Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/121a4e34-1b32-3478-b85b-832ea45ef7f6.roa
File:                     121a4e34-1b32-3478-b85b-832ea45ef7f6.roa (raw, json)
Hash identifier:          8R+G7XC5NUb7p3e8wemcSLmIGv1+WWRkbgZ6Qi2ldnc=
Subject key identifier:   E9:DF:CA:AB:D1:FF:6D:28:08:D0:06:9D:91:8E:89:37:46:AC:02:8A
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584E253EFD52ED709A5707B49980
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/121a4e34-1b32-3478-b85b-832ea45ef7f6.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     3356
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:fd:52:ed:70:9a:57:07:b4:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=89a64215-fcde-411e-a2e0-c60170d9c318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:0e:62:90:18:29:09:1e:0e:d9:2a:e5:8f:
                    f6:ec:71:8e:bf:ce:24:4a:14:aa:de:6d:c4:d6:17:
                    d0:e0:f0:46:8a:eb:09:95:fb:7f:ba:bc:fe:31:ca:
                    79:ec:a0:d5:40:66:9b:e4:cb:bc:40:a0:f0:fe:21:
                    71:79:61:d3:6c:4e:76:7e:70:fe:28:47:76:54:78:
                    cc:db:d1:7b:da:b4:aa:28:c3:12:e1:08:52:86:95:
                    d1:2a:df:a0:6b:61:a9:ad:dd:67:79:36:1c:83:f9:
                    fb:37:dd:f9:ff:34:3d:3f:bb:98:ca:43:0c:d7:3f:
                    de:e2:34:5f:d3:3f:5b:3c:50:a7:e2:0b:a5:fe:77:
                    3e:b3:18:4a:68:e5:75:b0:a6:79:43:db:f3:fd:9d:
                    a8:40:75:dc:f1:03:67:a4:32:0a:49:ed:b0:f3:0d:
                    b6:9b:bb:f1:c9:42:cc:96:55:37:f3:48:b5:90:e6:
                    13:3b:e9:61:55:d4:91:b6:06:34:e2:d1:ac:28:6b:
                    5b:8f:bc:65:34:15:e2:3c:95:a6:ba:b5:f5:db:a4:
                    7b:84:e3:2b:d9:3a:b7:95:b5:ab:8d:c1:0f:d9:b8:
                    88:6a:f3:35:24:51:75:66:7a:d2:c8:3d:97:ee:a1:
                    9b:56:67:d6:15:96:38:c9:a0:b5:0f:ec:af:da:1a:
                    f8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DF:CA:AB:D1:FF:6D:28:08:D0:06:9D:91:8E:89:37:46:AC:02:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/121a4e34-1b32-3478-b85b-832ea45ef7f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:81:85:25:c4:58:52:2c:ff:01:9d:00:4b:93:f0:35:ac:3d:
         40:55:a8:39:95:07:5f:6e:21:20:7c:36:48:63:6c:f5:b1:df:
         33:a8:66:e7:0d:fd:42:e2:fb:30:eb:a5:20:65:1b:51:7d:ac:
         35:e7:50:ce:84:b2:c7:26:35:20:cc:9c:7e:74:cd:d1:c3:18:
         c5:34:7b:d7:79:d7:c7:57:45:5c:3f:f0:42:e8:c6:db:d5:af:
         c7:67:b1:2d:74:f3:3b:eb:8c:a6:6f:87:90:f9:81:8f:78:e2:
         b9:12:79:84:e2:b1:fb:96:ec:29:57:33:b4:72:e8:cd:a0:e1:
         63:ca:c2:dc:8e:fc:68:c8:4a:1f:0b:60:97:70:23:97:3f:48:
         d0:07:46:fa:8b:4a:1a:e1:72:c1:ae:b6:bf:3c:b0:62:8e:f8:
         96:3d:25:6d:1c:67:fc:dc:6d:31:c2:ae:3a:a0:ba:75:06:20:
         46:a5:f0:c6:df:f2:d7:1c:a4:99:0c:e4:fa:1a:e6:b4:f6:f1:
         e3:d3:43:d0:a8:f3:43:b8:f4:ce:06:0f:8c:c5:a6:ec:f1:5f:
         65:09:e2:10:e4:6d:0d:43:75:77:ce:4f:6c:6e:ab:b1:a1:0f:
         5d:48:e8:2c:d6:09:3d:ff:0e:65:60:ff:69:f0:7e:6b:cc:64:
         ad:97:48:df
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4lPv1S7XCaVwe0mYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz
YjU3MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
ODlhNjQyMTUtZmNkZS00MTFlLWEyZTAtYzYwMTcwZDljMzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMMOYpAYKQkeDtkq5Y/27HGOv84kShSq3m3E
1hfQ4PBGiusJlft/urz+Mcp57KDVQGab5Mu8QKDw/iFxeWHTbE52fnD+KEd2VHjM
29F72rSqKMMS4QhShpXRKt+ga2Gprd1neTYcg/n7N935/zQ9P7uYykMM1z/e4jRf
0z9bPFCn4gul/nc+sxhKaOV1sKZ5Q9vz/Z2oQHXc8QNnpDIKSe2w8w22m7vxyULM
llU380i1kOYTO+lhVdSRtgY04tGsKGtbj7xlNBXiPJWmurX126R7hOMr2Tq3lbWr
jcEP2biIavM1JFF1ZnrSyD2X7qGbVmfWFZY4yaC1D+yv2hr43wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOnfyqvR/20oCNAGnZGOiTdGrAKKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1
ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvMTIxYTRlMzQtMWIzMi0z
NDc4LWI4NWItODMyZWE0NWVmN2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2
OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3
M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi
MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC
ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGiBhSXEWFIs/wGdAEuT8DWsPUBVqDmVB19uISB8NkhjbPWx
3zOoZucN/ULi+zDrpSBlG1F9rDXnUM6EsscmNSDMnH50zdHDGMU0e9d518dXRVw/
8ELoxtvVr8dnsS108zvrjKZvh5D5gY944rkSeYTisfuW7ClXM7Ry6M2g4WPKwtyO
/GjISh8LYJdwI5c/SNAHRvqLShrhcsGutr88sGKO+JY9JW0cZ/zcbTHCrjqgunUG
IEal8Mbf8tccpJkM5Poa5rT28ePTQ9Co80O49M4GD4zFpuzxX2UJ4hDkbQ1DdXfO
T2xuq7GhD11I6CzWCT3/DmVg/2nwfmvMZK2XSN8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:11:15 2026 by rpki-client