Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c6e1a0fc-d98e-31b5-995c-5fd847215ead.roa
File:                     c6e1a0fc-d98e-31b5-995c-5fd847215ead.roa (raw, json)
Hash identifier:          hIJpnas6AgCC8cWoHrcc5or9WLB1FBRDuGIjemTNp7Y=
Subject key identifier:   A3:6C:91:76:D5:F1:60:56:16:FE:62:3D:8F:2F:48:62:88:9D:A8:2D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285848DEA132A2C03B7A3C465E8880
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c6e1a0fc-d98e-31b5-995c-5fd847215ead.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     54113
IP address blocks:        140.248.223.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:32:a2:c0:3b:7a:3c:46:5e:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=167d83d5-dcaf-4800-b6f6-9ac91519b56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:27:58:0c:16:f6:b1:a9:78:86:71:fb:8c:
                    39:04:a6:b0:9c:86:17:6b:c6:38:20:58:2d:c9:d0:
                    f9:26:be:f5:68:e7:c4:75:cb:fa:9a:84:49:1a:c9:
                    4b:98:03:7b:ab:d2:ba:e2:a8:fc:c3:cb:27:89:36:
                    e4:ce:11:6c:ef:a5:4b:20:f1:90:2b:f5:eb:ec:0f:
                    de:1f:17:1a:bf:c4:d4:cb:48:a8:a9:33:90:b6:8d:
                    48:1c:dd:a9:df:c3:4f:a2:94:fb:0b:73:22:de:0c:
                    89:cb:93:5e:77:53:44:7b:15:45:a7:89:b2:0a:db:
                    5e:b1:cc:21:f2:ac:0b:3e:2d:28:b9:af:22:4f:f1:
                    ab:15:1b:e2:01:69:0b:65:81:47:88:5e:f9:be:27:
                    88:9e:cc:61:a4:47:99:d0:a5:18:2d:a4:a2:3d:65:
                    a8:f6:f1:2a:e5:56:4e:71:37:ac:66:24:ea:dc:25:
                    0d:f6:c3:90:74:fa:fe:e4:bf:c1:6b:ec:30:e6:1d:
                    22:90:c7:4b:72:64:9e:6e:72:91:9e:4e:04:2b:f1:
                    99:ab:bf:00:80:14:e9:2c:26:12:52:d8:5e:a2:07:
                    f0:c8:f6:b4:b7:bd:1e:4f:66:7a:22:b3:fc:45:7c:
                    16:eb:6f:74:09:f2:9a:47:8b:d4:c7:ee:c3:66:e1:
                    3d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6C:91:76:D5:F1:60:56:16:FE:62:3D:8F:2F:48:62:88:9D:A8:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c6e1a0fc-d98e-31b5-995c-5fd847215ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.223.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:06:78:57:77:52:e1:d9:56:fe:90:0e:34:9a:fe:b5:7e:15:
         51:04:57:b6:8e:7b:bf:ac:31:59:d4:85:9d:61:7b:c9:db:7f:
         95:66:7e:f9:a7:2d:95:b5:08:44:0d:2d:79:c1:99:9c:85:3b:
         9c:72:b7:bf:fb:d6:db:b7:bf:a0:e4:e1:9b:54:f9:81:3b:fc:
         3a:82:de:57:97:f8:df:99:c6:79:75:74:ca:5e:df:f7:37:40:
         b2:bd:ce:1a:6d:dc:06:3c:d7:e9:39:48:97:a4:35:7f:99:f3:
         1d:a0:fd:c0:46:3e:89:32:52:85:64:36:b5:06:fc:71:09:6b:
         4d:01:12:49:14:c2:dc:20:d5:3c:d4:75:5f:73:59:72:12:2f:
         1b:37:11:3b:12:47:43:97:2b:c4:ff:26:bf:49:f0:76:c0:1e:
         d1:fa:c1:04:fe:bb:93:0a:3f:e2:c6:0a:9f:08:c3:61:99:ef:
         c4:c9:57:98:22:76:0a:6b:a1:75:ae:7c:42:8e:be:a1:25:25:
         55:c7:71:f1:7c:eb:f6:8a:b3:7c:1b:3c:b6:49:5c:cc:d4:a3:
         9e:80:96:9f:9e:d5:67:ad:1a:7c:20:0f:19:9e:ad:da:67:85:
         c2:74:d6:f7:19:fe:a1:15:f9:4a:68:e4:4d:8c:ee:ec:54:07:
         8d:d9:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:48:53 2025 by rpki-client