Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/423303eb-88f3-3dc8-8249-ad6927e04dd0.roa
File:                     423303eb-88f3-3dc8-8249-ad6927e04dd0.roa (raw, json)
Hash identifier:          IjM/0U2VPkQJv9pofhiuttJOoWXG915IQmYvklgJDJk=
Subject key identifier:   4A:E9:B9:6B:09:D3:DC:74:06:9A:B2:76:C6:61:AE:6F:81:12:C7:DD
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6EB3DA07968E43F4C8860
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/423303eb-88f3-3dc8-8249-ad6927e04dd0.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:eb:3d:a0:79:68:e4:3f:4c:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=fb994119-1237-4357-908f-87e9ffdc362d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:04:f2:e7:75:54:f9:cd:17:95:be:fe:0e:
                    98:e9:f2:71:2f:ab:d7:29:99:5f:78:54:2e:7c:e8:
                    0b:6c:24:c3:33:1e:ae:4f:16:65:33:a1:6b:ed:23:
                    6e:e2:c2:c3:ec:4e:ab:a4:fa:86:b6:21:79:b8:37:
                    a4:25:43:e1:0e:29:38:54:e6:2f:7e:ef:92:14:23:
                    3e:cb:32:99:32:93:09:6f:9c:0b:44:48:39:ec:9d:
                    d9:2e:d3:e6:c1:fe:7b:f4:a7:34:fd:84:16:41:de:
                    12:7b:14:bd:49:85:f5:43:93:70:36:1b:bd:d3:1a:
                    ab:b6:09:e8:fb:51:1e:bf:51:a9:90:8c:d4:d0:0d:
                    ed:3a:86:36:1e:89:72:65:a1:e7:56:c7:c3:d3:cd:
                    79:59:1b:cc:51:71:aa:01:34:5a:5b:c1:7f:4a:8b:
                    fe:c3:89:c6:20:06:09:31:a3:d0:ba:d7:96:1a:7f:
                    6a:a3:2b:3f:26:74:28:4b:8d:99:5c:ef:29:14:63:
                    90:6a:ae:cf:e5:fb:d9:04:b8:b4:5c:f0:bb:e8:01:
                    dc:40:d7:e7:7d:0b:3c:7d:2c:6a:4c:eb:48:73:5e:
                    52:69:e3:79:c1:ef:ef:3b:e9:59:04:66:8f:c2:3e:
                    5f:39:29:a1:12:a2:2a:0c:96:c6:a8:e4:4f:05:a1:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E9:B9:6B:09:D3:DC:74:06:9A:B2:76:C6:61:AE:6F:81:12:C7:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/423303eb-88f3-3dc8-8249-ad6927e04dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:0a:e8:a7:3e:9b:af:a4:83:53:4e:f1:68:59:9c:9e:32:
         ff:3e:02:c1:e6:44:65:77:60:d1:31:8f:f5:a7:31:dd:9c:81:
         f8:d3:9a:fd:0f:09:5f:73:c9:6f:bd:31:be:03:d3:cf:df:93:
         ef:82:75:f4:43:5b:15:0a:d2:0f:eb:a4:04:af:47:8c:22:cf:
         61:7c:c7:2f:a0:2b:dc:5a:33:c7:e1:7b:d1:ab:fb:2b:13:ee:
         41:eb:f5:4e:3e:b4:8c:1a:74:93:2f:da:5d:2a:e5:e8:b8:c2:
         b2:66:6a:5b:ab:c3:bf:76:bf:e3:6e:19:2a:0c:9c:79:e5:37:
         35:38:37:bf:50:49:12:0c:47:5d:b2:4d:ff:0d:55:c3:be:56:
         84:27:2e:de:21:16:e2:28:50:53:86:d8:71:96:94:ba:7e:72:
         30:23:77:f5:e5:57:ca:60:d9:23:3e:90:59:3f:8c:30:85:85:
         0c:bb:0b:f4:4a:20:f2:57:fd:22:45:c6:48:3c:d4:78:65:d1:
         35:df:b6:0e:62:ce:7b:86:5a:e1:91:f4:69:64:02:75:93:33:
         46:6c:66:a9:1c:74:53:6f:05:4e:ff:5d:4d:42:6c:12:ef:fb:
         3e:4a:b9:ed:07:53:0a:b3:04:1b:76:b6:73:9f:ab:07:42:11:
         bc:f9:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:24 2025 by rpki-client