4Tc5Mz2agPQYB42FPWbKgOkysE8e6dwXWF5jqnVV
NPkWP1+RxXqTvYHT2PVGveadhavX54mH7ddXWwiZiSXOeObzBe+7ey9OQUzncHNT
9hfj4IitgoWOO2BIi0+XLUE0n0lhGbXGPCQTjbRJ3cJDGLRVdgmSVb38bCEzJPZ5
nM5xLVVSKCJpz3PRzDf1O8tMuArp13+zSYOaobQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:02 2026 by rpki-client