Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5922b0e4-cf59-331e-b8ce-3702d6e2b28b.roa
File:                     5922b0e4-cf59-331e-b8ce-3702d6e2b28b.roa (raw, json)
Hash identifier:          39rYI9WfBoYhkTeM1upoX+r4g2LCv7kN3CXEwWeDruA=
Subject key identifier:   B3:05:FA:69:0D:1A:9D:71:1C:1A:73:DD:F7:C4:65:4D:CE:D1:F1:DB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C427DE0704D1193E9A9080
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5922b0e4-cf59-331e-b8ce-3702d6e2b28b.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.212.96/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:27:de:07:04:d1:19:3e:9a:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=178b8fef-f2a0-4997-9add-ab5f2876be6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:e0:44:72:89:4a:77:51:57:2a:15:38:db:
                    b7:3f:1a:ad:5c:0b:0f:b1:f0:bc:c4:ed:36:9b:31:
                    0d:40:05:df:2c:f7:c7:96:dd:7c:ba:2c:f5:d0:15:
                    7e:52:f8:cd:13:fe:f3:52:3b:ff:4f:d2:f8:15:0c:
                    0d:ab:74:eb:59:0f:00:8b:c2:ab:8b:5c:f7:61:97:
                    36:f9:f5:61:19:67:92:7d:b3:46:e5:ac:5b:cf:b4:
                    7a:72:8e:ed:a6:a9:cb:de:f9:e9:f5:74:46:62:b7:
                    95:b8:64:62:67:1a:ed:de:09:8a:5d:9f:b6:ea:fb:
                    39:e2:ff:88:07:8f:d2:29:2a:73:1e:87:aa:7c:98:
                    e6:45:2c:cb:8e:95:5a:04:2c:50:dc:cd:1c:b0:c6:
                    fd:80:ef:00:73:b6:e8:62:99:b6:9b:54:6d:2d:06:
                    65:42:4a:d2:ab:36:b4:e7:1b:62:86:81:94:b5:c2:
                    75:9e:c7:21:fa:8d:42:95:a6:94:61:ef:91:1f:d6:
                    af:22:01:25:2b:91:2b:ad:8b:92:69:ca:cf:89:ee:
                    81:fc:ea:8a:1f:92:f7:b2:cc:ee:bb:4a:43:63:e2:
                    d9:ae:5d:57:f4:04:94:f3:2e:ed:b6:38:eb:a9:10:
                    99:66:57:7a:c7:a2:64:90:00:91:d4:ee:b3:20:97:
                    4a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:05:FA:69:0D:1A:9D:71:1C:1A:73:DD:F7:C4:65:4D:CE:D1:F1:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5922b0e4-cf59-331e-b8ce-3702d6e2b28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.212.96/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4e:77:3f:05:e1:29:d1:db:30:64:0e:d7:21:4b:10:46:e6:
         48:9b:35:c3:86:00:04:40:89:c7:b8:74:ab:c8:2c:76:cf:3c:
         e8:91:d9:d0:55:cd:e2:17:9c:ef:fa:2c:69:8e:df:f8:0d:b0:
         91:28:d5:7b:26:38:96:b7:71:f8:5d:92:8c:ac:d0:bf:74:b7:
         cc:56:7f:14:d4:ff:a7:03:55:3d:d2:a1:b2:75:92:72:18:c5:
         e5:f1:36:5e:44:a0:8e:cd:93:f4:31:51:fe:c6:8e:db:8c:6b:
         97:0c:da:e4:fa:6b:3a:e7:a0:ec:e3:29:a7:0d:a9:f6:c7:ff:
         a3:b9:64:2a:53:4d:8b:a4:a1:b0:65:59:f8:1e:7b:2f:e2:d3:
         3d:12:9f:5b:59:e4:2b:41:3d:c0:3c:6e:49:bc:27:95:0c:b6:
         5a:c7:fa:bf:76:b9:e1:42:98:af:06:06:bf:92:f8:ed:6e:79:
         a8:40:48:d2:0b:f9:07:90:e9:bf:00:f9:e3:91:26:62:05:af:
         41:ef:26:f6:02:90:b6:75:7e:f9:b9:8d:f8:33:09:bb:31:e2:
         cd:7e:24:a6:5d:20:8f:54:35:e9:b0:1d:67:14:de:81:05:fd:
         1a:a7:a1:c2:66:67:01:21:b2:c2:ef:ed:68:d4:d8:8e:a5:6c:
         1c:9a:a7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:55:14 2025 by rpki-client