Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c2f7dbe6-2d84-3d0e-9698-0d1bc0f0c6ca.roa
File:                     c2f7dbe6-2d84-3d0e-9698-0d1bc0f0c6ca.roa (raw, json)
Hash identifier:          9OjDkF06eouyEwvt81hl0ONKrLxCfd3odSosJ5y6DxE=
Subject key identifier:   5F:7F:6D:85:BB:8B:FF:B4:B9:F1:F4:19:62:31:B8:31:53:97:3D:1B
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584EC7A1C99A4032E2FFC2BF2880
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c2f7dbe6-2d84-3d0e-9698-0d1bc0f0c6ca.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     29933
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 31 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c9:9a:40:32:e2:ff:c2:bf:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=a267b111-6d4a-44f0-a690-0d67254a5841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:db:7b:04:5a:f1:96:19:4c:c3:e3:d6:67:25:
                    7f:00:b5:9a:00:51:5c:c2:e1:bc:00:b0:e4:bc:5b:
                    2e:1e:93:fa:7d:e1:90:1e:b7:b1:60:4b:9e:f2:86:
                    87:21:7c:16:53:67:a5:3d:55:fb:69:d6:f6:2b:51:
                    23:a3:b7:b0:4a:3f:d5:b3:0f:18:ed:df:51:41:fa:
                    7f:b7:23:8f:af:44:42:0e:78:f7:01:1a:88:9b:52:
                    e4:5d:7a:0a:85:5b:9a:a0:b4:1c:54:e3:1f:c5:7a:
                    c2:eb:f0:6d:1d:eb:c9:77:13:b6:65:de:06:10:32:
                    f3:d5:73:53:cc:39:0c:35:0c:9a:a1:dc:fa:9d:97:
                    17:89:37:63:84:3b:7e:42:0a:81:d1:ab:a6:b7:43:
                    50:5a:4c:28:10:c4:bc:f5:32:33:bb:dc:7f:0e:7f:
                    11:9d:84:b5:81:6d:da:69:5d:ae:07:d6:b5:a0:14:
                    e3:d3:b2:25:12:a9:4e:bd:e2:3d:42:47:a4:18:7a:
                    ca:5f:75:6a:61:77:23:96:ab:de:9c:53:82:24:dd:
                    b5:ec:aa:27:92:cc:4b:ab:f7:a9:cb:a5:e7:47:39:
                    7f:fd:e6:f7:5d:e5:73:94:52:49:e9:20:f4:da:f5:
                    24:72:1b:3c:1f:38:3a:ce:35:bb:bc:36:1c:46:c6:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7F:6D:85:BB:8B:FF:B4:B9:F1:F4:19:62:31:B8:31:53:97:3D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c2f7dbe6-2d84-3d0e-9698-0d1bc0f0c6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:2c:ef:3a:83:8c:6a:71:49:57:70:90:70:49:97:b1:c7:53:
         8c:72:a5:43:4f:63:22:1d:b4:77:1b:4a:67:0e:97:56:a7:48:
         ca:45:c4:73:c3:54:7b:44:bb:17:a1:ab:ab:24:35:50:83:46:
         96:15:a7:8c:d3:5d:aa:3a:39:f1:65:00:df:f1:04:a5:92:2f:
         74:6c:de:4a:0d:6e:14:67:bb:93:d9:1d:18:7a:cd:ea:4f:76:
         01:1f:46:23:37:21:52:24:01:ba:8f:cf:b4:d6:7d:eb:e1:3d:
         35:9f:5f:f3:93:b9:d3:5e:04:3a:8d:62:be:3e:5d:88:49:e1:
         dc:71:ae:ad:9a:82:96:c0:5b:87:c3:15:2a:ed:00:1f:b0:ba:
         17:e2:22:98:30:20:b7:2a:bf:cd:4a:24:14:6e:e1:8d:32:cf:
         6e:60:59:a4:20:17:1b:d1:56:fe:95:dd:1c:20:69:31:21:ab:
         e3:b8:5e:ab:b2:ac:b1:3e:95:f0:f5:61:5d:35:d5:a3:bf:e8:
         bf:c6:48:c9:b2:f2:00:91:af:f9:f5:6b:71:1f:3c:88:3f:92:
         5c:6f:6c:1f:60:23:f6:07:d5:70:d6:57:f6:2a:9e:00:5e:21:
         2b:4d:4d:22:d5:15:6e:17:17:83:6d:54:d3:6a:50:c7:05:9a:
         a8:1f:45:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 08:01:35 2026 by rpki-client