Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/b012a3db-318f-34a5-8e9d-74105cfce13e.roa
File:                     b012a3db-318f-34a5-8e9d-74105cfce13e.roa (raw, json)
Hash identifier:          YLu0mXMfVxe7upelOL8swDOUTRvuBn+2lCfO6UOSV4M=
Subject key identifier:   0C:BC:B1:8B:C7:00:02:38:5F:00:9D:4C:89:F0:21:5D:8F:FD:89:72
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584AA42B7B0887EAE604F294F100
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/b012a3db-318f-34a5-8e9d-74105cfce13e.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     209
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7b:08:87:ea:e6:04:f2:94:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=0b59caa6-18e9-47a8-b8b7-d4d5e812bf8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:12:71:44:7b:56:d5:59:c6:01:27:f3:19:
                    20:47:c3:27:cd:9a:0f:66:05:75:04:89:6b:a7:0e:
                    f6:37:43:51:65:8a:55:56:f2:b3:8d:c2:08:db:31:
                    d6:85:79:23:0a:bb:93:1e:cc:85:e5:31:75:c9:34:
                    06:77:5b:b5:30:58:3a:b6:cc:a6:e8:8d:ba:f4:d2:
                    ed:f5:db:49:58:80:75:5f:d1:4e:c3:68:a5:f7:73:
                    50:f8:dd:8f:bf:80:e2:06:d3:d4:91:7a:11:a0:ba:
                    f5:cd:f5:c0:af:29:a9:c2:96:0a:89:ed:db:f5:3d:
                    94:f6:d7:f1:0c:0f:a2:6f:c3:43:a3:32:68:8c:4e:
                    1e:d6:aa:58:f9:e8:be:4d:32:20:5d:3d:d6:2d:e8:
                    93:f4:86:07:e7:ab:57:6a:9b:14:3f:82:9d:8a:d5:
                    40:f8:a8:5d:44:9e:7c:35:8d:9d:b3:01:e5:08:e2:
                    66:b1:fc:ce:92:53:77:f8:98:ec:cb:6a:3c:b5:f1:
                    32:8d:28:1e:9e:21:58:93:64:14:dd:a8:32:e3:28:
                    13:36:4f:e4:13:e3:e8:df:27:b0:4c:07:ec:f1:3c:
                    30:83:27:99:95:80:30:7d:c8:88:08:28:7f:42:91:
                    97:de:5e:c6:32:1f:df:fb:a5:fd:9d:dd:f1:64:31:
                    85:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BC:B1:8B:C7:00:02:38:5F:00:9D:4C:89:F0:21:5D:8F:FD:89:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/b012a3db-318f-34a5-8e9d-74105cfce13e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:3c:ee:d8:65:97:aa:da:bc:9f:57:ae:2b:a7:83:32:34:ae:
         47:6a:e5:67:3b:cb:09:fc:c7:a8:bd:af:f8:25:19:45:a7:7a:
         c3:de:82:0d:50:97:1e:f0:3b:82:77:84:95:56:d0:b7:b7:28:
         a5:e7:81:94:95:76:a2:7f:14:15:0e:54:a6:c0:6c:25:c2:1d:
         d1:01:bb:8f:c4:25:8c:89:96:8c:c6:e1:a1:09:96:10:7b:9d:
         85:a3:ac:c4:77:f5:58:6e:22:73:a7:e2:4c:26:a5:07:a0:82:
         71:41:3e:13:d0:d2:51:19:91:ad:87:13:75:db:27:9f:62:7e:
         33:1e:e5:21:79:89:d0:1e:ed:b5:4c:8c:f1:3c:c6:18:03:8a:
         e1:1e:f4:8c:5d:1d:f9:45:90:bf:8f:96:49:57:58:e6:e6:59:
         1a:b0:8e:33:2a:f3:7a:3c:5b:29:6e:af:4f:13:72:39:d9:53:
         98:5e:5b:86:5e:86:7e:5a:7c:a8:02:fc:da:d6:0b:22:dd:b0:
         b5:2e:2e:03:83:e3:e4:1f:a0:b3:33:f7:fa:00:53:5e:32:dd:
         e8:0a:5c:57:22:ae:c5:66:eb:f7:83:04:7a:44:97:e4:83:b2:
         01:2e:b3:bb:db:87:2a:0d:dc:3a:47:87:c2:a8:a3:fa:62:1d:
         36:d5:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:54 2025 by rpki-client