Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e7ac36d4-226c-3743-b03d-727ca4e562d7.roa
File:                     e7ac36d4-226c-3743-b03d-727ca4e562d7.roa (raw, json)
Hash identifier:          qLTAiLMFpHa/YuZZ3Ijx/Iz9FNTLUi2AMyLUwiXTfhA=
Subject key identifier:   36:8E:E4:15:AF:D2:75:58:63:A3:1C:61:95:FB:A6:0B:F4:2C:C8:7F
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F43285848E59BC2FFBC5167AE8FC6E5F0
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e7ac36d4-226c-3743-b03d-727ca4e562d7.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     3257
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:c2:ff:bc:51:67:ae:8f:c6:e5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=aa30b209-52b4-400a-84cd-01276b56c7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:97:f1:42:6b:41:66:4a:a3:c9:70:a5:fd:
                    6d:c6:f0:df:bb:4e:e0:67:3e:74:cf:b5:1c:a8:4e:
                    98:1c:1c:32:5e:3a:08:55:16:35:ea:98:a9:64:24:
                    0f:28:cc:78:de:27:0f:e6:8d:ee:b8:c1:c4:f2:6d:
                    f2:10:38:04:8d:c7:9b:db:39:5c:a7:d3:3e:95:b5:
                    84:65:f7:9b:17:19:69:38:27:6e:76:95:94:4a:b3:
                    21:dd:91:7a:e3:ff:66:7b:e1:8f:e6:71:e5:48:68:
                    06:15:e8:f8:e0:2a:88:6e:df:83:dd:56:e6:7e:d2:
                    83:32:b6:28:0c:5a:17:06:d9:24:e7:38:78:c4:07:
                    89:c8:86:af:51:4c:87:1b:54:5a:37:e2:98:5f:c5:
                    cd:e1:5a:3a:45:d5:60:be:74:44:d3:18:e2:63:e9:
                    d9:cb:85:f7:72:37:59:8e:b3:ff:3a:c2:17:c6:e1:
                    11:9f:c8:dd:d0:eb:04:b7:b6:fc:ee:73:d4:d8:5c:
                    d1:bc:52:42:fa:ed:1a:4c:91:33:b4:ed:1d:35:fb:
                    cc:79:01:19:85:27:37:82:41:92:3c:5d:b5:ac:a8:
                    89:e9:f6:7c:1e:03:f4:9e:5e:cb:2c:9d:bc:96:62:
                    11:a6:5e:b4:05:42:07:b8:93:59:e2:62:a8:6d:58:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8E:E4:15:AF:D2:75:58:63:A3:1C:61:95:FB:A6:0B:F4:2C:C8:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/e7ac36d4-226c-3743-b03d-727ca4e562d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1d:c8:e7:7c:f5:5b:cd:ce:8e:e5:cb:79:ee:d6:c0:95:6b:
         3a:8a:c9:4d:03:24:7e:1c:02:00:e7:de:01:47:f3:23:6f:ce:
         82:cb:0b:e3:40:75:a4:39:01:98:a5:1a:7d:9f:2f:aa:79:89:
         4b:62:40:a9:46:81:42:db:56:5d:64:71:52:fa:69:9f:5d:f4:
         ce:bb:3e:8a:05:da:1f:fe:1a:1c:b0:39:e5:96:96:08:63:c9:
         79:bd:83:a1:ee:9a:87:45:09:2d:5d:47:e3:ff:52:fe:ce:05:
         d2:31:8d:28:d0:f3:ff:54:50:4e:35:38:76:c4:85:04:68:7a:
         d6:d9:df:0d:e2:a6:bb:a2:c1:79:f8:f6:ad:0a:a4:ba:1a:bb:
         19:93:27:70:f2:5f:86:30:59:13:61:47:af:47:dd:61:34:a5:
         74:92:a2:66:87:89:e1:08:cc:b2:e1:20:cc:e3:ec:7c:67:df:
         86:72:3c:fd:47:f2:f3:f7:a3:6c:73:67:a1:7c:e9:b0:bd:cd:
         e2:de:98:3a:a7:1e:30:82:9a:1d:23:16:8d:ee:40:17:4c:04:
         78:12:86:a1:4a:ae:5b:35:60:c9:54:68:90:f8:4a:c7:3f:6d:
         8a:d6:94:c5:4d:b2:e5:4f:5a:a4:5a:87:76:25:03:7d:41:dd:
         6e:44:5f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:26:47 2025 by rpki-client