Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4ef1567d-c5cc-328b-9777-c38749d3e355.roa
File:                     4ef1567d-c5cc-328b-9777-c38749d3e355.roa (raw, json)
Hash identifier:          XJJKF8DGR29qm6dhElblyTPqxTUwWpLcu7wwQW2CG1E=
Subject key identifier:   80:C4:F5:5E:C6:43:49:D1:68:7F:73:CA:44:F1:D4:82:6A:73:88:2C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6F6DFF83A8FCA406A9F80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4ef1567d-c5cc-328b-9777-c38749d3e355.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        151.101.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:f6:df:f8:3a:8f:ca:40:6a:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=dd5e6659-9dc1-4995-b365-d83ddbffff5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:36:19:76:f8:47:f6:58:f4:7e:72:69:80:
                    44:2b:c8:39:39:24:50:34:3a:5f:5d:fe:9a:2d:ad:
                    ac:73:46:39:57:a6:60:b6:c2:60:cc:86:3f:51:07:
                    88:41:52:73:cd:b6:29:18:84:fc:6b:b2:b0:93:91:
                    86:fa:62:84:c2:96:b3:4c:17:66:6f:df:72:54:4d:
                    5e:1b:98:6a:d9:5a:38:73:c1:71:b9:d5:88:7b:29:
                    9d:c3:98:ed:2d:b7:49:e8:ab:5e:5a:b6:1e:b2:21:
                    e1:c5:b1:74:c4:7e:57:5f:02:9a:57:79:03:f2:cb:
                    00:a4:1f:cd:ef:8e:de:53:2b:e8:8f:39:66:b4:95:
                    e9:72:2f:06:ab:6d:41:91:ed:d6:36:a5:f7:cc:35:
                    b7:62:86:fd:6e:d4:eb:af:22:5d:94:dd:21:20:97:
                    b9:0f:40:cf:69:97:1b:2c:72:9a:42:00:b0:97:71:
                    22:ad:24:e4:ab:96:98:57:a6:bf:80:3f:50:f7:a1:
                    ce:66:20:3c:63:e2:c3:76:96:53:a1:6d:39:25:45:
                    b7:ce:16:d9:32:25:75:59:54:b1:44:e8:50:93:b4:
                    8c:e5:ae:2b:2a:62:ce:6c:6b:99:f9:7b:8a:bf:16:
                    80:e5:e2:ca:b9:c0:9f:0c:65:fc:80:2a:c2:70:75:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C4:F5:5E:C6:43:49:D1:68:7F:73:CA:44:F1:D4:82:6A:73:88:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4ef1567d-c5cc-328b-9777-c38749d3e355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:65:9d:91:b4:d6:f0:f0:8f:7a:be:2e:fe:87:18:5c:4d:ae:
         1f:07:88:c3:9e:63:2e:59:f9:33:06:f7:f0:61:15:a8:33:b8:
         10:d1:f8:73:ad:7c:e9:aa:55:59:fe:dc:65:11:60:8a:a5:c4:
         c3:7d:4e:c5:20:1f:3c:e0:49:fa:81:9b:80:fd:a8:90:95:09:
         32:0c:75:61:58:3a:f6:ff:9a:ac:46:c4:3c:da:12:7e:a8:01:
         4f:23:d5:b1:4b:19:13:49:a2:b3:6d:66:bf:ab:6f:dc:11:ee:
         29:75:59:a4:a1:34:d8:8d:fc:d4:1a:e2:b3:fd:de:f3:82:15:
         2b:f5:c6:71:21:73:7c:f4:59:c9:49:17:37:71:84:cb:08:0a:
         44:c9:5c:f0:8a:0a:4b:6b:cf:de:95:d8:49:92:38:3c:13:2e:
         9b:77:81:48:4f:c4:3f:f4:57:84:69:9c:95:73:14:55:1d:9d:
         e8:33:ae:0f:e8:3b:c8:8c:64:62:a1:b1:e1:6d:0d:2c:fe:c9:
         b3:e3:58:52:d7:06:e9:e4:4d:6b:27:7a:f1:60:23:04:19:10:
         e6:fd:08:fd:02:64:8b:1d:ca:ff:db:32:ae:d3:8f:7e:66:a8:
         e2:b4:68:35:c7:e6:e1:67:25:a9:6e:29:19:2d:60:76:ed:1d:
         1b:5e:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:26 2025 by rpki-client