Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/71d7967c-5e1b-383b-b9d3-6b5db7715057.roa
File:                     71d7967c-5e1b-383b-b9d3-6b5db7715057.roa (raw, json)
Hash identifier:          0QCuSBv5DzQCZSmxXGoO/7qmB9R03ewRohh/hBvvZos=
Subject key identifier:   82:27:AD:CB:B1:AD:85:BA:40:E8:9E:B8:5A:6E:D4:AB:89:49:17:39
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6F6BC26215C62B5FA9250
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/71d7967c-5e1b-383b-b9d3-6b5db7715057.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        151.101.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:f6:bc:26:21:5c:62:b5:fa:92:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=83447969-9aec-4767-922f-16d87bad7ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:23:cd:d0:e2:d3:85:c5:d4:d3:60:68:c6:28:
                    30:23:0a:a4:63:2d:6b:3a:f9:5f:5a:eb:1b:9d:72:
                    60:54:a6:48:bb:04:43:f8:b0:bb:d6:12:15:b9:c8:
                    aa:57:2c:0d:ed:4d:5e:f8:c7:b0:fa:21:6f:fc:95:
                    c6:88:27:64:c0:36:ce:86:ae:f3:d1:23:d6:6f:40:
                    65:f7:8d:e8:67:e5:14:7d:57:8b:17:3e:14:95:df:
                    be:d1:1d:f9:90:44:5d:63:b9:ff:74:27:5f:45:bd:
                    84:96:8a:57:93:78:04:65:fb:ca:21:bd:07:76:5a:
                    5c:7c:55:57:70:96:66:58:49:0f:ce:e5:7c:ea:70:
                    5e:e0:f8:53:ea:1e:c9:60:4c:e5:0b:a2:b6:ca:b7:
                    06:0b:41:42:21:6a:87:1a:d3:46:92:18:2b:22:46:
                    82:5e:da:d2:d7:88:63:5e:dd:4c:51:0b:75:ca:09:
                    c6:8d:cd:98:7b:de:ec:57:3a:99:1a:7b:e7:a8:cd:
                    7b:13:6a:95:15:e3:35:fb:c3:46:70:3e:a5:5a:c3:
                    65:6a:32:70:79:00:35:c2:d3:cd:b2:5c:cf:65:53:
                    71:48:9f:93:a7:88:f1:c3:b8:9e:88:19:00:53:59:
                    ed:2d:1c:0a:d8:8a:1b:bb:58:1c:f8:42:70:cb:52:
                    a7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:27:AD:CB:B1:AD:85:BA:40:E8:9E:B8:5A:6E:D4:AB:89:49:17:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/71d7967c-5e1b-383b-b9d3-6b5db7715057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:fc:4d:dd:70:ec:4d:7b:7c:65:17:fe:1d:b4:81:86:83:bf:
         6a:e5:9d:fb:35:78:10:52:ec:be:4d:00:37:13:55:f3:62:76:
         f8:78:d2:33:e3:c1:45:16:aa:dc:00:69:d3:e3:e4:06:31:b2:
         a2:61:3e:89:91:51:a6:4f:a5:73:0f:8c:e5:ff:b0:62:ba:d6:
         d6:50:a0:5c:00:64:2b:7f:3e:b3:16:dd:ac:a6:2d:ee:86:a1:
         2e:06:d7:ab:b1:cf:08:8a:b2:9c:2c:1e:78:21:39:e3:f2:0e:
         ba:7b:a9:7f:f2:6a:01:67:4d:89:c1:4f:c3:6e:1e:75:81:45:
         79:96:92:d3:49:34:8e:0a:80:29:4f:d4:54:a3:e9:41:fd:0f:
         d3:4f:0c:de:e8:83:4f:f2:22:2f:cf:6d:15:ab:f9:2d:73:f1:
         18:a1:d1:e6:32:0b:c4:8b:dc:27:89:56:47:80:93:6a:1f:5c:
         de:e0:c6:50:09:65:5e:48:2b:cd:63:7c:81:8e:69:89:75:51:
         9f:fb:5a:61:40:ed:20:3f:d9:6d:1c:a5:5f:ae:5c:bd:b1:0b:
         01:e2:a5:45:5d:7d:1b:d8:88:ce:1c:de:f6:57:61:56:e6:01:
         24:35:c6:d9:3b:ff:c6:76:36:14:cc:5f:e7:e9:e6:f3:78:ac:
         0c:9a:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:29 2025 by rpki-client