Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/527ba1d8-5427-3a10-a516-84e1edf0a9ee.roa
File:                     527ba1d8-5427-3a10-a516-84e1edf0a9ee.roa (raw, json)
Hash identifier:          WCsu6E4fyU+uUjbhcGyn7x2ot/DJCe6/pRvubbG762o=
Subject key identifier:   65:0F:B0:A5:38:0D:FA:62:46:F6:06:A2:B6:50:E4:CB:CA:1E:91:56
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42C1894F87A0F52BD2860
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/527ba1d8-5427-3a10-a516-84e1edf0a9ee.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.218.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2c:18:94:f8:7a:0f:52:bd:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=8867ac35-1e2a-4529-96f8-694d134fc894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a1:71:1a:2f:53:ab:02:d4:dc:30:40:09:5d:
                    6d:aa:d8:56:1c:d0:97:3c:53:29:0e:d5:2b:57:f8:
                    9e:f8:55:cf:5c:e2:32:1b:5e:7f:8f:b6:0e:73:7a:
                    fa:74:a2:03:cb:79:b4:0f:dc:5f:b1:66:32:29:7e:
                    6e:c0:61:47:bf:f4:c1:a4:72:e8:07:62:36:9a:ae:
                    3e:3a:5b:fb:da:6a:86:f0:6f:f9:01:2e:9d:aa:5b:
                    3d:a6:fa:e7:f4:26:ea:96:85:27:68:19:3c:f8:da:
                    a4:60:c0:97:e2:d5:12:94:68:fe:e3:ad:f0:22:43:
                    dc:8f:0e:17:c3:89:85:91:fa:43:98:59:fa:1e:e0:
                    07:a2:2f:d3:4f:35:87:76:5c:ab:77:bd:e4:23:1b:
                    10:9b:0a:92:57:79:49:85:6e:e1:f5:5b:53:b6:69:
                    74:aa:b0:7c:e6:31:84:f3:2c:b9:ba:53:ea:05:17:
                    22:be:c5:ab:87:c7:7e:73:84:90:55:60:f0:78:77:
                    f0:5d:79:5a:d0:ec:69:5e:51:1d:a5:62:e4:e1:28:
                    4d:6a:4d:4a:85:d6:44:65:7a:f9:1a:04:5f:52:fd:
                    8c:f9:a6:63:ea:56:dd:d1:aa:e7:66:37:b0:3e:e2:
                    f6:12:53:a1:45:3b:d7:c9:83:1f:b2:3b:c2:b1:5f:
                    57:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0F:B0:A5:38:0D:FA:62:46:F6:06:A2:B6:50:E4:CB:CA:1E:91:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/527ba1d8-5427-3a10-a516-84e1edf0a9ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.218.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:51:51:95:b8:1e:7c:3e:60:a0:f5:f8:40:58:8b:d7:c0:72:
         2b:d4:fc:e8:21:db:8a:dc:0e:e9:21:55:74:be:80:be:7d:e0:
         99:21:a2:48:a0:4e:b8:b1:ae:4b:fb:33:d8:07:06:da:f2:6d:
         cd:ab:02:8c:18:e0:ac:c7:50:2e:b6:75:ad:37:85:a7:89:f5:
         30:91:ed:75:c3:39:37:1f:55:dd:3c:2d:39:53:92:01:c5:94:
         90:79:17:7c:35:8b:3f:4c:6a:02:bf:1d:40:d6:e5:96:70:ef:
         f6:73:da:8e:c7:60:d7:a5:d6:fb:29:c7:ac:27:09:6e:6d:7e:
         07:c4:4c:01:23:d6:74:9b:c5:84:d0:03:b3:24:04:1b:d4:28:
         d1:ee:93:a3:8e:b5:3a:64:e0:db:de:f7:18:5f:91:6c:73:db:
         ab:dc:c7:0c:66:e3:69:28:dc:e0:64:87:0c:47:74:e0:33:c4:
         c5:4f:ad:f0:cd:0a:6a:64:00:ed:e1:6f:04:5e:e0:06:d9:ee:
         da:d3:7c:54:b0:72:5b:0a:04:14:5f:52:0b:3f:9c:94:ad:22:
         70:31:59:03:9b:31:d7:9b:f8:34:95:02:63:09:98:cf:3c:a6:
         7e:98:56:7c:d4:3c:c4:a2:fc:d0:04:10:ec:e6:40:7c:84:3f:
         04:63:3a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:52:52 2025 by rpki-client