Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9fbd086e-1beb-314d-8fd7-7dfd88339a34.roa
File:                     9fbd086e-1beb-314d-8fd7-7dfd88339a34.roa (raw, json)
Hash identifier:          3qasPPQHgJhyMKGLx+hnAz5YNbeBCWwNEXJPj8cl0ws=
Subject key identifier:   7F:22:09:9B:46:2A:1F:FD:C6:F4:32:9A:99:6D:0D:D2:B3:23:A3:C4
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6DCD534D988015DB36A00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9fbd086e-1beb-314d-8fd7-7dfd88339a34.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.219.128/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:dc:d5:34:d9:88:01:5d:b3:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=3973e516-4cb4-41ea-b862-93878fe80ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:11:b9:ab:11:b0:7a:cb:54:8e:84:c4:36:
                    6e:e7:91:d7:a9:99:a8:6e:63:2f:a6:20:c9:14:59:
                    a4:ba:d8:8e:dd:ae:c6:d5:43:f9:4e:d5:59:3c:ef:
                    91:42:af:4a:f5:53:f0:ba:45:9d:cc:75:da:4a:42:
                    b8:33:7d:f6:42:00:08:7a:a2:96:b4:9e:68:b9:74:
                    b0:62:c9:5e:07:85:6b:e0:af:3f:1d:a8:ed:d4:55:
                    76:f5:50:0b:fb:4f:9f:44:3b:39:85:30:a8:6c:86:
                    af:18:9b:a7:2a:7a:16:4c:00:a1:92:1d:35:b7:f7:
                    06:a2:96:39:a8:2c:bb:c2:0b:c5:6e:d9:c5:01:a1:
                    74:85:02:21:85:05:65:cd:6a:0b:fc:52:58:86:7c:
                    2a:30:0d:ed:61:45:c9:d7:91:58:26:e8:ac:e2:8a:
                    e0:b6:2d:71:e7:ad:56:cb:91:58:3d:20:d5:de:9c:
                    02:ba:ba:0b:d7:70:5f:d2:3a:f4:be:5b:52:9a:91:
                    69:2b:ad:64:95:c5:b6:38:ef:6e:34:63:af:b0:77:
                    40:e9:f0:8f:21:e9:36:24:a2:e2:2f:b3:fc:45:35:
                    b3:38:7b:3b:1b:6c:17:30:86:98:7c:a9:4d:54:be:
                    ad:40:51:aa:91:97:1a:84:f4:48:a5:95:1d:c3:b6:
                    33:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:22:09:9B:46:2A:1F:FD:C6:F4:32:9A:99:6D:0D:D2:B3:23:A3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9fbd086e-1beb-314d-8fd7-7dfd88339a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.219.128/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:9c:59:be:42:89:29:61:5b:d7:70:ca:30:4a:10:dc:6c:
         01:50:e4:95:3d:af:2c:29:8a:5c:04:11:68:9d:4b:ed:f8:d9:
         c7:24:02:a8:27:24:50:2a:90:57:6e:b6:6e:8c:f9:89:5a:d8:
         c5:dd:3d:60:cd:7f:3b:2e:56:75:44:21:6f:9d:5d:eb:cf:3a:
         19:ac:e9:e2:bd:c5:bd:3b:47:08:dd:5b:78:39:b4:37:e7:01:
         2a:81:19:b3:7d:58:eb:81:38:2e:ab:df:cb:59:18:bd:8b:26:
         a7:77:7e:6f:33:61:52:62:76:1e:34:1f:76:a9:c7:d5:7a:a8:
         1f:04:b1:63:79:cf:bf:f0:4d:c3:ce:3f:42:a8:f9:6c:51:d7:
         09:cf:a2:2f:87:89:63:f9:7e:22:af:35:8d:1d:a6:25:a6:44:
         d0:06:e6:a1:fb:bf:29:a0:f9:b2:bb:f4:8f:06:7b:c4:b2:1e:
         ba:9f:c2:34:48:16:7e:48:2a:53:fe:77:a9:08:6c:31:4a:13:
         cc:ce:4c:5c:3a:49:b7:1c:df:da:7c:bf:aa:61:8b:00:ad:2d:
         65:f3:50:0b:9d:bb:65:00:3a:3f:db:b6:a8:dc:72:dd:53:8c:
         99:e6:f9:3f:12:44:ef:e5:5c:57:44:d0:ba:5f:4f:49:a9:6e:
         19:ae:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:07 2025 by rpki-client