Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2ab51484-3abc-3fb0-8469-3a35bae077d4.roa
File:                     2ab51484-3abc-3fb0-8469-3a35bae077d4.roa (raw, json)
Hash identifier:          kSET9aucucxJAOZLiURRPdGbVL6xZohswDqavotUP24=
Subject key identifier:   4E:C9:8B:BC:54:0B:FD:38:8C:E5:F5:CA:82:F1:E9:4C:A0:50:DC:B2
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C4288A69E01A6B17A24BC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2ab51484-3abc-3fb0-8469-3a35bae077d4.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.244.240/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:28:8a:69:e0:1a:6b:17:a2:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=a3e51113-cbfb-46ec-bd7a-45339b094fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:19:ad:7f:86:8a:1a:85:a5:00:f0:c0:dd:c8:
                    b8:81:d9:b6:c4:9c:82:01:c6:4f:5e:20:76:16:28:
                    60:f7:50:d8:a9:93:f1:1e:8c:df:03:4e:70:b6:ac:
                    85:3d:53:47:2a:52:9b:6e:cd:13:c6:e4:a0:3b:df:
                    17:cb:b1:05:dd:51:bc:0a:30:0c:f0:ac:fd:99:b5:
                    ed:ed:5d:e8:df:ee:3c:58:80:59:76:f6:d3:f1:05:
                    d9:00:5c:cb:08:fb:5c:62:fb:64:0d:d2:e0:fe:12:
                    c6:19:6d:c6:e8:ed:77:2a:33:29:e8:45:79:08:e6:
                    bf:a7:f5:1c:d8:a0:5e:5c:24:d3:19:bf:4a:32:a5:
                    6c:56:4d:a7:d2:6d:2f:3b:26:20:5d:fb:e1:25:34:
                    b3:c9:09:f3:4f:b1:3d:14:9c:33:33:98:f3:bc:ba:
                    aa:87:83:e0:f3:c7:16:72:42:7a:44:7b:db:8a:78:
                    f7:a1:c4:d1:42:3b:a5:35:ac:10:14:e8:ca:de:6b:
                    b7:6b:4f:e3:a5:3f:54:da:ba:e3:8b:c1:53:c6:a8:
                    36:e7:51:86:d7:83:b0:aa:84:7c:a7:4a:ab:47:59:
                    db:c9:de:d2:4b:da:37:aa:9f:cb:b7:fc:87:02:a1:
                    9b:07:f0:ee:f3:c6:47:a4:87:65:c2:77:dd:14:ad:
                    f5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C9:8B:BC:54:0B:FD:38:8C:E5:F5:CA:82:F1:E9:4C:A0:50:DC:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2ab51484-3abc-3fb0-8469-3a35bae077d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.244.240/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e2:60:5f:8a:2e:ff:40:0a:29:39:ea:ad:b4:a2:25:a9:7c:
         cc:6e:b1:27:fb:ac:e8:ea:55:c0:55:33:dd:c3:96:61:03:cb:
         82:12:36:34:e7:9f:2d:5e:68:27:fd:9d:30:a2:72:8f:45:c3:
         ef:c4:11:01:8f:97:64:87:63:64:0e:b9:c7:0f:10:67:c4:a9:
         3e:3b:cf:3b:e9:0e:00:b0:2d:43:0f:b1:26:f8:6a:e1:8b:be:
         ac:a4:b3:68:4f:e5:5a:12:b1:89:ef:de:04:e8:d1:7e:60:31:
         c9:66:a3:40:17:2c:2e:35:4a:3b:ba:13:0a:fb:71:e8:2d:ae:
         f2:e8:c6:7c:5e:0d:fc:9b:0b:8a:5f:5d:fd:fe:3a:03:51:2a:
         38:21:ca:0b:8c:13:85:89:08:8a:ba:d5:17:5e:d9:90:eb:d4:
         a1:ff:cd:6d:49:52:04:29:93:42:f8:34:4c:0d:a2:a2:9f:b6:
         25:5b:09:25:77:9d:aa:bf:af:de:59:04:ae:14:9f:21:1b:77:
         a6:a5:dd:62:94:f3:e0:a2:dc:96:1c:68:92:b5:83:51:4c:44:
         ca:47:c5:2d:31:39:88:2f:50:83:38:ae:4a:9c:62:66:ba:cc:
         78:98:77:74:90:3d:bd:12:30:06:69:a7:38:21:5a:24:8b:55:
         49:0c:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:58:17 2025 by rpki-client