Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cb4f7d76-a7c1-3fec-bad3-fd8c5bc8d7b0.roa
File:                     cb4f7d76-a7c1-3fec-bad3-fd8c5bc8d7b0.roa (raw, json)
Hash identifier:          VIWdORe6Y+gcwoRhMq28dw9oPHWlrJbtiWXX3vVDIPQ=
Subject key identifier:   34:D9:DB:0F:3D:6E:D7:AB:DE:A2:E7:00:86:DC:CD:27:39:5B:41:CB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C427D1055598547ED5FDC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cb4f7d76-a7c1-3fec-bad3-fd8c5bc8d7b0.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.212.80/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:27:d1:05:55:98:54:7e:d5:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=b1a8bbb6-38a9-4757-9077-a4b5590c4d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e7:f0:7c:7e:46:5f:c5:cd:47:77:d2:c4:bc:
                    42:f2:8d:ff:cc:2b:22:9c:4f:0d:9c:a4:a3:d4:ce:
                    f1:7b:3d:ce:b7:52:f6:20:4c:36:bb:f3:1f:64:5c:
                    ef:34:f8:f1:e8:25:fb:0a:bf:a9:53:e5:8a:f3:c2:
                    15:0f:94:f6:50:1e:fc:d9:a3:6c:46:4c:22:86:0b:
                    dd:a8:4a:ad:6d:cf:cd:2c:97:11:a2:30:69:ed:68:
                    9a:51:12:dc:07:eb:09:77:a5:8b:a9:76:36:0b:9e:
                    a5:25:49:dc:1b:1b:df:f1:0f:cf:ce:a2:4c:36:02:
                    bb:b9:b0:07:49:0e:39:3e:43:7e:7a:e2:81:9a:1d:
                    e9:78:bf:a9:c3:30:b8:48:16:b8:c3:65:99:f1:19:
                    97:49:53:07:24:cc:e6:14:41:73:94:b8:86:58:79:
                    86:d6:23:27:bf:13:cd:be:f1:09:36:05:92:d0:fa:
                    e4:63:0b:a4:1b:51:1b:ee:d1:63:78:80:a5:7f:da:
                    a6:3c:16:19:55:65:bb:2b:c3:a9:44:a8:90:9a:d7:
                    66:f4:62:c0:7e:ee:38:8b:f1:b0:c0:a0:d9:8e:59:
                    82:1d:60:e5:08:55:67:9e:60:c3:08:6c:ac:3b:c0:
                    a5:10:f8:85:bd:31:2d:1a:a7:90:b4:e2:1c:e7:a5:
                    3b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D9:DB:0F:3D:6E:D7:AB:DE:A2:E7:00:86:DC:CD:27:39:5B:41:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cb4f7d76-a7c1-3fec-bad3-fd8c5bc8d7b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.212.80/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d1:89:33:dd:99:8c:b0:47:7d:ef:77:13:21:ab:83:3d:c6:
         fa:4f:78:42:24:c6:17:be:22:d0:b9:70:4a:82:13:f8:72:c0:
         e2:cc:f8:a8:0f:51:43:0c:4e:8a:68:43:51:1b:4a:86:0a:41:
         38:cd:c4:c9:68:ff:01:a1:c8:4d:55:57:6a:66:a3:ac:ce:df:
         36:df:2e:6c:8a:9d:4c:7d:24:f1:7f:46:13:7c:e3:26:b8:61:
         5d:9a:16:99:3f:b3:87:fb:e7:68:74:41:0f:c7:eb:01:e3:76:
         83:84:f8:73:0d:99:a5:12:a6:8d:7b:df:cf:48:cf:4b:12:0e:
         16:f4:c8:b2:7a:94:e5:b8:78:f3:64:51:4c:8f:05:29:e3:53:
         a5:af:f0:31:aa:d9:56:d8:99:49:c6:96:32:8f:1e:5c:55:68:
         4f:b4:ec:4e:b8:03:80:46:b1:15:4b:8f:0d:01:67:25:f8:7c:
         aa:6c:0e:09:bc:81:a3:98:c2:1d:7d:2c:a3:2d:fc:88:35:c4:
         58:16:a7:09:5f:7f:13:48:fa:cb:29:b8:e3:81:88:1c:72:bd:
         78:90:6c:e7:6b:5e:d3:53:a9:f7:6b:0d:c7:09:08:98:f2:57:
         b4:b4:98:8e:32:85:3b:18:a2:b0:a1:be:d9:eb:fa:e7:91:f4:
         d2:16:98:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:41:13 2025 by rpki-client