Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ee6f910e-8e10-3383-beea-dc29b716f9d0.roa
File:                     ee6f910e-8e10-3383-beea-dc29b716f9d0.roa (raw, json)
Hash identifier:          3Z8nTR4PSpyPch2f0z3fnxZMLY819jDlvXaYacgwCzs=
Subject key identifier:   67:C3:CA:6C:80:68:3A:C6:DA:68:01:C1:91:A1:76:6F:5D:45:16:7D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B6F26AFDE43D87735DE5AEB80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ee6f910e-8e10-3383-beea-dc29b716f9d0.roa
Signing time:             Mon 06 Oct 2025 18:00:23 +0000
ROA not before:           Mon 06 Oct 2025 18:00:23 +0000
ROA not after:            Sun 04 Jan 2026 19:00:23 +0000
asID:                     54113
IP address blocks:        140.248.108.40/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:26:af:de:43:d8:77:35:de:5a:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct  6 18:00:23 2025 GMT
            Not After : Jan  4 19:00:23 2026 GMT
        Subject: CN=82a17ff9-b4fd-4a40-a112-0559ae931854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:33:97:20:27:6c:9a:e9:35:40:29:a0:09:
                    a4:13:d9:7e:e5:b0:43:c3:45:89:0e:0d:cc:bf:2d:
                    d4:43:a9:d2:97:db:34:13:d8:f0:0a:e4:96:71:90:
                    33:5f:76:d8:63:d1:28:50:e4:64:5e:ff:7d:df:ed:
                    7d:d8:d7:23:d9:33:12:dc:76:5f:c4:63:df:d0:45:
                    cd:f7:78:99:f3:f6:d1:c2:fb:bc:6c:e2:15:6a:c0:
                    69:b8:04:c9:8d:84:df:04:6d:88:82:56:f1:55:fe:
                    9a:e1:32:a9:8d:b3:96:5c:38:51:a2:86:fb:6f:38:
                    34:ac:1b:48:6c:7a:d2:0f:47:da:1a:d2:5f:3c:6c:
                    51:5d:ed:4b:6d:02:e7:8b:f3:5b:dc:16:36:c0:e7:
                    26:d4:f8:5f:cb:cf:2e:4b:3d:cd:54:b9:b6:82:69:
                    82:80:77:f3:df:ab:c5:9a:0b:5b:37:24:83:46:5e:
                    24:f7:9a:20:c3:be:3f:57:ae:c0:87:ec:71:0a:b5:
                    eb:a7:eb:4a:43:f3:40:85:29:b0:27:53:9b:11:32:
                    a6:fb:d4:0a:98:a9:97:9c:47:a8:b9:08:22:f5:d8:
                    22:fd:b4:f0:ad:b3:e8:c2:0b:95:61:c0:49:79:7f:
                    f6:45:cd:17:51:bd:9e:78:e5:87:40:3d:89:bc:52:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C3:CA:6C:80:68:3A:C6:DA:68:01:C1:91:A1:76:6F:5D:45:16:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ee6f910e-8e10-3383-beea-dc29b716f9d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.108.40/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:08:14:11:35:c2:f5:bc:28:67:5c:da:d0:ec:58:43:f6:c5:
         76:8d:e4:03:fa:05:98:62:dd:c9:c5:81:5e:30:fd:ca:a7:d5:
         15:b2:e0:7e:24:96:af:57:ff:80:58:b9:9e:e5:a1:3c:27:5f:
         aa:5a:de:c8:82:9d:0a:89:a8:95:00:21:6d:18:a8:f6:12:fa:
         e8:62:91:bf:14:e0:a9:1d:7a:44:27:87:d7:ed:06:4c:27:cb:
         b4:06:28:96:85:4b:f8:ce:b5:a9:f1:8d:56:65:92:df:2d:9c:
         0a:a3:6b:79:96:4b:b3:e6:f8:9b:a8:38:79:a1:e9:0a:03:a1:
         d8:b6:fe:ef:9b:af:4d:28:a6:e3:94:c7:ae:d5:fc:04:a8:22:
         6e:fb:40:63:d3:aa:a2:46:82:69:8d:ee:65:19:ce:51:3e:4c:
         5d:aa:55:4a:12:81:f3:ae:a5:bb:27:b5:a8:8a:78:dc:00:a6:
         99:62:1f:64:a7:a6:8f:c5:bd:ea:c6:95:b7:80:1e:1e:b8:42:
         5a:d2:e3:61:d3:84:17:a7:b2:24:eb:5c:05:73:c6:51:12:87:
         7e:9f:16:a8:38:a1:1c:38:55:70:9c:14:f6:6d:cc:d7:b8:9e:
         83:6c:b4:52:be:26:29:01:2f:4f:92:d9:db:67:47:37:61:f6:
         50:8b:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:41:46 2025 by rpki-client