Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/c0557beb-1f73-3ff4-a7a2-445061a909e2.roa
File:                     c0557beb-1f73-3ff4-a7a2-445061a909e2.roa (raw, json)
Hash identifier:          VxfBRWpUqb0VjXka7cbWQPm6gqZaOSUI/r0jMxsX18E=
Subject key identifier:   B6:C6:83:FA:29:7F:1F:07:5D:FE:3B:B5:DC:88:E2:F7:37:64:F7:02
Certificate issuer:       /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Certificate serial:       010D0C9F4328584AE74B953053C8E09A27E059E0
Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/c0557beb-1f73-3ff4-a7a2-445061a909e2.roa
Signing time:             Tue 19 Aug 2025 02:04:47 +0000
ROA not before:           Tue 19 Aug 2025 02:04:47 +0000
ROA not after:            Mon 17 Nov 2025 03:04:47 +0000
asID:                     398704
IP address blocks:        141.195.120.0/24 maxlen: 24
                          141.195.121.0/24 maxlen: 24
                          141.195.122.0/24 maxlen: 24
                          141.195.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e7:4b:95:30:53:c8:e0:9a:27:e0:59:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
        Validity
            Not Before: Aug 19 02:04:47 2025 GMT
            Not After : Nov 17 03:04:47 2025 GMT
        Subject: CN=97ca3d58-509c-414b-baea-986449f08361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:dc:f0:82:5c:dc:02:28:3a:58:da:1b:31:
                    bc:1b:db:bc:68:5b:c2:6d:72:d0:77:34:1d:5a:8b:
                    35:48:36:9b:53:0b:e6:e4:03:da:fe:9d:c5:07:c7:
                    89:f1:9a:b5:81:5a:b1:df:92:bb:be:84:ef:fc:7c:
                    4b:7e:c9:8f:33:94:91:24:cc:73:e0:ce:fa:ac:fe:
                    8e:a1:50:e3:aa:de:be:93:4c:01:b6:c6:d9:98:53:
                    3d:0b:ef:f1:bf:ee:5c:42:5a:bd:f9:6c:b0:5c:fe:
                    44:7a:78:59:a0:14:80:f0:af:67:80:6a:09:26:8c:
                    3b:4b:9e:72:62:26:31:6f:46:0c:75:6c:7a:42:63:
                    40:33:a6:f9:39:f4:7b:14:51:bb:24:b6:c1:98:5d:
                    49:f8:32:45:c3:f9:e8:2b:5d:13:20:48:ff:21:9b:
                    31:9e:d7:d2:6f:14:6d:ec:74:e5:ca:28:96:cb:ce:
                    71:e5:6b:50:7b:69:c9:98:24:43:0f:ee:19:e8:aa:
                    bc:c4:d2:80:7f:a7:d5:02:35:b2:81:4d:46:a8:5e:
                    70:31:1e:f8:ec:20:a1:df:26:1c:49:13:99:ed:8c:
                    f1:29:6a:7f:81:46:19:72:4c:bc:4d:1d:23:24:a6:
                    84:0c:81:3d:97:f6:92:8f:2f:39:29:4e:6b:52:b2:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C6:83:FA:29:7F:1F:07:5D:FE:3B:B5:DC:88:E2:F7:37:64:F7:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/c0557beb-1f73-3ff4-a7a2-445061a909e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl

            X509v3 Authority Key Identifier:
                keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:bb:0b:02:d8:e0:9f:07:b8:12:18:a4:7e:de:e6:7c:35:c4:
         6b:22:1a:4b:16:7a:54:1c:2c:bf:dd:95:f7:3c:d7:c0:97:d3:
         df:cf:1e:6c:ee:24:66:1f:d5:5c:27:8b:b0:32:ce:23:9b:aa:
         1e:36:9a:f7:0f:cb:80:71:97:df:ab:7b:14:08:13:97:ba:2b:
         62:b5:e1:74:79:50:ad:33:cd:89:58:71:2d:36:32:b5:cd:a1:
         b7:b0:07:f2:55:86:73:b6:93:7a:a6:c7:8e:68:db:c8:e5:f3:
         db:73:a0:9f:2b:67:a3:fb:2d:c0:e1:6f:90:5f:87:ea:6a:ac:
         05:b9:a6:83:05:62:62:e9:eb:57:bb:dc:2e:bf:44:20:72:b7:
         75:2d:22:3c:54:42:9d:26:2a:ef:75:7e:df:87:8f:db:08:54:
         f7:61:50:26:5e:73:be:09:72:9d:f5:ad:9a:01:a9:80:20:74:
         75:9f:51:89:ea:65:67:f1:ff:7c:48:23:8d:41:f8:ad:91:7e:
         a3:b6:7d:43:d8:85:78:49:cf:6a:2f:1e:89:f3:d5:e8:f9:65:
         b7:20:ac:c5:f3:52:5b:b7:3c:db:f9:ea:7c:ad:74:b6:c2:aa:
         d6:26:e8:ab:cf:de:d3:fe:9a:0e:79:ca:5a:26:33:75:d2:d3:
         1c:0a:ed:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErnS5UwU8jgmifgWeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmZDljODctOWRjOC00OGMyLTljN2QtZTcyNDEyYTM1
ZTVjMB4XDTI1MDgxOTAyMDQ0N1oXDTI1MTExNzAzMDQ0N1owLzEtMCsGA1UEAxMk
OTdjYTNkNTgtNTA5Yy00MTRiLWJhZWEtOTg2NDQ5ZjA4MzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv7c8IJc3AIoOljaGzG8G9u8aFvCbXLQdzQd
Wos1SDabUwvm5APa/p3FB8eJ8Zq1gVqx35K7voTv/HxLfsmPM5SRJMxz4M76rP6O
oVDjqt6+k0wBtsbZmFM9C+/xv+5cQlq9+WywXP5EenhZoBSA8K9ngGoJJow7S55y
YiYxb0YMdWx6QmNAM6b5OfR7FFG7JLbBmF1J+DJFw/noK10TIEj/IZsxntfSbxRt
7HTlyiiWy85x5WtQe2nJmCRDD+4Z6Kq8xNKAf6fVAjWygU1GqF5wMR747CCh3yYc
SROZ7YzxKWp/gUYZcky8TR0jJKaEDIE9l/aSjy85KU5rUrIwnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLbGg/opfx8HXf47tdyI4vc3ZPcCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZk
OWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0MTJhMzVlNWMvYzA1NTdiZWItMWY3My0z
ZmY0LWE3YTItNDQ1MDYxYTkwOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjBmZDljODctOWRjOC00OGMyLTlj
N2QtZTcyNDEyYTM1ZTVjLzYwZmQ5Yzg3LTlkYzgtNDhjMi05YzdkLWU3MjQxMmEz
NWU1Yy5jcmwwHwYDVR0jBBgwFoAUNi3cZad6EHPmFuNH94D90YlnPrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZkOWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0
MTJhMzVlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcN4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFy7CwLY4J8HuBIYpH7e5nw1xGsiGksWelQcLL/dlfc818CX09/PHmzu
JGYf1Vwni7AyziObqh42mvcPy4Bxl9+rexQIE5e6K2K14XR5UK0zzYlYcS02MrXN
obewB/JVhnO2k3qmx45o28jl89tzoJ8rZ6P7LcDhb5Bfh+pqrAW5poMFYmLp61e7
3C6/RCByt3UtIjxUQp0mKu91ft+Hj9sIVPdhUCZec74Jcp31rZoBqYAgdHWfUYnq
ZWfx/3xII41B+K2RfqO2fUPYhXhJz2ovHonz1ej5ZbcgrMXzUlu3PNv56nytdLbC
qtYm6KvP3tP+mg55ylomM3XS0xwK7bA=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:54 2025 by rpki-client