Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/415e3683-0f28-3e16-8ac7-65a221b93381.roa
File:                     415e3683-0f28-3e16-8ac7-65a221b93381.roa (raw, json)
Hash identifier:          XC6o2mw8r707WGRwJLrg+WIRD4XD+Ae3JNDVbmJP1JU=
Subject key identifier:   69:D3:84:35:AF:9E:4C:A0:E1:52:AF:33:4B:9D:C3:42:52:0F:84:CA
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584E296F06293425EAE7144AFB80
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/415e3683-0f28-3e16-8ac7-65a221b93381.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     32787
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:06:29:34:25:ea:e7:14:4a:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=24093c7a-99b9-47c5-abbe-9480b2289e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:37:c3:f8:2a:d5:d9:c9:59:78:11:60:1f:
                    4a:e5:c2:f2:ca:8f:70:61:7c:be:88:b8:57:1a:16:
                    a1:e4:37:ba:0e:c6:b7:83:9a:a3:8c:18:53:9b:05:
                    8d:fc:de:a9:7d:c1:27:9c:83:30:7e:95:da:e8:2a:
                    f7:40:f8:37:6d:53:74:2f:02:5e:b7:bb:45:63:45:
                    07:e4:0a:b4:88:be:e6:1f:65:57:d3:28:69:37:d7:
                    f9:3b:76:1f:2a:d6:ee:af:4d:02:7c:2f:4b:a9:ac:
                    d3:f1:4b:0f:c1:e5:ff:9b:5a:61:9d:f7:98:31:2a:
                    21:63:48:ac:41:47:ac:87:5c:b8:b8:65:0f:76:dd:
                    b6:d7:3e:73:72:bc:4b:12:dd:bb:dd:f8:ed:2f:5a:
                    7e:9d:e4:7f:2e:0a:f8:a6:cb:75:ea:ac:7b:05:71:
                    ea:82:f3:3a:57:c1:c9:84:72:ed:bb:b9:a3:ba:7f:
                    26:6c:32:e1:92:d0:14:c2:52:a3:fc:fd:6b:49:20:
                    77:5e:cd:56:32:7c:c4:cc:e7:5a:74:89:41:db:6e:
                    f3:b0:b7:5f:00:c1:64:bb:53:9a:12:40:5d:26:fa:
                    bc:92:74:a9:33:83:3a:0b:7b:9d:e0:7f:8b:6b:73:
                    fd:54:49:15:c4:d2:42:cf:97:22:37:9e:7c:a2:c7:
                    c1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D3:84:35:AF:9E:4C:A0:E1:52:AF:33:4B:9D:C3:42:52:0F:84:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/415e3683-0f28-3e16-8ac7-65a221b93381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:3f:2a:01:04:06:2e:ac:cf:42:a8:36:51:15:1d:b5:63:22:
         5e:e9:cf:f2:9e:71:1a:8c:47:be:6c:4f:2d:2a:d9:b1:67:ee:
         60:00:e6:71:c2:5e:b2:78:79:8e:7e:9e:b1:98:bd:0b:30:84:
         ff:dc:ca:f9:70:06:6d:ca:56:d3:06:19:09:a9:af:16:fc:a5:
         64:dd:89:24:e8:71:1f:7f:a3:dc:d0:b3:66:ac:96:6a:65:3c:
         a1:c8:cb:ac:94:9a:6c:d0:15:fb:94:b5:c4:86:70:33:be:20:
         91:1e:43:b8:42:ef:5b:a3:5a:b5:d5:d7:d5:f6:d6:d1:8d:c7:
         ae:64:f6:83:13:75:3c:b5:f9:13:66:06:6c:7e:f3:95:92:16:
         6b:cf:38:46:41:41:c5:de:f9:40:08:f7:2b:a2:40:79:55:0d:
         d0:8a:f1:e6:19:b3:99:14:f5:c3:89:39:42:d2:3a:67:75:63:
         e0:68:0c:10:6f:6a:86:d1:d8:d7:e5:51:74:47:47:35:62:34:
         80:cd:dc:95:06:c3:17:39:61:39:9d:73:f3:54:4d:c0:0b:2a:
         41:a4:61:7e:6c:17:11:b0:6b:6c:09:0a:de:99:91:4e:b8:89:
         d2:6c:9d:86:da:1f:b5:63:54:11:94:6b:13:6d:1c:03:84:cc:
         23:e1:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:15:42 2026 by rpki-client