Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d8d0adbe-39c6-3361-9e2e-8e27f5b46127.roa
File:                     d8d0adbe-39c6-3361-9e2e-8e27f5b46127.roa (raw, json)
Hash identifier:          cC3tCRFt2pK6c3auYZcQ2TYKEPJ8cAXVmSir9KN7T9I=
Subject key identifier:   3D:9B:F7:2C:EC:FD:E7:9A:31:65:60:48:3C:79:0C:26:E9:2C:04:6E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6DE52D39CE05CFF01D440
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d8d0adbe-39c6-3361-9e2e-8e27f5b46127.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.212.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:de:52:d3:9c:e0:5c:ff:01:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=48ebce1f-8220-4429-9019-ea5aaebb7d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:fb:15:47:5b:4f:3c:3f:81:4f:a9:9a:e7:
                    a8:8c:dd:44:b8:91:ef:c3:49:67:e3:12:32:10:e2:
                    bc:60:54:e2:fa:b8:a3:2e:24:cf:71:52:69:fa:9f:
                    cf:f3:94:19:67:db:4b:55:4b:be:f8:c9:28:bc:96:
                    9e:72:7e:6b:aa:72:cc:5d:ec:59:03:1b:fe:5b:f9:
                    e5:49:58:3e:97:e8:b7:c1:3c:a9:dc:26:98:5e:ea:
                    00:21:a2:57:52:0c:cc:6d:91:6c:4d:d2:4e:1d:9f:
                    6f:83:08:32:fc:bd:86:63:b3:12:c6:a6:20:72:ec:
                    5d:eb:fb:cb:3e:53:56:e0:55:e4:f8:69:14:ff:ae:
                    76:5a:fa:b9:72:3f:2c:f3:60:6a:4e:57:8c:a2:e3:
                    70:74:81:69:c5:e2:f2:b7:d4:0a:f3:33:20:c4:43:
                    c2:8e:78:a2:8f:4f:3d:e5:98:9b:ea:39:cd:83:03:
                    2d:b5:7c:5c:27:1c:4e:da:fd:75:fb:9e:87:78:3b:
                    92:47:1b:fa:d0:8d:3e:4a:f9:86:fd:14:ab:ce:de:
                    d0:50:07:0a:0c:a3:6c:6c:a0:2f:e3:8f:7f:24:e1:
                    49:5a:11:e6:66:55:fc:38:33:52:f3:27:63:17:43:
                    a7:f5:6c:88:6e:ab:9a:de:22:ff:a0:7b:1a:f2:52:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9B:F7:2C:EC:FD:E7:9A:31:65:60:48:3C:79:0C:26:E9:2C:04:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d8d0adbe-39c6-3361-9e2e-8e27f5b46127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.212.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f6:4f:26:e0:14:da:e4:77:18:54:ac:22:9b:f9:da:32:9a:
         c6:da:e6:8e:1c:a1:c5:1d:2e:52:f8:13:22:93:e2:b4:a9:64:
         93:6c:2d:6e:1c:bc:80:a4:16:aa:e1:1d:f5:aa:ec:32:25:fd:
         a9:12:a4:cc:49:f1:8e:ed:d3:ba:cb:48:c8:1b:2b:08:fd:ab:
         25:dd:e6:01:6c:55:5e:15:ca:61:b5:61:7e:e7:80:49:79:1c:
         08:fb:12:b8:c5:92:24:c2:93:e8:b6:77:20:bf:d2:ae:3c:e6:
         d9:78:d8:5f:fb:61:c9:e8:59:d6:1f:1d:b3:38:11:b7:bf:1c:
         64:33:c9:29:a5:f0:d4:e0:54:c5:c1:9f:d8:c3:05:05:ed:0e:
         cc:51:d7:f1:96:9b:0a:83:bf:7e:db:d6:b7:e1:ec:5a:9d:5f:
         36:26:65:1e:c4:bc:ca:c0:77:34:4f:d5:2d:9e:b5:76:50:08:
         a5:c0:fe:38:de:aa:59:3c:39:f8:ab:9e:25:d3:56:3b:71:e6:
         5e:b3:bf:4f:ba:29:01:92:6b:a7:7b:1b:a6:34:51:89:19:c8:
         f0:79:87:11:1c:87:96:04:3a:2c:5a:8d:3a:e5:85:1c:1d:5e:
         15:b6:96:bc:cb:46:0d:d0:3d:c6:4c:da:62:4a:2c:f9:01:4b:
         d9:b7:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:23 2025 by rpki-client