Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a062cebc-a238-36aa-8aa8-34b54f092b15.roa
File:                     a062cebc-a238-36aa-8aa8-34b54f092b15.roa (raw, json)
Hash identifier:          fX9DvGHnw8SY/upLUYIklTbqkTYKBlsOeUAV+YnFlH8=
Subject key identifier:   A7:BB:2D:88:97:36:08:58:EC:4A:C3:F6:05:6B:95:2D:AD:96:70:98
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6DEF3D8AEC28253D43380
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a062cebc-a238-36aa-8aa8-34b54f092b15.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.216.192/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:de:f3:d8:ae:c2:82:53:d4:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=87487a5f-c7e7-4e69-8246-a58f4921871c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:c8:b1:db:cd:59:91:f6:ca:40:1d:ae:c6:
                    3a:0c:35:35:7e:03:09:ee:74:84:ce:6f:59:06:c7:
                    cb:dd:44:d0:f3:0c:a8:8d:c7:db:93:69:7d:ac:17:
                    f9:d8:65:28:db:c7:8e:30:71:0d:18:12:5d:9f:d5:
                    cc:f9:d9:16:83:1b:f6:bf:cf:12:15:64:31:b4:a2:
                    28:08:8b:db:bd:43:e7:9d:51:fe:81:14:c5:83:ed:
                    9a:df:1c:f6:b2:e1:ca:c4:3a:0b:70:f3:94:b1:52:
                    fb:35:41:b1:98:cb:db:78:4d:5d:ad:bf:ae:4e:98:
                    25:36:88:7d:da:fe:f7:b1:f5:49:a7:4f:73:e1:b0:
                    72:e2:a7:a7:a8:d8:0a:d4:61:75:35:b3:a8:60:d6:
                    3d:a5:10:e9:e0:f6:f3:99:6a:c9:9b:4b:97:5b:b6:
                    46:cd:88:15:b8:12:59:5b:13:6d:5e:92:ef:2a:0c:
                    08:3c:d4:de:f9:a1:f5:ac:17:b6:4c:ef:6f:58:82:
                    7d:e6:40:01:1b:ba:29:e9:0a:f1:71:d9:58:47:94:
                    6c:dd:49:62:d3:3d:a1:bc:00:96:1b:94:41:8b:65:
                    dd:ca:c1:46:8a:ef:cd:4e:b8:86:dd:89:0f:f0:44:
                    51:77:c5:ec:90:50:51:52:6d:d5:a1:79:75:11:c9:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BB:2D:88:97:36:08:58:EC:4A:C3:F6:05:6B:95:2D:AD:96:70:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a062cebc-a238-36aa-8aa8-34b54f092b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.216.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:bc:3f:ef:58:d7:fd:f8:74:42:19:e7:43:6f:c3:26:e2:c3:
         21:7b:8d:b1:27:ae:be:67:6b:49:b8:20:d3:3e:ba:90:2a:c7:
         64:24:3a:00:16:70:3b:83:30:4f:38:ee:bf:97:28:d0:49:02:
         f3:ae:b0:a7:66:f5:51:86:46:69:e7:e7:44:4f:24:61:61:de:
         0f:27:37:e9:17:37:e5:34:7f:97:82:48:64:b6:20:b2:3a:d2:
         74:dd:1c:84:a4:e0:f4:65:b2:b8:23:2f:ca:7d:63:1a:c5:1d:
         56:f8:c0:e6:8e:25:91:77:54:71:7f:11:85:56:09:14:37:9c:
         fc:71:92:57:9b:75:48:e0:52:15:b8:df:13:5f:c3:6b:82:d6:
         bc:4c:4a:93:fa:b2:4c:e6:17:d0:9a:9b:f9:f9:9d:dd:29:71:
         c5:56:df:0e:66:07:8d:52:f6:a5:44:52:c1:9b:21:6a:c3:ff:
         c7:eb:51:0f:47:bc:d0:b1:8f:7a:7a:32:ce:4d:22:45:2d:50:
         3d:1c:7d:ec:b9:70:ba:da:9d:a2:3d:3e:65:9c:2e:35:8e:51:
         4a:df:58:fe:87:24:d9:6a:6a:66:49:62:87:5e:78:a9:3e:2a:
         d5:c4:bf:66:94:7a:50:37:de:6d:28:90:57:20:7e:e1:57:20:
         79:ef:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:06 2025 by rpki-client