Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d0fdcccc-3387-3de3-8576-6d94866bc8b7.roa
File:                     d0fdcccc-3387-3de3-8576-6d94866bc8b7.roa (raw, json)
Hash identifier:          Io5MHXclvuX97JlutW5FX9+haVKiwNdliZwu0MWJ//8=
Subject key identifier:   57:E4:CF:73:97:D4:D9:8A:D6:25:CE:6E:A4:9C:71:14:B0:47:A8:D2
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6DEBC04E1CA2E70749180
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d0fdcccc-3387-3de3-8576-6d94866bc8b7.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.216.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:de:bc:04:e1:ca:2e:70:74:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=52c70735-8302-4811-b7e9-7bd8e245c5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9e:f2:22:5f:60:02:df:85:c3:9d:2f:a2:1a:
                    24:cf:a1:89:58:df:f6:01:41:40:c4:22:39:55:a3:
                    fb:1b:e7:28:b7:8d:97:c0:13:92:ab:eb:64:0a:20:
                    d7:c2:cb:ee:85:6b:84:06:6c:f7:75:44:f6:1f:5f:
                    0c:31:c1:3d:f1:98:ec:72:82:eb:e7:5b:d7:ea:6a:
                    7f:17:cf:c3:8a:69:ee:00:b9:ae:20:a1:a1:e3:23:
                    bf:f1:bc:7c:cc:fe:7e:bc:70:82:ed:8a:d7:82:25:
                    24:d2:53:87:cd:20:1f:92:2f:14:1e:a3:b3:f8:b0:
                    e9:70:28:93:71:de:34:ce:3a:c9:82:af:6d:5a:4d:
                    06:f9:b5:3a:6f:a0:d1:92:36:b0:d4:af:ed:2b:d4:
                    f6:42:66:9a:1a:8f:d4:00:b1:6f:07:90:14:8b:e7:
                    f3:c5:e6:e6:bb:ca:5e:ba:2a:cf:32:97:34:15:70:
                    bc:66:0a:60:b3:b9:68:8c:4b:a5:2e:9d:99:41:91:
                    84:92:c5:70:d7:91:85:76:8f:a3:28:00:1b:41:e8:
                    b3:68:b5:02:1b:7b:bd:97:50:3b:11:64:7a:28:b1:
                    eb:f9:d4:6b:42:62:d4:97:f0:10:3a:2f:c9:80:9a:
                    42:5e:65:1a:fa:94:37:1f:66:42:23:2f:06:83:b3:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E4:CF:73:97:D4:D9:8A:D6:25:CE:6E:A4:9C:71:14:B0:47:A8:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d0fdcccc-3387-3de3-8576-6d94866bc8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.216.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:79:b4:8e:cb:08:41:18:c5:98:ac:7a:76:72:cf:80:f5:12:
         83:ed:78:af:66:bb:06:56:db:cb:75:3a:0e:02:ff:fa:c6:40:
         83:64:29:da:e2:79:c4:5f:c1:42:ae:9e:eb:94:2e:15:00:c5:
         b0:4c:bc:77:cc:84:95:73:78:59:ef:09:0f:b7:9a:8a:53:21:
         f2:f0:03:25:b6:81:f9:04:48:88:98:94:14:48:f4:d1:9d:17:
         70:01:fc:81:96:05:74:7a:46:ba:98:2f:0b:c7:a3:03:a2:80:
         9b:76:b0:ac:33:73:ab:fa:80:f9:21:75:12:d9:29:50:5c:31:
         9f:a3:da:7c:f8:86:7f:1f:89:56:3b:d2:4b:cd:a6:e4:79:14:
         9b:33:61:d4:30:da:b0:66:77:96:44:01:05:11:f6:93:41:25:
         14:f9:5d:98:ae:ec:e1:34:f0:37:57:7d:ab:6e:3a:2a:d6:10:
         2c:a3:7a:54:24:2d:85:e6:76:5e:38:a6:65:cb:64:51:af:49:
         bc:fd:2b:c3:5c:9a:d0:c0:02:55:53:00:1b:a6:c1:6c:af:f3:
         f4:ea:10:af:d7:75:8f:d3:3c:94:95:fd:f9:8f:d4:2e:55:35:
         83:0a:5d:39:4e:bc:5d:f9:26:c8:f8:6c:f5:77:6a:b3:63:8c:
         66:2a:0b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:55 2025 by rpki-client