Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa
File:                     e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa (raw, json)
Hash identifier:          M3BvqpFxnh/DvX+3wO3TgVmbA4nXfl3tfLYFdtwxlBU=
Subject key identifier:   D7:EB:20:28:3C:E5:5D:22:1C:4B:1B:4F:C3:FC:90:91:B1:3B:45:CC
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F43285849C4D4BF742759FB9E324DF240
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     174
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:bf:74:27:59:fb:9e:32:4d:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=65c123ac-83d7-4d12-9bd7-e12b431cf442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:da:e6:e2:c5:96:b6:66:e3:61:3b:cc:65:
                    54:39:d1:cb:e3:91:38:81:d8:a0:10:35:e7:76:d5:
                    ca:06:48:26:f1:41:9f:9a:7e:48:8d:b1:91:90:47:
                    7f:ce:7d:7d:f5:e0:97:1a:6b:93:56:7b:52:61:bd:
                    6f:8a:3a:92:53:36:c5:7c:92:ad:e9:a7:7c:c8:ea:
                    87:2a:de:af:9c:bc:6a:65:e4:85:bf:dc:01:e0:83:
                    bf:ef:c3:97:4b:a3:78:1b:ac:46:a7:f0:f1:23:af:
                    53:41:a9:e5:e6:67:5a:4a:94:9b:6d:5c:2f:72:7c:
                    6a:a7:b1:35:c0:bd:69:0d:1f:e1:69:79:27:c3:16:
                    5f:78:0c:e4:fa:5d:73:7c:f2:20:d2:08:e9:7b:93:
                    20:bb:9f:90:1d:44:5e:53:a7:35:02:fc:d1:4f:3e:
                    51:01:c6:bf:ea:4e:fc:a2:1d:c7:58:90:08:36:c1:
                    5c:26:7b:4e:c4:74:12:b2:21:2b:22:18:af:d9:ab:
                    cc:00:35:a5:39:d5:4a:dd:fb:84:28:80:88:7b:ef:
                    87:71:23:8c:43:5e:29:74:82:95:e6:de:9a:62:0d:
                    a6:9d:04:90:b2:c9:ce:02:39:67:4a:9c:2b:96:49:
                    e1:8f:0f:8d:cb:9f:81:27:76:80:08:5c:9b:36:0e:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EB:20:28:3C:E5:5D:22:1C:4B:1B:4F:C3:FC:90:91:B1:3B:45:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e6b59060-fbeb-314c-92e1-fdb885fbedc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:cf:1e:f8:09:f1:74:16:ff:25:98:16:6a:b1:0c:e8:48:d3:
         b2:e1:e7:14:01:2e:28:6a:c2:be:33:51:56:21:88:aa:6a:85:
         74:6c:46:0b:ed:7e:f3:0c:7c:40:5c:cb:73:56:b5:c1:df:82:
         d7:0f:cb:c7:2b:7f:a2:8c:7d:b1:31:22:92:76:70:a8:a2:83:
         d5:32:cb:ba:f6:ca:e5:eb:df:1d:85:d1:45:c1:a1:fb:06:ec:
         f2:c7:ee:36:2f:e9:05:52:4f:77:3a:03:5e:da:c9:1e:74:3b:
         77:2d:69:d6:d9:2a:9b:ff:cc:db:40:ed:63:fa:e2:bd:a1:18:
         36:5a:22:ba:7c:74:06:eb:b1:c5:14:32:37:b7:d6:cd:cb:05:
         20:3d:eb:4b:87:85:1d:ed:3c:fd:8d:8e:7e:7f:7b:52:ba:08:
         a6:5f:4f:2c:46:80:ac:5e:89:a3:6d:36:e0:10:10:45:c2:43:
         f1:b3:b3:2e:86:7f:2a:de:9c:a6:e0:0d:6f:8a:05:70:a4:55:
         c2:5d:04:8b:d3:3f:a1:b1:32:90:6c:86:96:96:ec:3a:a3:2f:
         53:5e:4a:e3:d8:d6:5f:b7:c4:1e:b7:19:ec:68:4c:1b:90:79:
         dc:88:87:ed:95:6e:fe:73:83:dc:ff:67:d8:ff:d0:bd:e1:fa:
         f7:ad:33:2b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnE1L90J1n7njJN8kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz
YjU3MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk
NjVjMTIzYWMtODNkNy00ZDEyLTliZDctZTEyYjQzMWNmNDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMLa5uLFlrZm42E7zGVUOdHL45E4gdigEDXn
dtXKBkgm8UGfmn5IjbGRkEd/zn199eCXGmuTVntSYb1vijqSUzbFfJKt6ad8yOqH
Kt6vnLxqZeSFv9wB4IO/78OXS6N4G6xGp/DxI69TQanl5mdaSpSbbVwvcnxqp7E1
wL1pDR/haXknwxZfeAzk+l1zfPIg0gjpe5Mgu5+QHUReU6c1AvzRTz5RAca/6k78
oh3HWJAINsFcJntOxHQSsiErIhiv2avMADWlOdVK3fuEKICIe++HcSOMQ14pdIKV
5t6aYg2mnQSQssnOAjlnSpwrlknhjw+Ny5+BJ3aACFybNg59iQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNfrICg85V0iHEsbT8P8kJGxO0XMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1
ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvZTZiNTkwNjAtZmJlYi0z
MTRjLTkyZTEtZmRiODg1ZmJlZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2
OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3
M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi
MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC
ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABjPHvgJ8XQW/yWYFmqxDOhI07Lh5xQBLihqwr4zUVYhiKpq
hXRsRgvtfvMMfEBcy3NWtcHfgtcPy8crf6KMfbExIpJ2cKiig9Uyy7r2yuXr3x2F
0UXBofsG7PLH7jYv6QVST3c6A17ayR50O3ctadbZKpv/zNtA7WP64r2hGDZaIrp8
dAbrscUUMje31s3LBSA960uHhR3tPP2Njn5/e1K6CKZfTyxGgKxeiaNtNuAQEEXC
Q/Gzsy6GfyrenKbgDW+KBXCkVcJdBIvTP6GxMpBshpaW7DqjL1NeSuPY1l+3xB63
GexoTBuQedyIh+2Vbv5zg9z/Z9j/0L3h+vetMys=
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:33 2025 by rpki-client