Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e50ab0c5-67dd-3b41-8836-08ff82da7088.roa
File:                     e50ab0c5-67dd-3b41-8836-08ff82da7088.roa (raw, json)
Hash identifier:          PuSmuGv++Ab04HkWCFi0m6kn8LEAYsGYqzGZJR0hVtE=
Subject key identifier:   D5:5C:04:A7:5A:9F:F8:03:E0:4E:00:65:62:97:FA:E7:6F:9D:D0:58
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6E7A74D05FF995A820978
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e50ab0c5-67dd-3b41-8836-08ff82da7088.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        140.248.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:e7:a7:4d:05:ff:99:5a:82:09:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=951efc17-bf9c-49c5-87cf-dd7d6dc5fc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b2:fc:28:16:b8:6a:b6:2f:a4:1d:eb:f0:a6:
                    a4:d4:b0:ee:be:ee:06:48:11:ad:96:05:97:54:36:
                    36:81:5f:d0:be:e1:57:8e:93:13:97:1c:ea:c9:95:
                    73:1c:ff:ff:1e:f1:fa:57:c0:27:90:aa:29:51:08:
                    42:a8:a3:82:05:30:40:5e:5c:23:be:34:72:9c:54:
                    69:fe:98:71:1a:df:1e:60:b8:fb:28:55:60:49:5d:
                    93:ea:c0:87:fe:ac:72:de:2b:ad:bb:d7:ea:fe:19:
                    b8:e7:df:c5:7d:95:5c:76:23:76:e0:b4:4e:80:cc:
                    6c:94:ad:6d:78:79:6c:a9:79:73:a8:54:15:66:28:
                    bf:bb:f3:94:3c:c1:79:1b:7d:2c:7a:25:7e:b0:c9:
                    31:3e:6e:62:f4:d0:4f:25:fc:73:e3:d4:7f:84:e5:
                    eb:ed:67:c4:4b:f6:24:8f:94:ef:d7:49:ae:43:f6:
                    8b:b9:97:01:d0:83:a7:90:56:a9:f9:e1:a9:99:ac:
                    db:08:33:0d:1d:0c:63:1c:22:8d:fd:f1:2f:b9:9e:
                    d9:4a:a1:20:9d:bb:03:26:d5:cd:7d:3e:fe:8b:b9:
                    d0:cd:0d:2b:bd:d0:ed:74:bc:39:fa:24:e3:04:9b:
                    10:5a:11:57:d7:07:c9:cc:46:20:92:f2:2d:ff:81:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5C:04:A7:5A:9F:F8:03:E0:4E:00:65:62:97:FA:E7:6F:9D:D0:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e50ab0c5-67dd-3b41-8836-08ff82da7088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:a5:ab:e1:58:38:c5:70:6f:e2:b6:69:31:fe:de:4a:47:5a:
         b6:3b:17:d6:14:bc:00:cf:6e:bf:53:ba:96:c9:e0:25:f5:1a:
         d6:75:68:79:69:83:ee:9b:e4:25:72:9a:91:00:64:70:a8:89:
         e3:7e:de:8b:ce:64:28:e8:8e:44:65:c4:25:d1:9e:9e:9b:ec:
         ef:0c:0c:2f:ed:09:95:5b:6a:6c:cb:cc:6a:6a:8a:a3:64:3f:
         4a:7a:ac:4a:19:ac:40:85:0a:b8:6a:04:ff:a0:f6:ad:24:c0:
         93:bc:66:43:91:39:e2:82:ad:9e:4b:29:77:da:63:78:23:ed:
         5e:98:c1:e5:69:c9:f6:1c:c6:97:29:6a:2d:b9:ad:51:c6:dd:
         c6:e7:b5:ad:23:33:3f:97:d0:67:a9:f5:98:33:31:62:a8:8a:
         2f:55:8b:80:2d:b3:8a:75:f0:a4:f5:f2:91:35:8a:67:b6:ef:
         34:51:3e:80:f5:0f:25:2d:46:33:e6:93:53:f8:22:94:10:50:
         dd:2e:b7:43:10:3c:2c:6c:f8:af:bd:51:91:e4:16:0e:bf:fa:
         bb:18:24:29:14:19:1d:14:21:35:43:13:6b:58:b0:b8:43:d8:
         d9:46:b9:d3:5d:58:9b:b5:68:b8:ec:a7:4c:75:3e:60:2a:13:
         b2:22:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:56 2025 by rpki-client