Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1775f302-e722-3773-bbba-6b172209d71c.roa
File:                     1775f302-e722-3773-bbba-6b172209d71c.roa (raw, json)
Hash identifier:          zKbbqCjr/bUnS5a1Eaa3I2SoSwomhoA3/Y42NjMHK44=
Subject key identifier:   CD:2B:AB:AA:6C:33:5E:65:5A:B1:52:29:67:AA:75:21:0C:D5:28:BF
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6F1D7EF0814531CB2E500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1775f302-e722-3773-bbba-6b172209d71c.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:f1:d7:ef:08:14:53:1c:b2:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=895c1c51-ff4e-414c-bc55-e22e885df865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:66:37:ee:62:28:90:e3:fb:8d:2a:97:f9:67:
                    9d:fa:04:a8:5a:9b:fa:eb:75:69:41:01:c7:9c:f2:
                    75:b0:9d:10:7d:72:3d:01:c6:ac:12:26:8f:43:90:
                    b0:85:40:85:ac:bb:e5:92:92:4a:07:60:cf:40:11:
                    cd:c8:39:52:98:67:63:80:91:e7:2f:e2:31:b2:10:
                    c0:6b:99:75:4e:63:b1:c7:29:d8:3f:a3:c4:a1:de:
                    0a:0a:20:e5:e4:dd:6d:7e:ce:42:23:e4:3c:bf:0e:
                    33:2d:a2:d5:2d:6d:6c:1d:c7:78:f8:52:ce:00:64:
                    bf:82:8e:02:96:7e:ce:b7:ad:86:87:54:23:89:15:
                    cf:b4:d2:03:c7:81:86:65:79:a1:10:41:7d:4a:9a:
                    bd:1d:9c:3e:4c:55:8b:f1:73:ee:de:18:39:20:04:
                    b5:08:19:e0:75:1b:0b:a7:d5:ae:78:d0:b4:18:f3:
                    aa:46:f1:02:f1:66:20:0a:6c:9c:1a:95:00:46:76:
                    1d:3d:41:c7:21:9e:ca:09:a5:28:54:07:2a:5a:f6:
                    37:13:a0:37:cd:81:90:1c:6b:75:06:13:80:c1:4c:
                    c8:55:aa:de:59:f5:06:6b:c3:c7:69:23:c6:8a:48:
                    c7:34:91:87:9e:7f:8f:2b:fb:0b:cf:f6:90:8e:c6:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2B:AB:AA:6C:33:5E:65:5A:B1:52:29:67:AA:75:21:0C:D5:28:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1775f302-e722-3773-bbba-6b172209d71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1b:67:37:0b:fe:56:29:b8:53:10:cb:0f:83:06:9d:29:6e:
         b2:16:3a:d3:26:bb:db:d3:9d:77:20:59:39:8a:78:da:a0:04:
         ea:c7:fc:81:0f:01:83:9b:d4:5d:c3:7e:0a:1d:75:b7:00:72:
         1d:7f:95:43:ec:dd:30:45:a7:a2:d4:2e:e2:e8:ef:21:fc:de:
         06:6b:f1:9d:cf:f5:d1:b7:e8:5b:bb:a7:37:18:10:f1:4c:0b:
         2e:c3:ad:94:7a:9f:c9:81:cf:15:72:cc:a1:c3:ea:23:1a:74:
         06:c4:31:b7:1b:77:c3:1c:16:6b:0c:d3:eb:ff:3b:b0:86:f9:
         df:3a:cd:f5:03:99:14:54:ed:d8:7e:52:ce:62:12:83:1f:80:
         24:85:a4:40:ee:12:46:8b:1f:f9:8e:a5:f7:bc:19:ce:de:d8:
         c4:c7:89:bb:34:e7:91:bd:35:9d:1e:a4:26:0d:3c:17:f7:b7:
         c2:dc:8a:41:ea:8e:18:ce:e1:e6:fd:90:a2:3e:b2:54:ce:54:
         66:02:ce:a9:2f:38:34:e9:02:86:44:1d:bb:f6:df:bf:f0:36:
         65:3d:1f:53:7b:56:2c:61:b1:7f:03:f8:12:16:31:88:21:cb:
         c7:21:b3:da:57:c0:4a:24:28:77:b6:3c:ca:1b:19:a1:30:8e:
         2f:9f:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:17 2025 by rpki-client