Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c40499ca-3e03-3822-a4f9-4574aa452db1.roa
File:                     c40499ca-3e03-3822-a4f9-4574aa452db1.roa (raw, json)
Hash identifier:          2l9POqFCfjlqNH8sRgi4lzeKLd3W7boKBlHW/VAp0MU=
Subject key identifier:   C2:3C:63:1E:4A:75:47:E9:85:10:D2:D0:56:1B:B2:C2:04:ED:68:D4
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42B779C7DAE66F888BE00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c40499ca-3e03-3822-a4f9-4574aa452db1.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.214.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2b:77:9c:7d:ae:66:f8:88:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=fbeeaceb-3217-46f6-ad14-1d045f803b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:45:75:f5:0f:47:59:30:59:bf:4a:61:7f:
                    9a:98:86:9b:b2:ce:7d:2a:e6:1c:d1:1f:e9:b7:25:
                    56:c7:2a:a2:fd:b1:76:45:07:e8:72:6e:08:84:c8:
                    8b:f1:36:6d:a3:7f:d0:88:ec:b2:4b:28:7a:00:ab:
                    f2:cb:36:94:3e:95:b3:56:eb:30:7c:0f:a4:c9:27:
                    7b:f0:04:15:b5:b8:13:b3:93:9c:45:78:64:5e:a6:
                    a2:b3:2d:76:ce:70:29:8f:bc:b2:24:40:51:dd:c7:
                    d4:3c:2b:04:68:1e:a6:a9:a8:0d:73:2c:58:d0:cc:
                    ec:d5:5f:07:3a:ea:6d:61:af:8a:19:34:95:85:e3:
                    e3:ec:a0:40:99:6e:df:e7:dd:76:f0:12:75:af:75:
                    67:fc:13:5e:57:fa:5d:3f:f0:d0:82:d5:ae:2b:0e:
                    ae:24:5a:ab:13:b1:65:af:d9:3a:91:4d:7d:a6:97:
                    75:ad:84:e5:d8:f1:a4:d6:73:82:d5:7f:b2:90:67:
                    4c:86:ee:db:26:ac:7d:01:8f:22:9a:25:82:1a:b9:
                    0c:3a:20:df:16:42:b3:59:36:a5:7a:fb:51:17:e6:
                    c6:02:8f:1a:49:e7:d4:ec:af:ef:7e:b7:43:65:31:
                    87:e6:72:72:15:12:3a:26:cc:98:d9:91:73:4f:5f:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3C:63:1E:4A:75:47:E9:85:10:D2:D0:56:1B:B2:C2:04:ED:68:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c40499ca-3e03-3822-a4f9-4574aa452db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.214.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:72:59:45:08:2b:33:9d:b8:af:d0:ba:3a:34:7c:72:53:
         0a:4f:fd:58:e5:a6:d6:df:e0:01:0e:1f:f5:07:17:f8:9e:a6:
         18:f2:86:86:40:fb:ed:b5:ab:0a:a7:79:e0:5a:82:df:23:9c:
         db:ae:e0:f4:95:d6:86:41:8e:be:4b:b1:d5:86:30:d4:59:0b:
         31:38:5d:17:ba:35:a6:38:77:6d:d7:41:89:75:21:84:36:cb:
         7a:b0:65:60:af:2a:4f:22:8d:37:34:e6:b3:5e:cd:7d:d0:3a:
         d1:d7:df:68:28:28:76:1d:20:1e:86:21:d4:5d:9c:18:b3:60:
         12:1f:0d:e3:66:b3:75:a4:8a:79:84:a2:9e:54:f8:57:1f:51:
         c7:70:f7:de:f7:80:15:56:71:76:66:c1:a3:fe:d6:2e:dc:61:
         c1:99:73:c8:09:2f:71:ef:44:5f:dc:7f:cb:12:7c:6c:ae:39:
         2a:7f:d2:f9:8e:bd:b0:73:c7:ab:90:f0:fe:66:94:ca:b6:ff:
         b8:1d:1e:14:74:68:f8:f6:75:bb:1c:ee:4e:84:42:bd:61:7f:
         d6:e8:32:36:7b:27:0e:09:d9:f0:38:26:53:38:09:88:86:56:
         9c:86:bc:dc:c4:fd:6b:f6:28:54:5a:59:17:34:ed:0b:04:31:
         6e:4b:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:59:39 2025 by rpki-client