Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/841bdf52-afcf-38d3-8523-7e5074f81419.roa
File:                     841bdf52-afcf-38d3-8523-7e5074f81419.roa (raw, json)
Hash identifier:          ab5K3sPFf7xjHQE2hqcrjkFFZbS3h0xq6ORn2IYIQZg=
Subject key identifier:   A8:9E:5B:68:C4:0F:D7:1B:17:3B:4E:48:73:93:42:BA:28:0A:C0:98
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6DE30230FF27562960100
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/841bdf52-afcf-38d3-8523-7e5074f81419.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.210.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:de:30:23:0f:f2:75:62:96:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=ebc48735-ab21-478c-93da-d2cd955255b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:3f:83:09:2a:5e:c6:7e:f9:b5:21:a3:d0:
                    32:81:7c:13:61:d9:02:82:63:62:39:49:ea:7a:39:
                    2e:f3:46:3f:78:d0:16:88:e7:d1:47:89:f2:ae:bc:
                    5a:24:83:63:88:25:bc:c4:8b:2b:23:30:36:56:00:
                    12:ca:e4:b9:54:39:db:30:8a:c3:3b:54:38:44:af:
                    47:88:1f:a8:dc:4f:61:9a:54:4b:ab:08:15:4c:57:
                    cc:2c:84:3c:8c:3d:ff:7d:f5:5d:bd:fe:9a:50:14:
                    be:c1:16:ff:3e:93:3d:43:84:1f:ce:dd:9f:70:fa:
                    52:6e:7d:11:d5:97:ca:0d:85:7e:4c:59:4b:0b:91:
                    81:47:de:83:ae:cf:2e:7d:c2:93:ec:cc:fb:bc:30:
                    0f:06:a9:6c:9a:ee:70:63:28:53:ca:0e:fa:7d:ef:
                    ad:5f:2c:8b:1a:50:41:fe:c8:ea:0c:29:27:36:77:
                    5d:0c:67:38:16:76:03:6c:a5:67:54:2c:de:5e:12:
                    8e:1a:1b:77:aa:02:ca:61:3a:be:e2:ec:00:4c:81:
                    cb:14:d0:64:a9:f2:04:f7:48:93:ea:e3:61:a8:d7:
                    dc:35:a9:3f:63:3c:b6:9a:80:8c:3c:94:62:cc:b1:
                    6c:86:92:b5:65:9f:e8:79:04:4c:85:4e:4f:10:4d:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9E:5B:68:C4:0F:D7:1B:17:3B:4E:48:73:93:42:BA:28:0A:C0:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/841bdf52-afcf-38d3-8523-7e5074f81419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.210.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:25:be:99:37:cd:56:56:86:2f:e5:fe:b3:3d:5f:75:29:65:
         64:28:e8:1a:80:bf:04:d0:c6:02:f8:10:50:4e:70:68:b7:c1:
         14:6a:98:02:5a:9b:4a:f4:ba:97:9a:f6:de:88:e8:1c:ef:ad:
         69:e3:33:ac:47:35:a5:b7:39:f4:c6:5d:19:a9:b0:50:59:ad:
         90:03:62:87:22:f4:5b:ff:42:b3:17:70:02:61:73:8a:57:15:
         c7:7d:68:ac:e8:39:ab:97:8e:f4:ae:5c:e5:1a:b8:f1:9a:9c:
         ff:53:40:5d:84:ed:60:e6:ea:13:af:56:d4:c2:9b:3f:66:e6:
         71:8e:87:32:d5:64:9e:c2:8e:96:ec:75:2a:5e:4d:0d:97:2e:
         76:9c:a8:21:59:67:42:19:07:b0:d5:26:76:d2:d5:54:63:c3:
         b4:20:2c:03:a8:99:f9:0b:a0:4f:3f:e9:f6:0d:3c:88:90:86:
         a7:03:06:55:d9:85:bc:94:93:e3:59:69:96:16:5a:36:62:f6:
         03:fc:a3:8b:0e:2d:1c:32:67:3c:61:54:a4:e5:22:50:68:c5:
         1b:60:73:e5:c4:0f:40:e9:78:a1:1a:5e:6c:0f:2f:ca:f3:d8:
         2f:4a:ea:82:be:52:e6:95:16:c0:97:6d:96:f4:4b:5a:d7:d0:
         c1:4d:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:47:31 2025 by rpki-client