Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c86adb36-4e6e-3387-9571-1d8eeec36b91.roa
File:                     c86adb36-4e6e-3387-9571-1d8eeec36b91.roa (raw, json)
Hash identifier:          zH2Q0Tlp+3v4pgp9SZ0XxRKNojQzTI0nW1dzGmnGraA=
Subject key identifier:   15:04:C6:3E:F6:71:65:EB:60:1F:F2:66:28:F0:51:1B:23:C0:31:1B
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B6FF73F46ED8FCDBAAF35D400
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c86adb36-4e6e-3387-9571-1d8eeec36b91.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     54113
IP address blocks:        140.248.108.0/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:3f:46:ed:8f:cd:ba:af:35:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=9a266ace-87fa-4023-9409-cf2737573173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7f:62:70:04:d0:94:ec:a1:43:37:a1:44:09:
                    c7:41:28:9f:da:9a:09:93:1c:84:90:47:9b:5e:b8:
                    a4:65:6a:da:cb:4f:d6:59:01:98:7b:8d:66:f0:40:
                    b3:74:88:f1:d3:40:e3:3a:cf:f6:e4:c2:78:2f:77:
                    dd:2c:79:f5:e3:02:8c:0a:7b:87:94:2f:ea:c5:0b:
                    c1:ba:0e:2a:c1:bb:3b:8d:32:7d:23:03:03:1f:38:
                    c3:42:6c:ad:27:e3:25:0e:85:c6:99:60:0e:85:16:
                    36:32:de:1a:c8:81:ee:9d:09:0a:d4:81:9a:9c:c3:
                    ad:68:69:99:7a:d3:b8:b6:bb:19:c2:5e:49:a1:ca:
                    0e:58:15:c7:77:f2:18:86:e0:c4:70:e0:1d:61:1d:
                    b8:00:b5:e3:fa:3a:2b:58:7e:a1:bb:1b:44:b2:72:
                    02:51:f1:40:1c:a3:d0:5a:83:6e:e7:7d:90:e3:41:
                    01:ee:ab:59:f8:af:36:fe:bb:8f:bd:3f:69:76:a5:
                    c8:37:78:cf:eb:50:f5:4d:0a:70:58:18:b2:61:79:
                    6d:2c:fd:b7:68:55:5d:63:ac:72:c3:14:d1:e0:4a:
                    50:89:1b:13:e9:fe:6c:8a:43:62:92:b0:a9:43:e8:
                    eb:3d:56:f5:5c:fe:b3:12:08:3c:52:24:07:e2:ce:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:04:C6:3E:F6:71:65:EB:60:1F:F2:66:28:F0:51:1B:23:C0:31:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c86adb36-4e6e-3387-9571-1d8eeec36b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.108.0/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e0:23:a4:08:82:18:01:1a:ff:53:44:75:5e:d5:fd:a1:d0:
         52:82:22:05:d8:24:ed:6b:8a:a3:ff:41:e8:d4:a9:7d:59:98:
         a9:93:39:2f:ee:68:98:c1:91:ea:57:5a:6a:87:9d:7b:8a:01:
         94:a2:72:da:d7:f1:80:ae:f5:07:07:64:05:37:05:ae:8d:5b:
         a5:11:92:48:52:ff:f5:1f:6b:2c:14:0b:e7:28:19:ff:cd:12:
         16:5d:81:0b:ae:40:c7:c3:21:ce:27:87:95:d0:fd:b3:43:f3:
         8d:50:5a:e5:31:22:bc:b0:39:e0:73:05:75:9e:58:12:b4:01:
         53:e4:9b:34:d3:40:5e:9c:fd:ac:4d:b0:03:f7:10:55:d2:3a:
         fe:2d:aa:c6:e5:21:0d:1d:5f:ee:97:52:b9:4f:04:7f:ad:1a:
         0d:ff:6c:05:00:c9:1a:10:d0:ae:9c:7b:16:b7:86:7b:5d:62:
         6e:b2:8f:c5:49:a3:0d:48:a6:25:36:65:0b:ff:15:7f:f1:a3:
         3f:7c:1e:56:cc:e8:dd:cc:c2:96:72:7b:1a:32:b1:34:3f:e6:
         54:1c:62:b7:6d:60:ed:87:f6:29:97:4c:6e:af:61:39:63:e1:
         a1:bf:25:f7:d2:1e:d2:75:2f:cb:33:82:b4:39:74:2a:38:fe:
         33:80:db:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:19 2025 by rpki-client