Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/5ce42828-d9a3-3d5b-a1ab-be0b68da1c15.roa
File:                     5ce42828-d9a3-3d5b-a1ab-be0b68da1c15.roa (raw, json)
Hash identifier:          XOviQxRwBIRy7Qc0z9XGtinHSP6qXsDZj8xOTBU47KE=
Subject key identifier:   34:B0:B0:DB:49:7F:7C:D8:F5:44:F7:07:EA:9E:D5:CB:C3:A3:78:37
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F43285848E59BC32383F4D6AAE0EFF380
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/5ce42828-d9a3-3d5b-a1ab-be0b68da1c15.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     812
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:c3:23:83:f4:d6:aa:e0:ef:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=a136d821-39cb-4e48-8bae-c1d36c073349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:b3:51:59:63:02:c2:54:83:3b:45:7d:e6:
                    40:f1:1b:5b:88:a8:51:9e:0e:46:96:2c:bc:8d:ae:
                    11:06:5b:6c:c8:02:3d:3d:8b:e3:ef:84:b7:2e:ef:
                    c9:a3:c9:63:4f:b3:dd:23:36:ff:fb:86:06:3e:9e:
                    c0:4f:5f:fd:ab:23:4c:54:58:af:97:b2:49:4f:06:
                    61:a4:ec:f3:db:5a:3e:1b:1a:ce:e6:b7:23:40:b4:
                    11:61:b5:b4:a0:f4:be:0c:c4:b9:7e:d2:ed:21:4d:
                    42:e2:26:67:87:78:ff:71:67:14:ec:ee:e0:42:d9:
                    67:82:91:3a:66:e5:89:cf:14:83:65:b4:07:e8:9c:
                    97:3d:11:69:27:24:86:04:b5:77:8a:d0:30:42:c7:
                    35:9e:78:17:17:a7:fd:ff:53:95:5a:ab:f7:f8:ec:
                    45:8b:b3:d2:f2:20:03:3f:e9:be:6e:cc:3a:52:e6:
                    28:91:cd:7c:86:dc:9a:34:f6:6a:4d:b3:e0:e4:ed:
                    35:f6:f1:9f:23:64:28:5d:1b:09:b7:89:9e:59:c9:
                    b2:e2:bb:64:6d:39:0f:ad:9f:02:9c:62:18:ee:b3:
                    8a:c9:60:5e:c3:b1:90:da:c9:b7:3f:2b:ca:67:48:
                    8b:14:83:b3:4c:83:ca:6b:6a:08:27:71:7b:e8:61:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B0:B0:DB:49:7F:7C:D8:F5:44:F7:07:EA:9E:D5:CB:C3:A3:78:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/5ce42828-d9a3-3d5b-a1ab-be0b68da1c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:c6:2e:c4:a9:b3:1b:3d:ce:19:3b:e8:fb:7e:42:9d:39:1c:
         c3:0b:e9:0c:f7:f5:55:f5:79:b0:74:3c:52:8a:82:0c:3e:f4:
         cd:7a:a6:30:4d:a8:d6:90:a7:e9:22:98:fe:26:b1:79:42:a0:
         54:83:85:41:45:46:7d:e3:04:4e:7f:3e:54:b6:11:f1:4c:c1:
         b8:13:4e:7b:90:b4:d3:d1:51:fb:d9:a1:21:5c:5e:ed:5d:4b:
         02:3e:1e:14:26:1a:cd:18:87:8b:14:f4:0b:3a:60:fa:c3:97:
         5c:a6:ea:8b:1a:a3:40:ef:5e:f5:b3:11:36:02:92:4b:da:4a:
         81:4c:0e:b9:f0:3e:f0:fd:f4:6c:1c:2f:eb:31:a1:1e:7d:46:
         ba:86:9a:a2:ba:98:1d:c6:14:04:1b:4d:6b:eb:52:7a:75:cd:
         e4:0f:64:a7:81:04:bc:2c:41:7f:65:bd:16:c0:84:ca:d7:06:
         e9:89:ff:95:b4:25:00:01:70:2a:ab:db:a7:ca:ae:58:69:0d:
         53:7c:52:c3:87:f7:6c:7b:d8:13:8f:5a:07:98:d7:3e:3a:89:
         25:51:f7:16:71:58:50:2a:ae:09:8b:7a:e0:8b:db:6b:85:64:
         b9:63:68:18:24:6f:47:7b:c9:a3:65:29:93:0c:09:2d:c0:90:
         57:e2:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:10 2025 by rpki-client