Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e2c11ea1-c423-35e7-8e41-3c3b9b7542cd.roa
File:                     e2c11ea1-c423-35e7-8e41-3c3b9b7542cd.roa (raw, json)
Hash identifier:          p1DT1wgHqhVclnGWkxWxlgRNE47tRHMwdSXHxzBzx/w=
Subject key identifier:   BF:F6:FE:C7:EA:08:BD:A2:EE:78:29:23:AD:A8:AF:10:7D:E9:C3:02
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B3DB8983092741315575CC800
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e2c11ea1-c423-35e7-8e41-3c3b9b7542cd.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.220.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:98:30:92:74:13:15:57:5c:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=010da49c-a37a-45d0-9eff-2fa3baddd3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:24:03:ec:a6:cd:30:f1:48:c7:64:cf:57:
                    43:e7:e7:3f:63:8c:1e:67:79:05:13:43:3e:4f:e7:
                    86:a1:21:df:42:60:e1:53:26:06:9a:05:cb:0c:09:
                    48:7b:79:b0:de:d9:e6:8a:64:33:1e:0b:af:54:12:
                    00:d0:28:f4:5e:f7:da:6a:5d:30:0e:3f:2e:a1:28:
                    b9:aa:c4:94:c5:d9:bf:11:f5:4d:d0:5b:68:45:da:
                    46:a1:5e:5e:bf:a2:ce:dc:c3:e1:d6:b3:db:d9:13:
                    6a:14:6b:b4:bd:42:6b:0e:e1:92:d2:b3:49:ad:51:
                    c7:f0:bb:88:e6:14:c8:a4:da:8b:0f:4b:51:c4:4d:
                    ba:dd:77:0a:d9:4d:20:00:01:f5:cc:a0:4e:d8:e5:
                    cd:30:c4:fb:9d:88:1c:30:19:71:28:4a:c3:aa:91:
                    ff:1a:10:9f:6c:4c:f7:1d:e1:24:5d:0a:fd:64:8f:
                    ca:ff:d4:da:d6:1a:06:06:8b:6b:30:e5:f0:ec:7d:
                    0a:ed:cb:4c:fb:fb:68:5e:07:eb:17:4b:d9:12:6a:
                    0b:e4:35:7e:9d:36:fd:f0:d4:af:2d:bb:7d:66:0c:
                    3b:69:e8:55:0f:2f:01:68:9b:84:d6:56:cd:fe:4a:
                    a9:1d:a2:ec:b8:8c:cf:2e:28:35:7e:9b:27:43:20:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F6:FE:C7:EA:08:BD:A2:EE:78:29:23:AD:A8:AF:10:7D:E9:C3:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e2c11ea1-c423-35e7-8e41-3c3b9b7542cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.220.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a4:3a:67:24:68:21:a3:86:39:3e:9e:d2:f6:e2:c9:23:1c:
         c5:12:90:ff:e2:07:4d:d1:9a:30:77:cf:0e:fa:d9:d1:26:7b:
         58:2b:6e:40:3c:ec:63:a5:d1:1a:cc:04:e4:89:00:fb:53:aa:
         52:bf:06:eb:81:b3:4b:89:ef:1b:7d:b1:a4:ec:3c:fd:ff:8a:
         7d:30:01:45:8f:d5:12:b9:c7:42:28:30:9c:bb:b4:5b:50:fa:
         22:eb:1e:20:bb:4e:25:2c:6d:92:e1:f1:b9:c0:a7:58:67:64:
         10:ed:bd:aa:aa:17:d1:d0:21:1d:9b:de:bc:2b:a3:9d:54:23:
         ac:47:6f:1b:7b:81:99:27:37:c7:18:e9:4a:10:d7:bc:f7:57:
         0d:55:e8:b7:3a:ca:cd:e2:9f:dd:33:a7:ab:3b:0d:91:0d:f5:
         71:2d:3b:d1:cd:d0:5e:e9:d2:e0:d4:7c:83:ae:f0:b3:dd:cb:
         55:f3:3b:44:49:fb:96:72:14:84:5d:37:81:02:38:d2:58:a8:
         94:f7:72:58:2d:1f:37:d1:dd:0c:94:d1:7b:18:e4:fe:bf:64:
         e7:27:97:d9:97:1f:f3:b0:ce:e9:22:82:f2:75:f1:99:e7:6c:
         a3:90:a4:f9:45:b8:bc:b4:cf:5a:c5:78:df:54:26:72:47:c3:
         a8:7e:2d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:29 2025 by rpki-client