Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/b012a3db-318f-34a5-8e9d-74105cfce13e.roa
File:                     b012a3db-318f-34a5-8e9d-74105cfce13e.roa (raw, json)
Hash identifier:          WdgVA8EePTKyKGU1r0M7OiaLfnVZbYsKX1LRkFEo9uo=
Subject key identifier:   C4:92:6E:47:CC:91:DB:8C:82:F4:5E:78:30:A4:83:54:C9:39:BA:E6
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F43285848E59BC2E04FB5464237B5F740
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/b012a3db-318f-34a5-8e9d-74105cfce13e.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     209
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:c2:e0:4f:b5:46:42:37:b5:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=21901af8-94cf-44f5-bbf3-d95baa78ffb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a5:3b:54:ae:1a:b8:c3:fd:4d:7c:c1:3b:69:
                    d1:62:4a:5a:09:61:f6:42:36:41:40:58:aa:82:6f:
                    5d:90:70:6c:f5:ee:8b:b3:ae:b0:e0:67:16:03:c2:
                    74:80:58:4c:83:e0:b0:af:9d:6a:16:b4:99:c0:2f:
                    a2:d2:1e:2b:66:25:7e:b9:1b:af:2a:df:a1:7a:0d:
                    ac:33:98:2b:2a:80:3b:4d:48:54:1c:d1:19:df:9a:
                    bc:b9:79:2e:61:6c:e6:20:d5:66:fe:1f:17:c3:18:
                    40:af:8c:c5:e2:60:08:61:b5:bf:e2:4d:ed:98:b2:
                    d7:10:1b:f9:2f:13:0e:a0:39:09:0b:db:5c:2e:7b:
                    3f:a7:14:4b:a4:2d:df:6c:a3:a5:20:8c:65:1b:75:
                    a5:81:37:e5:ef:06:eb:6b:d2:47:d9:03:e5:6a:66:
                    76:f2:ec:87:be:23:50:20:93:23:07:6f:91:a4:6a:
                    80:0e:20:1b:ce:6e:cc:2a:37:f0:31:42:6e:38:a7:
                    d1:6e:84:c0:9a:23:be:3c:fb:ba:11:1f:43:22:8b:
                    50:2a:cf:58:83:46:21:c2:38:8f:9f:56:1a:27:fe:
                    79:1b:fa:4b:3c:e7:42:e2:4f:41:82:b8:f7:79:8a:
                    a4:cd:c1:1f:28:79:09:5f:5b:96:bf:cd:bd:f0:94:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:92:6E:47:CC:91:DB:8C:82:F4:5E:78:30:A4:83:54:C9:39:BA:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/b012a3db-318f-34a5-8e9d-74105cfce13e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:44:0d:8b:1a:e2:80:9b:31:95:a4:20:31:d4:09:20:ff:51:
         4c:e3:1e:91:4d:74:fb:fd:c5:fc:f7:66:6d:e8:ad:69:03:9a:
         07:ad:72:96:4a:2b:12:16:2d:6f:18:ca:d7:84:bd:bd:dc:f8:
         d3:3e:ec:14:85:5f:0e:48:e5:74:f5:74:4f:2c:d0:24:36:10:
         a9:ac:3f:33:3a:2c:7a:4f:8a:1c:e9:5a:e5:4c:8c:4a:29:4c:
         49:4b:e5:fd:b6:f3:77:08:12:3a:7d:9e:56:7c:2e:51:e8:12:
         48:71:39:b8:c8:a6:03:b3:e8:9e:24:ce:d5:6e:6d:57:98:41:
         6d:c1:db:07:da:8d:53:ca:32:b4:30:43:5a:a3:80:ad:70:da:
         83:da:e8:b3:b8:6d:3d:35:e1:13:91:c5:7d:b2:76:d1:01:30:
         5b:cd:7d:d3:dd:ec:f3:9b:85:19:74:4e:26:19:71:76:ca:56:
         c6:af:c1:d1:59:39:c7:29:63:5d:c5:0f:72:b4:13:53:1b:17:
         2d:be:26:f5:59:c8:bb:9d:b5:ba:ff:f1:b2:17:94:b2:d9:ae:
         3f:f3:74:24:74:81:01:0e:18:e1:46:d6:4f:14:31:ea:36:6e:
         d4:2e:e0:f3:d7:09:47:13:49:77:ba:a7:48:12:62:f5:10:b1:
         49:9d:a9:dc
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjlm8LgT7VGQje190AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz
YjU3MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MjE5MDFhZjgtOTRjZi00NGY1LWJiZjMtZDk1YmFhNzhmZmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaU7VK4auMP9TXzBO2nRYkpaCWH2QjZBQFiq
gm9dkHBs9e6Ls66w4GcWA8J0gFhMg+Cwr51qFrSZwC+i0h4rZiV+uRuvKt+heg2s
M5grKoA7TUhUHNEZ35q8uXkuYWzmINVm/h8XwxhAr4zF4mAIYbW/4k3tmLLXEBv5
LxMOoDkJC9tcLns/pxRLpC3fbKOlIIxlG3WlgTfl7wbra9JH2QPlamZ28uyHviNQ
IJMjB2+RpGqADiAbzm7MKjfwMUJuOKfRboTAmiO+PPu6ER9DIotQKs9Yg0YhwjiP
n1YaJ/55G/pLPOdC4k9Bgrj3eYqkzcEfKHkJX1uWv8298JQGJwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMSSbkfMkduMgvReeDCkg1TJObrmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1
ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvYjAxMmEzZGItMzE4Zi0z
NGE1LThlOWQtNzQxMDVjZmNlMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2
OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3
M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi
MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC
ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIJEDYsa4oCbMZWkIDHUCSD/UUzjHpFNdPv9xfz3Zm3orWkD
mgetcpZKKxIWLW8YyteEvb3c+NM+7BSFXw5I5XT1dE8s0CQ2EKmsPzM6LHpPihzp
WuVMjEopTElL5f2283cIEjp9nlZ8LlHoEkhxObjIpgOz6J4kztVubVeYQW3B2wfa
jVPKMrQwQ1qjgK1w2oPa6LO4bT014RORxX2ydtEBMFvNfdPd7PObhRl0TiYZcXbK
VsavwdFZOccpY13FD3K0E1MbFy2+JvVZyLudtbr/8bIXlLLZrj/zdCR0gQEOGOFG
1k8UMeo2btQu4PPXCUcTSXe6p0gSYvUQsUmdqdw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:16 2025 by rpki-client