Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/beb91fd3-846c-343d-8fde-a6fecbe9a097.roa
File:                     beb91fd3-846c-343d-8fde-a6fecbe9a097.roa (raw, json)
Hash identifier:          nasXjvCGDC85osEuiSQeqAOyHajKmVzoG6bKvqG4g7g=
Subject key identifier:   8C:EC:33:A7:DD:FE:14:A6:10:F2:A3:09:2F:CA:4A:54:D4:07:AC:98
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6EB2F90567D7AB06A5100
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/beb91fd3-846c-343d-8fde-a6fecbe9a097.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:eb:2f:90:56:7d:7a:b0:6a:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=193defea-abb4-49d3-b538-91e274e6f832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:d9:ec:40:10:fa:c3:c7:cb:e1:1b:48:e3:
                    22:34:53:8e:a4:31:22:56:b3:2f:ba:c5:93:43:06:
                    b4:be:e8:9f:bf:75:16:31:9e:84:8b:f2:05:1f:7e:
                    ed:34:e7:c7:d2:98:9a:68:ab:ef:3b:5c:b6:3d:55:
                    d4:03:ad:f3:9c:f4:7f:c1:03:63:86:2c:c6:da:2c:
                    77:5a:de:7f:ff:a9:84:9f:0a:49:1d:3a:5d:dc:c3:
                    57:cd:a0:6c:bc:c8:3a:9a:f3:0c:e6:f2:4a:ee:74:
                    d0:2b:e4:aa:b6:65:3e:f3:19:ee:f5:bd:c2:08:1d:
                    be:29:a4:13:6b:1b:67:84:b5:7b:64:71:49:07:f7:
                    19:d4:5e:b2:a4:c1:07:0e:81:eb:c0:0a:23:19:18:
                    e2:6c:66:08:58:ad:7f:01:30:b6:3c:70:2b:f4:2a:
                    d3:1c:b1:b1:31:a6:ee:90:1c:4c:23:09:49:e1:7b:
                    93:77:45:11:c4:81:04:2c:dc:ce:04:43:a5:98:d0:
                    5b:ee:c2:c7:df:3d:1b:ae:00:f5:a1:4b:0e:3e:77:
                    e6:b3:f6:73:ee:14:bb:e0:52:5d:ac:29:3d:d2:59:
                    4e:9e:62:32:29:50:d1:d9:2e:f2:fd:7a:ce:ca:21:
                    28:97:a8:8c:49:08:c2:04:45:bd:52:58:b9:0b:e3:
                    0c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EC:33:A7:DD:FE:14:A6:10:F2:A3:09:2F:CA:4A:54:D4:07:AC:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/beb91fd3-846c-343d-8fde-a6fecbe9a097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:22:ea:93:8f:32:8e:ed:31:fe:37:e9:98:74:3c:5a:dd:
         6d:00:65:14:59:02:4d:d9:7c:61:33:32:44:8e:41:7d:aa:b3:
         01:cc:36:0b:1d:a3:49:2d:dd:b8:27:91:95:74:c8:d0:3a:55:
         f9:7a:4e:3a:fd:b2:e5:e1:1e:1e:23:fe:d6:1d:93:ec:66:c3:
         47:4c:8e:4c:64:26:3a:e6:82:6b:c7:42:df:b2:b5:ff:06:8e:
         6c:5d:3a:54:69:02:0b:9b:1a:85:1f:c6:5f:ca:e2:7a:3d:7e:
         54:32:4e:6e:c9:9b:21:2e:39:76:35:2c:3a:fa:20:5e:4f:00:
         b4:72:c1:61:aa:c5:16:2b:c0:12:0e:db:b9:93:fb:c1:fc:3c:
         8d:c6:8f:99:57:2b:d6:0e:b4:d9:43:d4:16:ec:74:31:ad:7a:
         e2:5e:7a:c1:4a:ea:74:f0:b8:21:96:25:5f:a3:6c:6f:10:73:
         7f:49:42:23:d3:99:fc:2c:92:c6:fe:30:e1:60:9c:e7:69:41:
         d1:c6:57:cf:35:e8:ba:83:8b:f0:f0:04:de:6c:89:ea:7f:70:
         a8:31:e0:20:fe:cc:27:7a:d0:56:c8:19:89:55:5b:1b:49:a9:
         55:bd:1c:36:c2:8f:55:26:c0:a5:b1:5c:70:30:5a:c2:51:c2:
         bd:c7:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:43:18 2025 by rpki-client