Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/484e44f6-8ded-3045-bc0e-6346222ed762.roa
File:                     484e44f6-8ded-3045-bc0e-6346222ed762.roa (raw, json)
Hash identifier:          H0GNulCVOCOeNV2pl8tlhTWwClTXYTk7viYpIjOY/yc=
Subject key identifier:   38:58:72:98:B3:DF:E6:74:FA:35:20:0A:53:9E:AE:44:8E:61:53:6B
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285848CDE102364401635A9AC35700
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/484e44f6-8ded-3045-bc0e-6346222ed762.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        140.248.82.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:02:36:44:01:63:5a:9a:c3:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=665568ee-5277-4b96-a658-173e22b1abea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:c4:80:1f:8a:49:c6:79:12:f3:ef:8e:d3:
                    7b:e3:cc:1d:d7:71:9e:78:d0:16:14:df:72:f8:08:
                    77:5b:47:8f:0c:f4:05:74:a3:80:77:83:d2:6c:b5:
                    68:6f:6c:f0:33:ee:5b:8f:34:e8:1e:78:2c:07:31:
                    8f:80:a7:98:68:ad:c0:8f:a5:2d:db:79:ea:ac:6a:
                    57:04:fb:c0:23:58:bf:09:b4:a5:05:0d:cc:3d:ba:
                    40:f4:e6:1a:8b:d3:e5:b4:7c:da:e8:1e:31:86:38:
                    81:1d:f5:04:76:33:bb:a6:da:21:ad:8b:8d:e8:ef:
                    4a:49:6a:d5:05:21:ad:c3:11:96:2f:5f:c3:77:d1:
                    e6:e6:04:ed:da:fd:2c:e2:ba:0d:5a:4a:6d:0c:e3:
                    cd:86:19:01:a3:20:9f:e3:08:62:de:ce:b2:22:98:
                    6c:45:37:6f:d4:4d:63:35:97:e4:1b:2c:42:57:51:
                    58:13:bb:f4:40:3f:3d:e3:ef:e2:9e:4f:95:da:18:
                    ad:de:89:20:9d:4a:e3:eb:36:61:74:00:4a:80:9c:
                    57:c8:18:a2:bb:ce:3a:c1:36:18:55:bc:0b:45:4b:
                    62:59:c3:3e:66:aa:86:50:d6:8e:b8:a9:8f:6f:b5:
                    23:da:8b:f9:2e:a6:25:07:ce:5a:ff:cf:81:19:6f:
                    28:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:58:72:98:B3:DF:E6:74:FA:35:20:0A:53:9E:AE:44:8E:61:53:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/484e44f6-8ded-3045-bc0e-6346222ed762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.82.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:b5:df:f1:38:5f:7c:a0:14:c8:d3:7b:4c:28:f3:89:e0:
         18:a0:47:51:3f:44:7b:32:8d:54:80:84:ca:fd:f1:af:2c:ad:
         63:fb:c5:25:0f:62:b7:99:af:c0:87:44:77:a6:ad:18:71:92:
         b6:cb:94:c5:f8:be:43:74:96:0c:05:5c:b5:70:f3:d9:b9:dd:
         39:c2:f0:78:90:2f:ba:c3:90:01:67:89:5c:68:a1:ad:9f:59:
         a7:de:f0:4f:6c:f7:88:51:b2:4a:da:22:a2:25:0f:0e:3f:0d:
         71:1f:35:d4:71:a0:0f:ef:f7:be:a1:be:9a:5b:d7:13:a0:bc:
         a1:13:c0:50:fb:36:3e:6b:44:da:68:87:4d:6b:ae:f5:30:44:
         2b:0c:ee:f6:77:ac:87:fd:fd:6f:45:c7:41:03:5f:83:97:20:
         d4:bb:a2:6e:75:c8:b6:9f:ca:ef:dd:39:47:ac:1a:82:da:7f:
         41:0c:b1:f5:57:df:5b:ab:e3:bf:25:4f:f2:55:ef:f1:51:46:
         dc:4e:e9:99:37:8f:e7:00:a3:6e:fc:f0:71:73:e8:4c:5f:36:
         8b:c4:2a:1c:b1:64:8a:f2:29:0d:af:99:27:ec:e3:02:6e:1f:
         ba:fe:46:d0:14:f2:f1:7d:0e:ce:de:9e:d6:29:99:15:7c:94:
         7b:f3:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 03:00:28 2025 by rpki-client