Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8122f045-a798-3ad7-b0e2-e9e2f93ebf3b.roa
File:                     8122f045-a798-3ad7-b0e2-e9e2f93ebf3b.roa (raw, json)
Hash identifier:          q8So3XRdvlzt9JlN5Ch89pXmPuXWRN0BdqGlDdUdTvw=
Subject key identifier:   63:D9:81:37:64:62:00:E6:96:64:17:B0:BD:CE:FF:B8:E4:24:65:CA
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42B97977C7B6C6BABC100
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8122f045-a798-3ad7-b0e2-e9e2f93ebf3b.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.214.192/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2b:97:97:7c:7b:6c:6b:ab:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=805b754d-9cc7-4f3f-8d8e-d9b514d37a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:1c:20:cc:c8:dd:82:62:3b:be:15:94:58:
                    bc:d4:12:82:21:50:69:2d:bb:99:a6:1d:11:56:13:
                    e0:e1:27:1c:b9:4c:2a:d6:ea:1c:6f:a8:7a:98:31:
                    ce:98:46:5c:27:f0:98:8d:85:7c:f2:f5:96:29:f3:
                    81:59:d3:9d:7c:ae:46:9d:94:13:fd:05:f5:5d:10:
                    12:06:45:10:09:f4:c9:d1:9f:b1:07:ac:84:77:59:
                    90:17:83:87:e8:6b:eb:0f:22:26:62:69:84:86:91:
                    ad:87:9f:2a:07:1f:88:b9:4f:d4:c4:71:c0:e7:03:
                    42:39:da:04:e4:eb:ac:db:a1:7b:a3:a2:54:38:cc:
                    ac:1f:00:f1:a0:b0:a2:ee:7b:c2:55:45:8a:ce:94:
                    ee:ea:d6:15:30:e7:fc:b0:e5:1d:a7:92:13:e5:72:
                    1e:1b:01:9c:c8:ec:03:3b:5f:0b:cb:0c:b5:17:3c:
                    66:ca:90:47:03:24:a2:8d:27:b8:4d:31:1a:cf:6b:
                    ad:51:08:fe:6d:0f:34:23:ed:8e:c5:2e:35:ce:f6:
                    25:64:cc:d3:cd:e4:12:ca:b9:78:20:91:7e:f0:73:
                    68:48:64:27:8d:c7:1c:34:36:9d:a8:4c:69:18:23:
                    59:13:2b:08:8f:3b:43:7d:d4:3e:1c:70:26:da:c4:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D9:81:37:64:62:00:E6:96:64:17:B0:BD:CE:FF:B8:E4:24:65:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8122f045-a798-3ad7-b0e2-e9e2f93ebf3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.214.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:be:2a:9d:11:10:5d:b9:ae:24:74:45:0e:0e:1c:06:08:62:
         4b:eb:e1:24:07:48:d9:1d:75:f2:65:a6:97:9a:55:15:27:7e:
         2b:1d:d4:f8:6a:a9:e1:3a:35:68:b6:f6:57:4c:08:0b:a5:16:
         64:40:f0:be:15:02:c1:26:ca:8e:63:4a:6e:fb:98:eb:cf:d5:
         f6:f0:44:52:c6:c8:a5:bc:77:b1:67:06:b9:b7:92:e5:51:b3:
         0e:0e:d1:96:69:d6:32:86:e4:44:62:08:d0:5f:21:b7:50:47:
         d0:94:3a:02:dd:5b:e8:4c:a5:02:f5:73:ad:4a:0e:40:df:39:
         8e:a1:13:a2:5e:48:f7:e5:44:b6:97:e6:93:23:4d:4f:53:f8:
         c0:6b:cb:6e:da:49:ba:e3:0c:82:48:c3:24:01:34:53:13:05:
         f5:90:fb:75:8d:5a:15:a7:5f:e1:04:c1:83:61:f2:79:3e:cf:
         54:48:37:44:e2:e4:0c:e0:1b:5c:8c:55:aa:f9:e8:5b:33:63:
         f0:84:97:71:f6:12:e3:86:e6:3c:44:27:ab:92:2b:4a:4c:16:
         f3:3f:bf:bc:96:db:0e:ab:31:11:b7:65:42:27:2a:fa:d9:9d:
         8c:9e:fa:33:03:c3:51:30:79:c6:6f:ab:62:a4:e3:a0:de:ce:
         6f:e6:75:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:48:56 2025 by rpki-client