Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8/2a2fd522-a857-35ff-9d95-ec6b7744cf7f.roa
File:                     2a2fd522-a857-35ff-9d95-ec6b7744cf7f.roa (raw, json)
Hash identifier:          O+rf94QXm9CyWL62W/qoJF/MgQqWL5Pb5XAh24C5+KI=
Subject key identifier:   1F:4B:80:ED:11:93:C5:2F:BB:1E:C5:7E:CA:2E:07:34:96:9A:E9:42
Certificate issuer:       /CN=a51b800a-cdc8-4235-aaa3-e8dad4043af8
Certificate serial:       010D0C9F4328584A9FFBAD560F4ECBE61067B2E0
Authority key identifier: AE:D8:54:17:2D:6E:59:A4:6A:0D:3D:A2:3D:F9:35:71:EA:15:4D:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8/2a2fd522-a857-35ff-9d95-ec6b7744cf7f.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     46956
IP address blocks:        139.60.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8/a51b800a-cdc8-4235-aaa3-e8dad4043af8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8/a51b800a-cdc8-4235-aaa3-e8dad4043af8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:ad:56:0f:4e:cb:e6:10:67:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a51b800a-cdc8-4235-aaa3-e8dad4043af8
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=81073243-eb6c-445a-9d55-2f0708be3bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:f4:98:34:82:25:6d:13:6d:a0:7c:ce:b2:
                    1d:8c:28:47:cc:43:11:06:57:71:3f:a9:d7:64:06:
                    46:62:e9:6d:fe:3c:47:af:82:8f:f5:66:38:1d:23:
                    62:10:16:20:cf:f1:a1:c1:86:4a:8b:6a:91:df:0d:
                    c1:50:02:9a:c8:45:02:5a:c4:56:d5:4b:26:09:e4:
                    bd:46:b0:9d:c3:ef:65:b3:44:de:51:2e:c1:9f:20:
                    b2:94:f8:99:08:f2:21:05:bb:a1:0f:26:15:1f:df:
                    49:f9:98:8d:7b:e8:24:35:82:c3:73:f3:26:8a:3e:
                    e4:1f:a0:0c:90:80:d5:87:8b:4e:42:36:ae:01:6a:
                    14:69:0b:67:b2:33:da:5e:7c:f5:87:77:4c:93:32:
                    49:64:ce:4b:48:f1:83:0f:67:2e:d1:56:e9:0c:fa:
                    dc:a4:20:aa:5a:62:53:ca:70:53:39:b2:e1:14:a7:
                    43:35:b9:71:c2:57:11:8d:b7:be:eb:ce:82:f6:26:
                    6b:ce:06:59:39:ba:24:74:3b:a4:78:4d:c0:a9:e4:
                    dc:26:63:ac:86:65:0c:99:58:d8:30:be:d7:c5:bb:
                    ef:c4:5f:29:8c:0e:c5:d9:d0:a4:5d:71:70:14:fa:
                    0d:11:a7:27:b5:c1:9e:0c:fc:c6:ba:3a:e0:88:67:
                    48:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4B:80:ED:11:93:C5:2F:BB:1E:C5:7E:CA:2E:07:34:96:9A:E9:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8/2a2fd522-a857-35ff-9d95-ec6b7744cf7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8/a51b800a-cdc8-4235-aaa3-e8dad4043af8.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D8:54:17:2D:6E:59:A4:6A:0D:3D:A2:3D:F9:35:71:EA:15:4D:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a51b800a-cdc8-4235-aaa3-e8dad4043af8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e3:a3:0e:6a:70:a1:06:3f:e4:a6:a7:f7:d0:c4:6d:8b:22:
         37:0d:3a:0c:b1:93:9c:96:b4:4b:ba:ec:e1:54:74:89:a7:23:
         4c:32:73:f9:ad:2c:e4:57:b0:7c:99:1d:a6:c3:9a:d7:a8:2e:
         a7:bf:3b:32:3c:4e:76:a0:03:58:ee:a2:ff:54:39:61:54:12:
         94:2d:88:1f:3a:30:9a:05:24:87:ec:73:69:8c:7e:b3:4b:d9:
         76:d4:49:34:d4:f3:70:c4:d6:28:e1:c2:e2:b9:b1:ee:90:90:
         fb:10:57:c4:6c:c9:38:7f:85:c9:cc:b0:18:53:61:ef:13:5e:
         71:27:48:6a:d9:6d:64:ab:93:95:c8:b2:a5:e4:ba:71:44:0c:
         86:19:39:bb:d5:8d:ab:ef:ff:3b:84:b9:57:0e:41:06:ea:69:
         44:06:aa:53:1d:bd:a5:f0:c4:9c:4c:25:62:53:69:e8:bc:38:
         38:2b:56:dc:24:5a:f9:57:73:31:18:09:08:af:b0:4f:bd:48:
         a7:9f:f7:fb:a4:6e:b2:1b:4a:16:e0:42:c8:64:f8:77:92:06:
         94:7e:ab:84:17:d8:74:a5:c7:14:33:b3:32:56:0b:d5:e1:84:
         8a:59:3e:81:39:77:fe:9f:aa:08:35:c5:2a:55:26:07:01:87:
         0f:65:87:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:07:59 2025 by rpki-client