Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53848da7-1182-36ef-b0d2-4d00728cdbd6.roa
File:                     53848da7-1182-36ef-b0d2-4d00728cdbd6.roa (raw, json)
Hash identifier:          jQEGS6byyvJ4IpFzCYj6ntv41eCk9amgbobaFkgJKJc=
Subject key identifier:   62:AE:D4:FF:5D:88:DE:DD:B5:78:53:46:FF:1D:F8:CF:FE:19:84:A0
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6E3A40D83625EA9685780
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53848da7-1182-36ef-b0d2-4d00728cdbd6.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.220.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:e3:a4:0d:83:62:5e:a9:68:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=6cf7a365-7382-4128-9829-2767c24b75f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:45:52:7c:10:db:62:dc:2d:55:29:01:30:
                    e3:e6:ef:f4:3a:9a:e1:e2:74:07:f1:c3:8c:03:99:
                    ed:42:60:01:a2:d2:ca:55:d8:7f:e2:ae:16:d3:d9:
                    42:d4:2d:ab:76:6d:ea:6b:78:91:fa:4e:94:6c:be:
                    a9:42:41:3a:6f:9a:f3:ee:3a:83:a4:0c:0f:38:9f:
                    54:26:04:7d:02:dd:c0:00:a0:fb:85:62:b6:cc:b7:
                    18:a6:08:47:a2:75:9f:69:84:db:5c:5b:a2:52:48:
                    ac:49:af:1a:91:9d:7c:3a:77:12:ce:1a:fd:2f:dc:
                    a9:bc:94:f8:70:82:d5:68:32:ef:1a:07:11:03:29:
                    0b:88:8c:e9:73:b2:03:f2:fc:f1:49:82:17:66:16:
                    fb:3f:a5:e0:1b:31:e1:a3:6c:09:d4:58:1c:36:0e:
                    f2:b0:a7:f8:e4:29:e0:eb:9f:a2:17:23:a9:4d:5b:
                    ae:0c:0e:3d:1b:07:ee:93:41:a1:06:bf:80:54:dc:
                    c4:7a:09:a7:cd:82:ce:2c:7a:ab:14:77:ae:d5:ba:
                    31:b2:48:de:16:0b:56:6f:c5:d4:93:87:16:fd:12:
                    0c:36:18:dc:b4:a6:69:70:dd:df:1c:6f:a4:70:e8:
                    bf:7f:d3:fe:97:13:6a:55:b4:eb:0a:6f:58:6b:9a:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AE:D4:FF:5D:88:DE:DD:B5:78:53:46:FF:1D:F8:CF:FE:19:84:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53848da7-1182-36ef-b0d2-4d00728cdbd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.220.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:9c:3c:0d:fa:6f:0f:35:18:69:d3:4a:e7:c7:96:fb:e3:78:
         74:64:90:97:21:a2:cb:80:01:2d:7e:da:5d:02:cd:41:d5:39:
         c9:2b:2a:65:b4:11:89:a1:d4:98:2b:62:3e:87:e7:83:11:27:
         5b:64:83:84:8e:9d:5f:90:90:3c:6b:65:10:48:8e:d9:42:b8:
         0f:db:8f:a0:12:8c:69:11:75:4d:d4:42:2c:06:96:ac:81:79:
         c5:6a:34:f9:22:1b:42:08:47:0c:c8:90:41:d5:23:9e:ce:43:
         b8:16:aa:41:a7:0f:cd:28:d6:16:64:02:f5:ba:ac:25:38:d7:
         09:87:d6:60:69:9f:d1:01:d2:0b:3e:a6:18:02:56:82:0d:d2:
         d7:a2:11:07:87:5e:d5:17:ae:24:66:8c:f2:77:bc:da:cb:cd:
         65:b5:fd:42:35:29:57:ac:df:3b:b7:f2:d4:db:1d:0c:37:7d:
         1c:b7:a8:e3:15:60:80:b0:98:c6:4e:d7:b4:5f:66:ed:47:fb:
         cb:1e:d0:aa:4a:31:af:f0:b4:11:03:c2:55:0b:7b:e3:e4:2b:
         d7:b3:f4:be:28:ae:81:dd:37:f5:dd:6a:94:8f:56:42:be:26:
         61:a4:a1:b9:79:79:fc:c6:12:c3:9d:d2:8b:98:3b:19:aa:d2:
         b3:ef:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:22 2025 by rpki-client