Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/d2e3c3a5-c544-3a1e-a38f-0cf31ddbcd0a.roa
File:                     d2e3c3a5-c544-3a1e-a38f-0cf31ddbcd0a.roa (raw, json)
Hash identifier:          J8bFDru5PK5yqkmtFUv7gQBfj+qLALbm33zOGDm2FVM=
Subject key identifier:   29:59:7C:79:00:B7:AE:4D:AB:F6:9E:09:C1:AA:C1:C5:87:B8:6F:C5
Certificate issuer:       /CN=0d34fcf6-8f83-4016-b141-8b01958e1eaf
Certificate serial:       010D0C9F43285848E16BE4E8DF325BDEC22A4540
Authority key identifier: BC:35:CC:64:3E:7E:99:2E:54:63:0B:EB:6E:6E:C9:D7:35:61:8B:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/d2e3c3a5-c544-3a1e-a38f-0cf31ddbcd0a.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     393960
IP address blocks:        139.60.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/0d34fcf6-8f83-4016-b141-8b01958e1eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/0d34fcf6-8f83-4016-b141-8b01958e1eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e4:e8:df:32:5b:de:c2:2a:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d34fcf6-8f83-4016-b141-8b01958e1eaf
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=053fa697-ed56-4fb1-9452-7dd415e336aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:36:2c:98:fe:ba:88:f3:e9:7c:ea:3d:15:6d:
                    2c:d9:95:50:fc:dc:01:7a:ce:91:24:80:a8:89:ec:
                    9f:dc:3c:60:e9:0f:ab:4f:80:0d:be:4f:a5:d4:46:
                    4e:e6:6e:71:d1:e1:23:fe:d7:9c:02:26:7b:1e:ef:
                    44:1e:c2:dc:8d:0c:11:3f:2f:4d:02:ab:d2:ee:8f:
                    4d:b1:14:5d:d0:90:eb:56:39:30:5a:3e:30:3b:89:
                    64:40:13:e2:a9:1d:38:58:7a:5a:90:92:75:2b:48:
                    d4:65:f6:fa:9e:dd:4f:ce:ad:e4:2d:d6:12:58:f9:
                    92:a1:7f:45:2a:ef:b6:5c:9e:c1:0f:ae:87:a2:23:
                    06:eb:58:95:f1:aa:69:16:07:29:af:c2:54:20:fa:
                    53:41:c0:2c:b8:ad:d4:c9:72:b8:78:d2:c2:49:42:
                    97:32:d2:0a:b2:de:75:1c:07:71:68:ad:7a:e8:95:
                    0d:a1:30:32:6b:3c:2c:b1:aa:ea:36:6a:fe:c7:e4:
                    ac:f9:38:e6:c8:19:63:95:da:9f:40:bd:8c:fd:a5:
                    6c:94:0d:38:20:71:ec:71:54:17:96:6e:48:7d:67:
                    26:ee:f3:d9:82:e1:e9:c5:b9:3b:39:64:f6:ff:aa:
                    63:1d:b8:1c:b5:f5:be:25:56:ae:d9:91:89:de:96:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:59:7C:79:00:B7:AE:4D:AB:F6:9E:09:C1:AA:C1:C5:87:B8:6F:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/d2e3c3a5-c544-3a1e-a38f-0cf31ddbcd0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/0d34fcf6-8f83-4016-b141-8b01958e1eaf.crl

            X509v3 Authority Key Identifier:
                keyid:BC:35:CC:64:3E:7E:99:2E:54:63:0B:EB:6E:6E:C9:D7:35:61:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:59:cf:9a:68:c4:35:7f:cb:ab:72:98:bf:ea:16:95:58:db:
         6a:13:b9:c7:ad:73:f4:56:89:7e:b1:6a:37:f0:ff:2c:97:ab:
         99:54:57:32:55:c8:fd:d5:41:7f:a8:8c:31:a0:f4:fd:fe:19:
         3d:bd:49:44:b2:77:00:10:ce:eb:d5:e7:e4:f3:eb:b1:6d:73:
         d8:3a:f4:09:b8:fe:b1:e4:82:ff:80:b7:82:e1:04:fa:ab:c1:
         02:8e:8d:34:8b:aa:b7:fb:84:b6:2c:f1:6c:c7:97:e5:83:ba:
         1c:65:63:7e:41:a3:fa:b0:15:8e:d9:fe:a6:4d:6c:7f:e5:73:
         a4:79:01:90:84:90:4b:3a:c5:00:22:92:d3:79:e8:50:2e:9f:
         e6:36:5c:29:34:37:6c:73:3d:b3:c8:57:1f:44:03:6e:95:72:
         78:b3:a7:3a:0a:ef:07:ac:a9:74:49:91:0d:96:5c:f0:d2:ae:
         93:9c:08:2f:bd:6a:69:2e:b1:3b:7b:ae:e7:b6:7b:67:ab:c5:
         6e:5d:0f:d1:d1:b5:11:9a:b0:f8:8b:26:88:25:c9:ba:28:36:
         50:34:e4:38:fb:c9:ce:21:5d:b7:d1:71:70:7a:72:7b:52:98:
         f5:99:30:13:15:e9:a0:b1:cd:1d:b2:0c:c3:62:96:18:be:ce:
         7f:23:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:05 2025 by rpki-client