Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa
File:                     cd0060f5-e37a-3324-8658-1489af29e5de.roa (raw, json)
Hash identifier:          avP6tmkmueg+DaR76fqCNZwwu7eSDcoSmkow9ggOh74=
Subject key identifier:   32:07:0F:8B:BD:A4:21:0E:21:91:73:AD:CF:FD:AF:E2:E9:A6:E8:28
Certificate issuer:       /CN=2805bc8b-434a-454a-85db-2fe9075e8548
Certificate serial:       010D0C9F43285849C4D4BA544A79312BF16A6000
Authority key identifier: A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     397299
IP address blocks:        139.60.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:ba:54:4a:79:31:2b:f1:6a:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2805bc8b-434a-454a-85db-2fe9075e8548
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=69886444-08b1-4a7c-9d82-b715e2420a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:de:6e:ac:91:ca:e1:74:d7:46:1b:01:c3:
                    80:8b:42:34:bc:f8:a7:a8:dd:53:5b:d8:d8:bf:59:
                    59:69:8c:28:29:dc:60:f6:8c:d8:c4:e6:d9:cb:e6:
                    36:bc:45:97:13:0e:01:f1:4a:7a:f0:26:28:dd:60:
                    94:37:62:a0:cd:b7:8c:ac:32:d3:58:85:51:37:44:
                    30:72:0b:67:3a:d4:ba:1a:2b:a4:b3:97:b4:85:ed:
                    79:93:af:1a:07:7f:3f:42:54:59:1d:9e:f6:cf:91:
                    01:69:1b:13:80:b2:34:b6:ed:85:4d:78:8f:32:df:
                    af:2f:40:b0:4c:62:79:5b:c1:33:c2:94:7b:c3:1f:
                    0c:cd:4f:29:43:16:51:62:51:ed:43:fb:26:d2:d5:
                    32:d0:cb:f6:38:17:ab:60:89:8a:95:fe:8a:42:86:
                    3a:8d:99:30:92:2f:65:b0:5c:31:51:a8:29:2f:ef:
                    97:36:b0:2c:37:eb:83:03:34:a0:e4:b0:27:58:63:
                    2e:67:e5:94:4b:e1:dd:8f:be:2c:7e:42:41:54:1f:
                    7a:f5:63:e8:9d:56:f8:f3:1f:3c:bb:5f:93:a6:3b:
                    1b:dd:62:57:3b:f8:73:24:1d:3a:d5:19:41:15:08:
                    3e:f1:3a:40:62:97:ad:aa:55:c8:fa:cf:f6:65:9d:
                    20:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:07:0F:8B:BD:A4:21:0E:21:91:73:AD:CF:FD:AF:E2:E9:A6:E8:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl

            X509v3 Authority Key Identifier:
                keyid:A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:17:a6:3c:ea:9a:d4:3d:e3:95:87:40:e7:93:c7:55:ce:8c:
         9f:27:80:95:05:ee:6e:77:3d:82:c5:01:e7:20:45:a3:d8:ff:
         c2:79:60:45:50:e6:c9:b2:e6:97:e4:21:0b:54:18:a4:30:b8:
         3b:75:00:ad:75:28:f2:47:55:94:e4:2c:d2:55:e2:46:33:32:
         d9:a6:68:a6:af:0c:0c:e4:df:4a:b9:d1:45:68:10:cf:05:07:
         44:8f:63:eb:2a:05:51:bd:5e:13:bf:0b:de:93:5c:52:05:1d:
         11:7b:ea:92:99:ec:42:d5:9b:21:d7:e7:f6:01:ff:f0:cb:b3:
         5a:59:f8:fb:a3:f5:61:98:ba:0b:6a:d9:fe:3a:b4:20:ad:f5:
         29:a4:0a:fc:bb:4f:38:9e:ac:d1:b8:6b:95:d1:38:05:b2:31:
         d1:5a:dd:28:86:5a:9c:e5:11:45:5e:8a:06:17:f1:d6:8a:af:
         33:b7:1b:f1:f3:4a:a3:bf:17:3e:f1:f5:ed:33:1f:b3:d2:9a:
         38:a5:52:da:a5:4a:b3:be:97:24:e5:99:21:59:93:af:83:0b:
         b2:fd:92:32:e7:42:3b:50:dc:72:48:10:d1:f2:33:d7:2c:1a:
         41:65:fc:70:6b:8e:9e:36:e0:fb:b2:3f:24:51:f2:81:ee:ad:
         26:de:1e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:21:31 2025 by rpki-client