Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c23901d7-63c5-3efe-bb37-843df17671e0.roa
File:                     c23901d7-63c5-3efe-bb37-843df17671e0.roa (raw, json)
Hash identifier:          CKUeCYHsGSnzMspucNxUkHipx4mM/hA/rwtcnzkLCIk=
Subject key identifier:   2A:4A:F5:84:5A:85:EF:8D:E4:17:E4:A2:A7:8C:B5:67:59:C4:AE:78
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C4311F8E797BA74B3D6600
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c23901d7-63c5-3efe-bb37-843df17671e0.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.255.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:31:1f:8e:79:7b:a7:4b:3d:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=e6736c14-0666-4867-a743-c176b8d5634a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:a0:23:13:9d:3c:6c:d0:33:73:97:8b:50:
                    95:90:39:3a:01:47:ba:03:60:b5:e1:43:8a:79:b5:
                    27:21:29:11:2e:10:e0:56:a9:2d:44:0b:48:46:f4:
                    ac:c0:56:6b:1f:bb:10:8c:20:ef:fe:1e:1d:e7:e7:
                    b3:28:8c:b2:02:95:b3:58:f2:a5:9c:82:9e:e7:28:
                    2a:fa:2b:7c:c0:8f:71:88:ac:11:7c:36:8c:9d:31:
                    fd:ea:36:d8:30:fa:78:61:e1:3b:30:85:ae:78:06:
                    6f:ec:8b:12:53:22:45:2a:16:1e:0e:b2:8a:75:7c:
                    e6:3f:5f:27:98:58:d7:4b:8e:ec:2f:8c:b3:23:f3:
                    1e:11:6a:4c:92:ef:10:61:6a:88:d7:c6:7b:70:f6:
                    88:2c:2b:e9:82:9a:77:be:a0:32:6d:c0:2c:21:b2:
                    fa:d3:54:32:70:d3:4d:b1:56:a4:ad:9d:1c:b6:af:
                    a0:c2:32:64:ee:ea:53:4b:33:b7:fd:c0:47:23:78:
                    62:11:44:e7:ad:3f:32:90:f1:68:81:fe:55:84:51:
                    2b:5b:b8:fd:0a:26:d4:06:84:6a:b7:7f:65:b6:c2:
                    0b:5f:db:07:12:17:3f:06:c3:f1:78:91:98:05:f9:
                    e3:22:ec:2d:25:af:1f:5e:39:24:68:3b:1e:93:3d:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4A:F5:84:5A:85:EF:8D:E4:17:E4:A2:A7:8C:B5:67:59:C4:AE:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c23901d7-63c5-3efe-bb37-843df17671e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.255.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:ac:05:30:8d:fe:0e:61:ed:05:39:df:57:1b:dc:9f:a9:04:
         2e:fc:b8:dd:fc:2a:62:98:37:73:e9:46:1e:f5:be:06:9b:a7:
         53:65:4f:f4:98:3b:e6:aa:06:29:50:12:a8:1d:8c:17:01:50:
         ca:d2:f1:bc:87:b3:b3:06:7e:ae:17:8c:10:05:cd:fd:05:fc:
         07:5e:78:5e:1a:c4:c6:35:c1:4d:08:5a:0a:65:78:43:de:e9:
         c2:c3:15:0f:61:6c:09:3d:b0:ce:aa:44:bc:32:98:88:0d:a1:
         72:eb:c8:72:71:94:a4:d5:f4:2c:e5:aa:8c:66:09:89:9d:0e:
         22:18:27:24:90:57:c6:38:bf:70:66:b5:8e:e1:04:15:de:17:
         2d:11:d4:bc:cb:9e:9b:9e:0b:4f:0d:55:d1:87:4b:e5:9b:70:
         53:7f:b3:8a:de:54:a9:0d:31:c5:cd:5f:f0:81:47:6d:d5:01:
         57:59:00:a8:1d:90:cc:65:58:54:26:ad:c0:54:0a:98:58:68:
         75:b6:97:35:2c:a5:d7:f5:cb:da:9d:cc:2f:da:da:d4:4b:f8:
         9e:44:e1:84:7d:eb:5d:33:6e:b0:49:49:87:be:a0:a9:bd:0a:
         72:35:4d:db:a0:04:30:d6:f0:fb:8b:5b:05:90:34:35:a2:04:
         e4:d4:e1:55
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxDEfjnl7p0s9ZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTY3MzZjMTQtMDY2Ni00ODY3LWE3NDMtYzE3NmI4ZDU2MzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AKgIxOdPGzQM3OXi1CVkDk6AUe6A2C14UOK
ebUnISkRLhDgVqktRAtIRvSswFZrH7sQjCDv/h4d5+ezKIyyApWzWPKlnIKe5ygq
+it8wI9xiKwRfDaMnTH96jbYMPp4YeE7MIWueAZv7IsSUyJFKhYeDrKKdXzmP18n
mFjXS47sL4yzI/MeEWpMku8QYWqI18Z7cPaILCvpgpp3vqAybcAsIbL601QycNNN
sVakrZ0ctq+gwjJk7upTSzO3/cBHI3hiEUTnrT8ykPFogf5VhFErW7j9CibUBoRq
t39ltsILX9sHEhc/BsPxeJGYBfnjIuwtJa8fXjkkaDsekz2mVwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCpK9YRahe+N5BfkoqeMtWdZxK54MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYzIzOTAxZDctNjNjNS0z
ZWZlLWJiMzctODQzZGYxNzY3MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPj/gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCirAUwjf4OYe0FOd9XG9yfqQQu/Ljd/CpimDdz6UYe9b4Gm6dTZU/0
mDvmqgYpUBKoHYwXAVDK0vG8h7OzBn6uF4wQBc39BfwHXnheGsTGNcFNCFoKZXhD
3unCwxUPYWwJPbDOqkS8MpiIDaFy68hycZSk1fQs5aqMZgmJnQ4iGCckkFfGOL9w
ZrWO4QQV3hctEdS8y56bngtPDVXRh0vlm3BTf7OK3lSpDTHFzV/wgUdt1QFXWQCo
HZDMZVhUJq3AVAqYWGh1tpc1LKXX9cvancwv2trUS/ieROGEfetdM26wSUmHvqCp
vQpyNU3boAQw1vD7i1sFkDQ1ogTk1OFV
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:58:57 2025 by rpki-client