Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/267cb3c2-f9c3-3477-88f2-c5dd25aaf018.roa
File:                     267cb3c2-f9c3-3477-88f2-c5dd25aaf018.roa (raw, json)
Hash identifier:          /9SyjgESYpG1ciSeR8Vzx/cgA6/2kN6zvSeivNbb3GE=
Subject key identifier:   98:42:35:CD:ED:83:2A:03:69:D3:F7:B1:91:1E:AE:69:90:6C:67:54
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42D62BE60F488D0B42600
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/267cb3c2-f9c3-3477-88f2-c5dd25aaf018.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.255.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2d:62:be:60:f4:88:d0:b4:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=f6b7a9b6-6e37-4e2b-9a32-2dc9393ecc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:06:62:f3:3e:f7:e7:ad:89:ec:f4:41:4b:
                    37:42:c3:cc:fc:0a:08:3a:a7:8f:c8:b8:bb:75:af:
                    a9:73:94:57:ef:3f:60:97:56:11:29:e5:af:8f:0c:
                    8a:95:57:8a:cf:ef:b6:0e:5b:ff:1e:c5:94:21:87:
                    53:8a:4c:ae:5f:4d:0b:77:fd:8e:b8:21:9c:9d:27:
                    4d:5d:a2:b8:0b:60:99:bc:cd:d3:d8:70:53:e2:79:
                    3a:d7:20:97:d8:2d:b0:f4:54:d4:7e:8b:a8:40:3a:
                    a6:37:90:d9:c1:f0:ce:7b:bb:ad:ec:ef:23:8a:8d:
                    b3:06:ee:82:11:8d:06:10:4a:6b:07:26:ab:09:4f:
                    6e:31:a1:13:6c:35:62:27:64:2e:76:f7:65:2c:ab:
                    76:29:50:04:e1:cc:e0:d3:7a:cc:19:9d:d2:ed:f2:
                    a9:85:49:33:03:e4:29:22:9a:da:a1:ad:69:97:00:
                    69:28:76:6f:ae:a4:1c:26:67:eb:ae:6a:3f:5a:1f:
                    52:83:e1:fc:86:58:df:ac:dc:6e:8d:5b:f6:45:2a:
                    1b:bc:b6:cf:4c:0e:36:79:17:1e:d0:a7:aa:f2:ae:
                    d7:4d:10:31:53:a4:33:47:3b:aa:66:18:ef:a6:ee:
                    00:cf:56:d6:dd:71:1e:93:ea:8a:1b:ad:48:f4:3f:
                    91:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:42:35:CD:ED:83:2A:03:69:D3:F7:B1:91:1E:AE:69:90:6C:67:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/267cb3c2-f9c3-3477-88f2-c5dd25aaf018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.255.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c3:2c:77:09:45:9c:70:98:8d:ea:88:81:77:95:b0:de:a6:
         75:e7:b2:84:ef:35:fb:63:1a:c0:74:eb:89:28:01:48:f1:c9:
         de:ed:30:f0:f9:e0:01:62:a8:d3:74:e3:a3:0c:f9:1a:0d:88:
         8b:f8:50:94:bc:d4:7d:47:da:d0:d2:b6:02:f6:31:85:55:e5:
         1a:92:47:3e:c4:ed:21:7a:a4:0d:51:b7:0d:27:b2:df:46:4b:
         59:f2:5c:02:12:01:05:ce:48:7e:44:b2:a1:d2:dc:c1:6b:74:
         91:b2:95:dd:6c:fc:3b:3d:ce:45:57:11:43:af:1a:15:96:a2:
         30:b5:49:32:44:1d:88:8c:52:c4:84:41:a8:fc:d5:92:56:e8:
         24:10:45:ac:16:1e:ed:92:6c:cc:d7:d7:bf:8e:31:44:8e:d9:
         c3:46:12:ed:34:85:98:33:3c:77:21:0b:b1:c9:11:71:f8:82:
         b6:f3:68:a7:6e:dd:db:c7:30:a5:8f:34:8e:5b:82:9d:ab:3c:
         80:91:a9:9e:e2:98:c6:fc:ea:f3:20:88:c8:21:50:c1:52:cf:
         a7:57:cd:c6:26:e5:2b:dc:d7:31:e7:93:29:93:6f:78:55:14:
         6a:e8:d2:1b:dc:2e:55:bc:1f:44:29:6d:39:8d:9a:c9:60:ac:
         2c:e2:8f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:58:55 2025 by rpki-client