Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/0e4645bc-c3fe-36b8-8d81-10da41797a09.roa
File:                     0e4645bc-c3fe-36b8-8d81-10da41797a09.roa (raw, json)
Hash identifier:          E3d6WtCu+Xq1W4dl9HxZ4QJPdu9tM+bbMlqRMTi6ubI=
Subject key identifier:   B1:AE:53:71:E7:EF:B0:99:E0:FB:82:6F:69:4C:F0:02:5A:12:34:F1
Certificate issuer:       /CN=d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17
Certificate serial:       010D0C9F4328584A25B8207035C94F8813154980
Authority key identifier: D1:8E:3F:84:49:98:82:D7:24:A2:C8:3F:24:E3:63:0B:16:31:62:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/0e4645bc-c3fe-36b8-8d81-10da41797a09.roa
Signing time:             Tue 10 Jun 2025 17:56:40 +0000
ROA not before:           Tue 10 Jun 2025 17:56:40 +0000
ROA not after:            Mon 08 Sep 2025 17:56:40 +0000
asID:                     46572
IP address blocks:        139.60.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:25:b8:20:70:35:c9:4f:88:13:15:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17
        Validity
            Not Before: Jun 10 17:56:40 2025 GMT
            Not After : Sep  8 17:56:40 2025 GMT
        Subject: CN=bf3a4511-cefd-413b-9eba-734da4db67e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:ee:08:d5:4a:ee:b6:70:de:f4:01:2b:23:
                    71:d7:ea:df:a4:ba:f7:99:c3:58:60:c5:52:97:f8:
                    ce:32:97:e8:89:19:23:f5:e5:54:d4:ec:5a:3d:d7:
                    d7:05:85:cd:96:5e:79:a5:b4:6e:ec:60:6f:92:f5:
                    c5:e0:e9:5c:26:25:e8:69:74:fa:0b:56:08:ec:a6:
                    76:16:b2:ae:55:96:bd:e2:af:f4:20:af:f6:46:9e:
                    74:68:b0:84:ac:a2:61:28:67:90:12:e4:ca:b8:df:
                    6e:73:96:f2:82:e5:d4:ce:84:bc:38:c5:59:b9:0c:
                    5f:19:7d:09:2d:7d:fa:3f:32:5e:c6:f4:dc:bd:76:
                    48:36:f3:ba:fb:15:a1:a5:0d:46:fd:63:70:a6:8b:
                    23:9b:9b:d8:08:40:75:00:2c:5a:9a:1c:6a:14:29:
                    b3:cd:3b:f5:23:ed:e5:65:71:f6:dd:c5:76:47:1a:
                    7e:0c:d0:00:5f:e9:c4:80:11:72:b7:2c:16:2c:84:
                    e4:56:86:99:fb:5a:75:2c:9d:ea:e6:24:dc:49:21:
                    8c:32:82:8c:26:0a:db:a0:1f:27:6a:41:b1:84:0a:
                    fc:91:89:8c:ba:3a:df:79:9c:78:60:47:6c:08:df:
                    97:04:4a:2d:49:49:d5:37:d7:96:4c:2f:6e:b8:f1:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AE:53:71:E7:EF:B0:99:E0:FB:82:6F:69:4C:F0:02:5A:12:34:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/0e4645bc-c3fe-36b8-8d81-10da41797a09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.crl

            X509v3 Authority Key Identifier:
                keyid:D1:8E:3F:84:49:98:82:D7:24:A2:C8:3F:24:E3:63:0B:16:31:62:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:3b:4c:fd:15:44:db:54:68:8d:06:62:77:84:5c:17:5b:eb:
         ee:c0:30:bf:7f:05:8c:c9:4c:75:bd:4b:9c:fe:50:64:9c:e8:
         ff:58:d1:1e:76:22:74:7e:31:3f:6c:3d:d1:45:9a:2d:5b:f9:
         4e:62:48:7f:45:d3:7b:45:0a:c1:94:85:f0:64:1a:fe:7f:7a:
         6f:42:79:07:c9:77:95:fb:8c:80:50:20:6f:80:d5:ee:b4:de:
         2d:a1:12:3f:8d:28:95:f1:34:6b:01:a9:65:82:3c:01:03:bf:
         81:b7:08:93:0d:28:a0:aa:d8:f2:2b:dd:d5:95:cf:9b:54:2c:
         94:ee:1e:9a:6b:25:28:a8:35:57:df:a2:a0:03:b8:7c:25:27:
         55:1f:09:ed:de:fe:9e:9e:b3:d4:95:56:ea:f3:1d:93:39:2d:
         52:ab:64:49:bb:91:6d:4d:b4:7a:e0:c1:08:17:0c:cd:f5:e9:
         6c:75:a2:39:54:13:f1:a0:13:a2:b0:94:0f:b8:c3:e4:4e:a0:
         73:d4:30:49:06:88:ca:be:fb:f0:6f:41:b6:04:34:80:2d:74:
         16:ee:2b:9f:db:03:b7:21:00:5d:a1:0f:5d:c3:50:82:f4:79:
         94:97:d3:1d:86:3b:0c:23:fc:31:68:0d:df:d6:c5:68:62:90:
         7d:fb:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:18:20 2025 by rpki-client