Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0c6e0ddb-5395-37b1-bd2a-c78280754dac.roa
File:                     0c6e0ddb-5395-37b1-bd2a-c78280754dac.roa (raw, json)
Hash identifier:          dBl/vnGmOvGo6g7nb0r3+TM9SZaxF2+lm//FSmNpxWg=
Subject key identifier:   1E:39:17:8F:28:0A:C8:0B:52:B6:11:38:0D:4F:79:25:06:75:CE:64
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6E039A840576912BE0E80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0c6e0ddb-5395-37b1-bd2a-c78280754dac.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.246.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:e0:39:a8:40:57:69:12:be:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=848a593e-b7ff-428b-aca7-665a4bc5b238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:ac:1b:a8:11:66:b3:34:a9:e0:ac:d3:6d:
                    66:73:08:d4:ba:26:54:8b:7c:a4:d0:1c:89:6c:06:
                    dc:39:4f:ae:93:53:8a:e0:04:05:02:6a:a8:65:2a:
                    c1:e6:43:48:e3:97:67:6a:5b:c7:16:70:2d:80:12:
                    e4:e1:f9:fa:e4:ee:e5:98:42:43:47:1c:90:38:9c:
                    c9:7e:d0:8c:c8:36:17:56:74:ae:d8:8a:5d:d9:80:
                    06:93:54:7b:4e:dd:5d:e6:f5:e8:c9:a1:40:c6:b8:
                    29:7d:b2:1b:62:cf:ab:44:8b:41:c7:ea:c5:4a:f1:
                    72:66:8b:3b:d4:fe:e9:ec:26:cf:ef:89:8b:71:30:
                    b0:f2:bd:f9:e3:22:25:25:eb:0b:bb:dd:0d:4c:8b:
                    00:75:e6:0f:df:3b:e5:f4:16:e1:2f:c0:41:ec:4d:
                    50:14:95:63:6c:8d:b7:16:bd:84:86:80:b9:6b:aa:
                    62:e3:64:6d:69:03:2e:69:db:94:05:5b:8c:ef:1a:
                    fa:32:fe:b2:f8:83:c2:51:51:e0:d0:26:8e:84:db:
                    84:83:74:56:74:8f:57:e9:4a:29:37:47:0e:ec:3c:
                    1a:34:01:c4:6a:98:51:16:f3:1d:ab:b1:07:b2:3a:
                    51:c6:f7:ae:81:5f:cc:3d:de:df:92:51:22:91:55:
                    40:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:39:17:8F:28:0A:C8:0B:52:B6:11:38:0D:4F:79:25:06:75:CE:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0c6e0ddb-5395-37b1-bd2a-c78280754dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.246.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ac:b9:76:f2:87:f9:1d:f3:96:30:44:3c:58:57:3e:b0:86:
         de:eb:88:0d:fd:03:8b:85:24:85:9c:ad:54:ac:e9:0e:85:dc:
         ba:0e:6c:3f:a6:41:a4:e8:5a:07:92:4a:54:a5:4b:15:68:4b:
         60:52:9e:9f:57:fd:8f:db:82:94:fe:dc:8a:9a:ba:92:77:01:
         81:80:0e:e1:a3:45:4f:80:42:83:08:bc:f5:7f:52:d3:e2:ba:
         a0:2d:a2:e3:5b:20:32:73:4d:df:8d:a8:51:d8:e4:0c:d4:50:
         8d:fc:09:b2:0a:f3:73:eb:6d:a8:46:63:f1:56:d2:df:b6:59:
         e5:c2:28:50:2d:9f:b1:d8:93:2d:74:31:c8:fa:2f:19:e2:16:
         5d:47:fd:f6:af:a1:7f:d1:d5:89:73:50:e2:f8:b1:e3:44:a3:
         50:c2:93:30:3d:97:91:0e:4c:c8:bd:23:38:97:ab:34:3d:20:
         9b:54:f1:bd:0a:cb:c3:84:22:88:de:51:3f:54:ac:19:5e:bd:
         9d:8c:4c:59:4b:fc:d9:9f:23:12:1f:47:72:76:b9:71:89:b5:
         95:b4:21:0f:1e:dd:d2:30:2c:53:4b:fe:da:0c:f5:e1:97:23:
         d6:87:9b:d6:80:41:34:e8:4b:b7:4b:94:b9:58:ec:35:26:f2:
         2e:b3:2a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:53 2025 by rpki-client