Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/535ad868-98ca-3518-9dce-95dd58c6f292.roa
File:                     535ad868-98ca-3518-9dce-95dd58c6f292.roa (raw, json)
Hash identifier:          GeGuYBsN37owGfSg+QetRi61RmhANABw8+8aJFMQSqc=
Subject key identifier:   D5:F3:17:91:B3:E7:57:A7:55:29:95:87:FE:94:5D:54:81:69:E8:F2
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C428A9575ACF70536D4400
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/535ad868-98ca-3518-9dce-95dd58c6f292.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.247.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:28:a9:57:5a:cf:70:53:6d:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=6e87ed9a-e0c4-4546-9e75-3e94ee319776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:f5:34:0f:2b:f0:4e:2e:cb:55:a5:e1:45:
                    a5:fe:26:28:7d:e6:ae:6d:81:cd:3c:5a:70:6c:f0:
                    22:41:fb:09:60:c4:2c:a2:55:b2:5e:d8:0f:b9:b0:
                    5b:59:f5:3f:7c:64:16:c8:a7:6a:71:42:2d:1c:46:
                    12:3c:f4:0b:bb:0a:76:81:8b:ec:36:73:70:ba:8b:
                    1b:f2:8f:9c:64:75:53:d6:d5:ad:b7:a6:63:ee:0e:
                    fd:21:fa:41:aa:ca:f4:b8:45:41:f9:95:49:85:14:
                    f4:a9:60:6c:61:e4:6e:bb:1e:a0:d7:2b:dd:0f:00:
                    be:c2:1d:61:60:34:c2:b2:3a:e8:80:42:90:6f:c3:
                    6d:a2:28:39:a0:9c:60:93:54:d0:4d:f6:ad:31:39:
                    0f:1c:7f:6d:80:26:f8:87:25:5a:52:d7:a5:f7:20:
                    ef:01:69:0a:35:47:e4:be:55:68:4e:5c:10:c9:59:
                    fa:9a:8c:c4:fb:b5:04:83:36:6b:cb:82:81:fa:d8:
                    35:62:77:ad:8d:d9:a6:63:b8:2b:df:46:a3:d3:14:
                    da:7a:39:36:8c:ec:91:38:d2:1d:55:63:65:8c:b6:
                    de:c7:1e:88:63:17:5f:6c:a4:7f:ff:bb:29:a7:98:
                    92:f0:09:b3:fa:09:51:55:c5:be:d6:b1:5e:78:8a:
                    31:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F3:17:91:B3:E7:57:A7:55:29:95:87:FE:94:5D:54:81:69:E8:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/535ad868-98ca-3518-9dce-95dd58c6f292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.247.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:02:a3:bc:dd:b2:59:67:b4:b1:7a:d2:5e:68:94:3d:82:cc:
         cb:f1:98:4f:c0:73:56:a2:da:23:81:86:ab:da:30:42:e2:fe:
         8c:79:1b:a9:ea:f9:71:ef:11:63:e3:df:a4:d8:55:48:18:ec:
         c7:24:e2:1f:e3:3e:0d:d5:5b:5f:b3:20:e8:f0:9e:64:63:73:
         fe:fb:e6:f7:05:71:41:7d:50:ba:f9:a4:ad:66:fc:24:26:57:
         0c:d4:6a:44:87:11:f7:83:0f:e8:19:92:e9:c6:75:f6:1a:22:
         fc:b0:ee:7e:7a:fb:9f:19:96:a2:a1:b1:d1:d1:b4:a3:25:f4:
         48:ea:a5:77:c0:90:45:43:dd:bb:15:30:fc:66:d6:c5:a7:21:
         32:7f:96:f3:8f:d4:0b:e0:9f:e1:ad:8b:51:ed:2a:44:86:3f:
         45:b7:62:08:9a:61:a0:25:07:69:6f:8d:c5:6f:30:b1:ff:f8:
         1d:f1:f9:7d:b8:79:46:df:c7:93:4c:13:56:93:7a:2c:bb:c5:
         43:36:92:90:a9:80:ac:fc:7c:9c:42:81:77:ba:31:a9:1a:16:
         32:55:24:d4:b2:66:d9:8d:69:5e:82:bf:64:af:34:6a:29:2d:
         29:12:da:33:54:91:65:a5:38:30:37:30:29:4a:cd:80:0e:20:
         d4:fb:0a:2b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxCipV1rPcFNtRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NmU4N2VkOWEtZTBjNC00NTQ2LTllNzUtM2U5NGVlMzE5Nzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs71NA8r8E4uy1Wl4UWl/iYofeaubYHNPFpw
bPAiQfsJYMQsolWyXtgPubBbWfU/fGQWyKdqcUItHEYSPPQLuwp2gYvsNnNwuosb
8o+cZHVT1tWtt6Zj7g79IfpBqsr0uEVB+ZVJhRT0qWBsYeRuux6g1yvdDwC+wh1h
YDTCsjrogEKQb8Ntoig5oJxgk1TQTfatMTkPHH9tgCb4hyVaUtel9yDvAWkKNUfk
vlVoTlwQyVn6mozE+7UEgzZry4KB+tg1YnetjdmmY7gr30aj0xTaejk2jOyRONId
VWNljLbexx6IYxdfbKR//7spp5iS8Amz+glRVcW+1rFeeIox8wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNXzF5Gz51enVSmVh/6UXVSBaejyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNTM1YWQ4NjgtOThjYS0z
NTE4LTlkY2UtOTVkZDU4YzZmMjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPj3ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAsAqO83bJZZ7SxetJeaJQ9gszL8ZhPwHNWotojgYar2jBC4v6MeRup
6vlx7xFj49+k2FVIGOzHJOIf4z4N1VtfsyDo8J5kY3P+++b3BXFBfVC6+aStZvwk
JlcM1GpEhxH3gw/oGZLpxnX2GiL8sO5+evufGZaiobHR0bSjJfRI6qV3wJBFQ927
FTD8ZtbFpyEyf5bzj9QL4J/hrYtR7SpEhj9Ft2IImmGgJQdpb43FbzCx//gd8fl9
uHlG38eTTBNWk3osu8VDNpKQqYCs/HycQoF3ujGpGhYyVSTUsmbZjWlegr9krzRq
KS0pEtozVJFlpTgwNzApSs2ADiDU+wor
-----END CERTIFICATE-----
Generated at Thu Apr 3 03:01:17 2025 by rpki-client