Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa
File:                     cd0060f5-e37a-3324-8658-1489af29e5de.roa (raw, json)
Hash identifier:          F5WE+t9HMELRM2uDvhL1FxtdPrlHwMl6cbve9Z9KBJA=
Subject key identifier:   75:82:73:DD:BA:58:A9:40:28:A8:BC:33:61:57:B5:1D:FA:51:F7:4C
Certificate issuer:       /CN=2805bc8b-434a-454a-85db-2fe9075e8548
Certificate serial:       010D0C9F4328584AA42B7D76E138995E95744300
Authority key identifier: A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     397299
IP address blocks:        139.60.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7d:76:e1:38:99:5e:95:74:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2805bc8b-434a-454a-85db-2fe9075e8548
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=ee3cd605-e0d8-4652-be0d-a9fb407669a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:58:ed:5c:c1:59:4c:8e:20:e0:c2:2f:5f:
                    6e:4e:d5:92:60:e3:45:ef:78:78:9e:e4:5e:13:43:
                    90:03:d8:10:ea:66:fc:40:bd:f3:f9:83:e3:d4:e1:
                    ed:40:2f:cc:47:bb:9c:a6:60:9f:8b:33:fa:f3:a1:
                    cd:be:c1:47:8b:ac:02:25:b3:cf:7e:09:f3:c3:78:
                    9b:a1:b7:d8:46:6b:8f:11:fe:69:93:b3:e3:47:b6:
                    04:6d:77:c3:bc:41:f8:01:d5:8e:1c:be:24:ba:9e:
                    d4:9a:49:73:c4:37:bf:9c:a0:0a:9c:bd:0e:1a:54:
                    38:c8:e4:2b:b3:aa:f1:db:83:f2:e5:f9:da:6a:69:
                    b5:5e:8f:f9:13:b8:ac:d2:22:e1:53:89:bf:ff:70:
                    5c:55:98:35:09:dc:7f:d6:22:fc:9b:36:a2:03:e7:
                    b3:16:01:41:83:89:f9:27:a9:86:62:cf:54:65:c5:
                    c0:d4:ce:2f:30:9e:b1:8b:67:8e:23:87:61:ee:70:
                    26:32:47:ee:24:51:60:20:30:ac:42:c6:b0:39:cc:
                    64:42:e9:d1:e3:9b:dd:39:b1:ce:e4:be:11:bd:a4:
                    37:be:36:da:9a:78:c9:2c:63:cf:4e:09:10:3e:35:
                    56:51:f6:ca:f7:bb:03:7b:fd:9b:ae:69:76:49:5d:
                    5d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:82:73:DD:BA:58:A9:40:28:A8:BC:33:61:57:B5:1D:FA:51:F7:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl

            X509v3 Authority Key Identifier:
                keyid:A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3c:29:ed:09:51:3c:92:97:e6:34:84:51:45:f1:03:bd:7f:
         83:f4:08:78:4f:89:96:9d:db:30:9a:60:46:57:30:cb:0a:e5:
         36:37:c5:fe:9b:e0:56:b0:76:80:0a:94:61:cf:50:2f:5f:a9:
         09:2f:11:69:ee:50:ae:c5:ed:02:74:ca:ad:5f:45:ee:37:99:
         e2:6f:54:92:8c:3d:db:66:ed:20:8d:35:60:88:70:4c:77:c6:
         aa:b5:69:2a:b4:79:cc:f8:b5:38:b8:61:84:f6:6a:ed:09:0f:
         d5:24:97:f1:18:9d:b8:cb:7f:5b:01:57:12:c0:27:11:d7:98:
         81:c7:35:c5:4c:32:43:11:91:4b:95:b6:86:9c:76:60:93:6e:
         48:a3:3f:38:34:92:29:79:59:3d:46:24:28:75:31:3d:65:84:
         6a:1b:62:93:fe:24:cd:01:4f:da:33:d7:1b:51:ee:dd:60:70:
         e5:98:cb:a0:81:a4:7f:2c:1a:32:26:7e:08:51:2e:d9:8d:91:
         e1:56:da:80:b8:86:ef:fd:67:9a:ef:7f:98:e7:4e:21:d9:e7:
         53:6d:48:af:81:bd:02:5b:55:dc:f6:5d:99:4b:f5:f0:7a:cf:
         e4:23:89:58:46:f1:9c:45:10:91:9c:31:ab:f2:2b:0c:07:0b:
         6e:a0:c5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:24 2025 by rpki-client