Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8324db91-b7c2-37b6-85c3-ef641c7558f1.roa
File:                     8324db91-b7c2-37b6-85c3-ef641c7558f1.roa (raw, json)
Hash identifier:          MDC8fAhw30Le9HecSVSkoXiMALHn146NNp6OHlBpScQ=
Subject key identifier:   37:7B:CD:0B:24:17:5B:B1:98:E6:6E:7F:26:95:5D:1B:72:E7:3D:4C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6DA17B8FF50E5D10C6F00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8324db91-b7c2-37b6-85c3-ef641c7558f1.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.210.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:da:17:b8:ff:50:e5:d1:0c:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=fbf0f182-c1d8-4be4-ba36-4c1c0f4c059e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:5f:8a:4c:38:b2:a7:25:3a:f3:c9:01:88:
                    bd:5e:5e:92:2e:45:69:c6:33:21:78:8d:da:32:f5:
                    26:98:e5:16:80:28:0c:db:09:70:4c:17:de:a1:24:
                    21:90:be:a8:d6:a3:8b:9a:0f:cd:5e:c0:40:9b:64:
                    c5:15:8e:8b:56:be:15:f0:ca:97:5f:c2:23:2c:5a:
                    10:d4:65:74:e5:c8:ff:a3:2f:24:75:3d:96:af:38:
                    67:0a:ab:24:0e:5a:6b:82:70:9f:48:b5:9e:a4:4e:
                    36:02:47:8d:f6:14:e8:7f:52:20:14:77:17:fd:fe:
                    78:77:f6:09:fd:ed:1e:33:5c:e3:81:85:b6:a8:a4:
                    a5:2a:d9:af:8c:44:87:c7:c5:bd:4e:6a:82:5e:5a:
                    9f:f1:72:82:55:32:d6:72:68:bb:d5:15:ae:f5:40:
                    73:97:d9:e3:ac:98:04:a2:f1:22:23:a6:58:48:dc:
                    23:a1:ac:40:7e:88:57:bc:84:ff:8b:59:ea:4d:6e:
                    ef:ff:85:3a:19:25:55:c0:e3:3b:c0:56:b6:e5:48:
                    7e:b2:b6:3d:06:16:99:7c:2e:a3:cc:a6:87:2b:56:
                    55:4d:ce:18:f3:2e:b2:d6:81:84:0c:b1:29:89:72:
                    ec:0a:0c:38:0e:85:b1:33:a3:51:39:bf:a8:81:00:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7B:CD:0B:24:17:5B:B1:98:E6:6E:7F:26:95:5D:1B:72:E7:3D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8324db91-b7c2-37b6-85c3-ef641c7558f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.210.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:03:47:c5:d1:0e:90:ec:dc:91:40:fa:3d:bf:4c:da:34:e2:
         cb:62:8d:b5:76:39:02:3a:02:7d:bf:fc:3b:0e:59:b1:0e:13:
         f1:cf:15:51:c3:d5:3b:b2:2d:35:3f:3e:35:fa:e5:87:ff:e4:
         c4:87:1e:ae:9a:a3:1f:ce:22:d8:c4:c9:9e:2b:a4:ce:2a:3d:
         da:48:16:a2:e7:35:56:a8:83:da:fd:59:b0:00:c1:f3:b5:b0:
         93:5d:fc:1d:04:b7:4c:ff:e1:32:fd:49:49:94:63:55:b0:38:
         9e:50:eb:1a:63:f1:16:c4:99:fc:73:f3:a4:06:40:e9:1f:d4:
         30:77:bf:8d:d6:fd:ca:b3:3a:a3:7b:1b:ba:01:e3:3b:18:31:
         05:09:5e:f5:3b:79:19:fe:8f:be:e4:98:f7:a8:ea:63:4e:83:
         ce:bc:ae:e7:90:d9:77:62:1b:4e:b4:6f:ce:ae:b2:f4:c2:ff:
         9e:b6:3a:99:b0:ed:05:36:89:0c:d5:f4:f7:1e:dc:b1:13:cd:
         f6:a3:cb:2d:32:dd:97:04:8a:65:48:d3:30:14:e3:a7:58:47:
         d1:90:e2:45:9a:d3:91:03:f9:57:b8:50:fa:49:c2:80:b4:f2:
         3b:1b:d4:5d:a8:7f:bd:fd:55:f8:77:b8:4f:7f:03:b3:8a:3c:
         bf:18:8f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:47:30 2025 by rpki-client