Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c0ee15d4-be28-3c1f-b235-693629568062.roa
File:                     c0ee15d4-be28-3c1f-b235-693629568062.roa (raw, json)
Hash identifier:          d4slKW+BlJRd5zDnFiYHHYBaOMwZbojP9CC0lciSucM=
Subject key identifier:   39:D6:DE:C2:AD:75:A3:4E:32:2F:28:FD:A6:BA:CA:A0:C8:17:6F:35
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42B463FCDAC7834766FE0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c0ee15d4-be28-3c1f-b235-693629568062.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.210.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2b:46:3f:cd:ac:78:34:76:6f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=4e16678a-d056-4210-a4d6-6b315da792ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:23:b5:e6:63:59:4b:d5:9a:4e:34:19:25:
                    c6:8a:bd:1a:75:f2:13:67:65:df:21:7c:a0:92:a0:
                    95:a7:c5:82:ed:33:a7:5e:ca:68:ff:ca:e6:9f:3c:
                    7e:0d:7f:bc:fe:21:45:57:86:07:e9:41:ae:f5:d9:
                    e4:d0:a4:a9:14:cb:1c:2a:80:56:c4:0e:7e:ed:f4:
                    03:7c:84:73:36:eb:a7:65:cd:6b:8c:35:47:11:72:
                    48:37:3d:68:fd:52:9c:8f:ea:2b:fe:56:3a:25:36:
                    fe:01:fd:f9:e0:6e:1e:46:ae:f2:04:67:bf:53:6e:
                    3c:98:55:90:cc:37:8b:7e:10:fd:68:7d:3b:ab:e2:
                    1e:1b:b6:c6:d8:6c:97:4d:d0:ca:a0:01:2f:7b:8e:
                    ab:0d:15:e1:26:78:32:aa:b5:ef:dc:35:8c:00:af:
                    52:79:e9:d0:6a:ed:c7:8c:f1:6f:fb:50:0b:3b:b7:
                    44:26:0f:d0:b0:b6:d4:af:b8:63:fa:91:db:0c:1b:
                    8f:e3:21:7e:e3:cc:ca:d4:de:05:0b:3f:bb:df:f2:
                    63:8a:72:3a:74:8c:8f:f2:bd:d9:6d:dd:5a:81:1a:
                    e3:05:ea:dc:ed:46:58:6f:33:23:03:39:5c:f0:cd:
                    ad:6b:ff:31:56:aa:d9:bf:66:c2:4a:dc:f9:22:9a:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D6:DE:C2:AD:75:A3:4E:32:2F:28:FD:A6:BA:CA:A0:C8:17:6F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c0ee15d4-be28-3c1f-b235-693629568062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.210.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a3:ff:ef:23:0e:42:8a:e8:d2:8a:fd:03:df:f5:f5:52:74:
         fa:0e:18:4c:34:5b:80:6f:a0:51:0b:b8:db:8a:e4:76:30:af:
         ed:44:de:10:03:7d:40:b1:8a:5f:c4:1f:6d:bc:93:df:ab:3f:
         2d:91:92:2c:d8:95:91:c5:38:32:c1:ec:86:e1:36:bf:5b:ce:
         2f:1c:f8:d5:1f:43:ef:4b:21:bc:75:df:3a:4f:1b:80:8d:52:
         ab:6d:f0:c2:fe:0c:40:eb:14:2e:01:85:bc:1a:07:d6:5c:42:
         9d:22:f9:45:19:52:0c:3c:81:d9:ed:d3:88:35:32:64:2b:ac:
         a4:57:59:08:42:7d:19:ce:03:a4:20:c4:7d:5e:ea:a3:22:87:
         5f:ff:4a:b9:e2:4c:84:54:6d:a3:d4:75:f8:c0:ad:05:d7:ba:
         13:63:39:37:9f:4a:16:56:7b:94:de:87:20:19:56:81:aa:77:
         c8:fa:87:47:84:7c:ee:ee:06:30:77:60:ce:3f:9d:88:a8:06:
         23:c9:4a:d6:93:d7:f6:d1:2e:7c:3a:03:46:85:eb:7d:b8:c8:
         3e:b7:aa:99:64:8e:68:05:15:0c:94:f1:a6:36:ee:8d:3c:42:
         7c:6c:f1:42:10:fb:ea:83:a4:39:80:be:8a:94:52:18:0f:e6:
         8d:c1:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:55:34 2025 by rpki-client