Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/4fd253a7-b02b-30c8-9608-8aa7c99fa54e.roa
File:                     4fd253a7-b02b-30c8-9608-8aa7c99fa54e.roa (raw, json)
Hash identifier:          8wGZb8eBGcpetu6BCr1KE/cbhYwe7j7fhruJviV0Rsk=
Subject key identifier:   4C:9B:9F:23:6C:A4:69:A8:D0:89:DF:53:F3:12:25:83:4E:0A:D4:29
Certificate issuer:       /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial:       010D0C9F4328584953C4168FF6712C15D3C1C940
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/4fd253a7-b02b-30c8-9608-8aa7c99fa54e.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     395301
IP address blocks:        139.60.76.0/24 maxlen: 24
                          139.60.77.0/24 maxlen: 24
                          139.60.78.0/24 maxlen: 24
                          139.60.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:16:8f:f6:71:2c:15:d3:c1:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=ec7487b0-c88f-423a-841d-8e3dbe40db73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:25:7c:5d:2a:d9:f6:81:27:66:49:7c:58:
                    91:24:3f:dc:69:7b:7b:95:92:a1:8b:9d:44:9d:41:
                    51:8c:de:21:29:01:24:b1:4a:3b:f9:91:f1:45:1e:
                    8f:59:37:d3:ab:a4:d5:f6:4d:b6:03:ae:e6:03:d0:
                    77:15:51:f7:20:7a:63:1f:2c:50:b1:df:71:cf:ec:
                    b4:a7:f3:f6:99:8c:70:3d:de:33:7a:c9:49:7d:8b:
                    c1:cf:13:32:52:9a:12:82:b0:44:36:e9:c0:e1:97:
                    c6:8a:71:95:74:51:46:c6:68:4d:0a:b1:be:0e:28:
                    e1:98:8e:7e:ba:17:de:e7:7f:a4:ea:1b:86:a1:3c:
                    62:59:6c:d9:0d:cb:cc:9c:a8:f4:e7:eb:8f:c4:a8:
                    bf:bb:5c:55:0a:37:bf:86:d3:87:47:03:cb:c4:51:
                    ec:98:95:6d:9c:43:99:ef:5f:2b:58:c2:f9:71:24:
                    c1:bf:a2:db:8c:12:aa:58:79:f5:e1:d4:ca:85:0e:
                    79:0c:0c:b2:6e:fa:d2:67:ee:1f:bc:76:db:5f:58:
                    52:ec:f2:6e:25:85:50:26:2b:78:a7:3e:90:62:79:
                    78:c3:5d:df:e2:5d:79:79:cc:54:ae:e5:12:dc:7e:
                    a3:42:9e:54:e6:fb:c0:3c:90:3f:cb:b4:6f:ad:49:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9B:9F:23:6C:A4:69:A8:D0:89:DF:53:F3:12:25:83:4E:0A:D4:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/4fd253a7-b02b-30c8-9608-8aa7c99fa54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl

            X509v3 Authority Key Identifier:
                keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:2b:7d:e0:13:56:6f:fb:b9:d0:33:d5:10:6e:55:a1:c3:33:
         19:c5:9b:85:84:8c:87:d5:dd:d1:85:b2:b7:28:c0:0b:b8:cc:
         48:d0:91:9a:4c:c4:fe:28:f4:13:0f:76:5e:ef:70:9e:39:f5:
         2b:cf:17:11:c9:45:eb:d1:87:a3:8a:35:c5:c9:72:04:ec:52:
         4c:89:09:66:79:a7:ee:fd:1b:2c:11:ca:e8:37:99:24:17:04:
         16:ad:86:01:71:8b:5f:83:46:e1:31:21:f4:40:ae:ba:03:6d:
         78:40:d1:17:48:07:59:84:9d:e9:ae:4a:ed:91:8e:62:f3:ab:
         b7:c7:fa:7d:54:70:12:7b:e9:71:7d:e5:03:bf:14:9f:01:5d:
         aa:13:ee:62:ef:c2:28:31:ce:fa:40:73:b5:be:db:e7:c9:d2:
         6d:f4:05:dd:53:3e:49:29:ad:70:3d:a6:6b:92:a4:6b:5a:91:
         da:18:7f:f4:c0:4e:ee:82:8d:54:fc:29:a1:30:d3:84:30:ce:
         6e:93:fd:46:f0:a6:3f:58:9f:5c:f9:0c:a7:bb:5b:38:5a:56:
         df:b6:05:04:76:e7:b8:02:a2:39:88:04:8b:5a:6c:be:44:4b:
         fb:8a:35:76:b5:c7:48:92:ed:42:e8:b0:19:ec:37:8e:29:ae:
         2f:f9:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:46 2025 by rpki-client