Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/48c36d4f-c289-3fbb-ac9d-1f5a63c19ced.roa
File:                     48c36d4f-c289-3fbb-ac9d-1f5a63c19ced.roa (raw, json)
Hash identifier:          se9ASM6XQkmmsl/vkENV/H53fDrTLsk9vq4T+tNP2vw=
Subject key identifier:   DE:67:64:EA:67:D1:48:76:C6:98:35:19:0C:47:D6:8E:BB:E4:9A:3B
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6E44730D72ACAC5080D4A
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/48c36d4f-c289-3fbb-ac9d-1f5a63c19ced.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.243.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:e4:47:30:d7:2a:ca:c5:08:0d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=50fad0cf-6a8d-4f8c-b18f-2ce110d44afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:00:b3:3f:39:fb:f1:db:1c:35:f9:07:9c:
                    82:93:16:28:99:17:86:2d:ff:b7:c8:43:27:2e:08:
                    b3:7b:13:70:9d:4f:fa:ed:79:1a:65:03:bb:87:e7:
                    3c:a7:4d:f7:53:eb:bf:aa:df:4e:02:ac:a4:b4:1e:
                    e5:04:fc:88:64:d1:d6:5b:18:74:37:2a:02:27:67:
                    28:7e:cf:ac:4f:65:60:95:37:ca:26:6c:8b:fd:94:
                    24:85:69:0e:29:94:d7:ca:a5:47:b9:26:c2:cb:1a:
                    73:5f:a2:27:05:4d:2a:cb:7c:77:ca:cc:62:c2:ce:
                    a4:05:57:f3:6d:be:ca:3f:5f:df:56:a4:da:72:3a:
                    c6:89:ae:3d:fd:3d:67:09:3c:63:5e:cd:a2:26:91:
                    1b:1c:b1:ee:a7:de:77:68:03:70:b9:ba:6c:37:2a:
                    17:6d:6d:33:0e:57:49:83:1a:b5:ea:94:cf:ee:9f:
                    aa:44:75:6e:41:59:b0:ee:29:03:f8:95:87:cf:cb:
                    e3:1f:0f:8f:7d:bd:b5:50:c3:89:39:e4:53:e2:00:
                    83:76:1d:e1:d8:6d:1f:b4:51:dc:03:c4:da:ff:a5:
                    f3:d3:e6:a4:d4:06:c2:bd:20:49:b2:3a:f9:27:34:
                    74:dc:a0:3b:c9:7c:16:2b:21:b6:bc:e1:36:fb:01:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:67:64:EA:67:D1:48:76:C6:98:35:19:0C:47:D6:8E:BB:E4:9A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/48c36d4f-c289-3fbb-ac9d-1f5a63c19ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.243.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:51:94:23:a0:c3:b1:b0:fa:1e:c8:ea:9e:cd:59:09:11:fa:
         8d:bf:6b:87:e6:61:b9:eb:b4:11:15:47:20:0f:0d:1b:b5:ff:
         e8:ce:ed:a0:fc:fb:fd:37:7a:b1:3b:34:c0:dd:be:55:9a:f4:
         a4:f6:9c:e9:24:82:f2:7f:1b:5a:7c:52:11:32:af:b5:77:30:
         8f:f5:4d:72:29:0c:90:13:8d:5d:5a:49:68:f5:d5:23:79:3f:
         cc:84:31:95:7f:dc:31:10:d3:09:1a:3e:b1:9d:70:98:3a:18:
         52:c6:a2:e4:7e:3a:7f:8e:51:f2:34:3e:72:94:12:4b:28:43:
         e0:f0:4d:c5:f0:5d:70:0e:22:7a:75:c2:d6:16:d9:f7:05:53:
         ae:86:09:16:18:82:e6:00:fe:51:99:39:10:9c:20:a2:d7:4e:
         61:2a:a7:02:e2:a1:c9:49:43:f5:eb:b1:c3:20:8c:24:b6:bd:
         bf:dc:ce:ee:c3:a3:d2:69:e3:4c:b0:12:f4:1e:f9:d1:63:0c:
         36:8c:61:d2:48:1d:42:70:84:5d:ca:2f:51:37:3e:02:42:63:
         56:7f:74:b4:e9:4b:8c:c7:d2:ec:16:9a:df:f0:d7:2e:f0:35:
         c1:02:97:20:9d:3f:d3:ca:55:61:f3:88:30:cf:73:f3:fe:0f:
         c6:2d:2d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:43:23 2025 by rpki-client