Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/60b793ed-e777-3dee-9e47-9daf76721f55.roa
File:                     60b793ed-e777-3dee-9e47-9daf76721f55.roa (raw, json)
Hash identifier:          i3RUa09vLbA3LHWBch0WGsmdq+rpJndzZEYsGaPIESg=
Subject key identifier:   B4:49:1E:BF:DE:7A:14:05:01:B2:EA:1E:54:E5:B3:0A:77:DC:24:AD
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6E9D97D9B97EE4C7DF400
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/60b793ed-e777-3dee-9e47-9daf76721f55.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:e9:d9:7d:9b:97:ee:4c:7d:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=a41145b8-8478-426e-97cd-39506b95cc39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:82:19:9a:d0:4c:52:18:cc:fa:58:49:6c:01:
                    cf:24:a5:58:28:70:71:c2:d8:b3:1a:ba:fa:69:c3:
                    91:1a:eb:62:a9:30:5d:88:46:9d:4a:c6:cb:d1:1f:
                    08:76:3c:9a:08:9e:5a:60:89:d6:52:66:00:d8:84:
                    f0:29:69:4d:fe:e7:8e:77:21:42:78:51:18:4a:45:
                    77:c5:37:82:d1:28:cf:11:b9:0c:26:14:45:ea:0f:
                    57:a6:7c:8b:35:4d:39:76:92:4e:d2:71:6c:3f:0f:
                    2a:a6:bf:00:f2:17:52:3a:02:12:f0:b1:ec:e5:f6:
                    71:58:e5:94:43:93:19:e1:c2:a6:a2:1a:97:2d:d2:
                    c2:33:8b:96:58:d2:56:72:99:1a:c1:aa:ee:c2:e0:
                    cd:fd:39:a1:59:a7:d0:26:76:0f:6f:bf:a6:e8:17:
                    43:48:12:0b:cf:2b:98:1c:18:57:11:69:b7:61:69:
                    06:88:f1:da:1e:2a:2f:ef:d6:15:8c:7f:80:95:be:
                    8d:fc:ad:7a:75:b1:15:2a:5f:4e:c9:de:fb:0b:c3:
                    65:92:ee:67:26:fe:ac:94:b3:ea:28:74:19:75:a8:
                    23:f3:30:1a:31:13:29:47:7f:f8:6d:05:e7:81:18:
                    00:6c:47:ec:5b:0a:60:85:7c:10:14:eb:fe:a8:85:
                    45:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:49:1E:BF:DE:7A:14:05:01:B2:EA:1E:54:E5:B3:0A:77:DC:24:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/60b793ed-e777-3dee-9e47-9daf76721f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e9:07:62:7f:57:10:db:c2:22:81:2c:a5:61:37:ac:ae:71:
         72:86:bc:bb:ff:03:8d:ec:ad:f2:cf:3b:77:1d:8d:cc:4d:68:
         5d:4d:3f:45:74:00:c8:3b:0f:94:c5:3d:34:e3:ef:d4:52:dd:
         1c:2f:1a:51:aa:b6:57:d5:86:67:66:83:34:85:9b:1b:83:7c:
         01:6c:b0:49:b3:12:b3:65:ea:72:8b:f6:2c:85:60:2f:10:14:
         e0:93:ff:fe:08:05:13:8a:5b:da:30:f3:08:8b:a7:06:a2:d5:
         58:94:f4:85:b1:26:95:a0:c3:85:bd:af:ab:46:a5:b3:2a:de:
         92:a6:34:65:5a:f9:71:f3:3d:37:23:9d:92:77:52:e9:6f:ba:
         f4:d7:4b:4f:b0:94:7c:e4:4e:79:86:84:4d:47:e1:44:36:33:
         92:ee:2d:5a:af:08:8a:ad:13:7a:80:fc:a6:7e:38:2b:18:7f:
         f6:7a:ea:f6:ea:3a:20:48:9d:75:a1:17:25:b0:82:c6:f0:be:
         3a:99:95:59:ff:33:35:53:f8:48:f6:07:6a:4a:4e:b7:0c:7b:
         5a:d1:0c:b6:54:1c:ad:f0:52:ca:fa:08:bf:dd:6f:a8:85:c7:
         fd:66:65:4c:d9:72:07:14:06:e4:d3:e7:38:4f:02:2c:c1:97:
         78:d8:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:47:04 2025 by rpki-client