Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/11b7e78a-cab0-37c5-9cf0-d793bc572880.roa
File:                     11b7e78a-cab0-37c5-9cf0-d793bc572880.roa (raw, json)
Hash identifier:          z2C8IorgRYmDw5anXFGDGIZjgXHQk2hDQoPoaDYPZSU=
Subject key identifier:   05:11:2C:F3:80:17:B3:D6:23:46:92:F0:2A:D8:4C:AD:3C:35:35:A0
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584AB91C04A781B71FD0A8808DC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/11b7e78a-cab0-37c5-9cf0-d793bc572880.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     54113
IP address blocks:        140.248.67.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1c:04:a7:81:b7:1f:d0:a8:80:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=b8e9fa34-dd3a-4c3a-b183-02b9db0b5233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:04:a1:ba:26:a6:d7:e6:c8:4b:f1:36:de:28:
                    65:e3:e6:40:95:e9:81:e3:17:60:84:bc:2c:17:66:
                    89:39:c7:e6:b5:4c:6f:41:17:73:4c:01:14:d5:0e:
                    e8:16:13:54:b9:f0:27:02:d7:2b:8f:9c:ec:ce:d9:
                    cd:47:9c:d3:3e:ec:09:49:32:07:38:c9:9a:a3:23:
                    d7:c1:9d:db:23:a7:38:51:c8:2e:76:49:da:cd:4c:
                    f0:ff:00:b0:0a:76:89:eb:d5:eb:4d:de:cb:62:a0:
                    54:26:75:54:67:d3:a1:9a:7b:98:fe:76:ed:75:e5:
                    bf:b2:25:76:92:f0:57:84:a5:71:ea:bf:11:50:54:
                    ab:ec:d4:68:83:38:3d:4c:0b:5f:2b:28:2d:e4:97:
                    d2:5f:c9:d7:a6:56:99:4e:69:47:0a:4b:57:d2:94:
                    7e:30:0a:d1:7c:5a:81:c3:0e:a9:90:51:e8:be:59:
                    94:7e:c0:bf:ca:7a:aa:c8:41:ca:bf:4a:12:a3:70:
                    7b:64:76:1e:0b:6b:fb:d5:b1:68:e7:db:ba:a3:44:
                    bc:b4:0b:86:75:f7:ed:cb:99:a3:00:47:14:e9:5b:
                    91:0e:20:bd:15:83:21:2b:68:53:9e:99:cc:ad:c0:
                    05:76:21:d5:6c:4a:4e:08:2e:00:0f:06:95:f5:20:
                    13:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:11:2C:F3:80:17:B3:D6:23:46:92:F0:2A:D8:4C:AD:3C:35:35:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/11b7e78a-cab0-37c5-9cf0-d793bc572880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.67.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:dc:26:0d:c9:b4:77:77:4d:7d:af:62:f2:44:8c:14:dd:
         7c:4d:75:0c:84:1f:d1:98:d1:b1:97:46:84:29:3e:1c:0e:22:
         d8:c3:b3:b2:ad:bd:de:32:ed:ed:78:1d:c0:54:85:b3:49:ab:
         f5:92:fa:56:1b:0e:c5:c0:15:97:6f:b4:12:b9:a3:88:ff:da:
         29:52:4a:e6:17:d4:d6:6b:6a:fc:86:9e:f3:f8:03:87:bf:05:
         4c:63:07:5e:8a:7e:6d:5d:ac:73:6b:b1:68:2f:80:50:96:4a:
         52:9c:d5:52:ea:88:b0:11:a7:04:05:4c:7d:13:8e:a6:b2:f3:
         99:2b:e7:2e:e6:18:3f:55:99:f8:a6:b1:b7:c2:56:23:10:7a:
         53:b9:1f:7e:99:d7:5d:ff:c0:b3:0a:35:21:7d:f4:7a:01:6b:
         e6:f3:b0:05:98:ee:08:c3:a1:6d:1f:fd:a8:55:b6:50:6a:d4:
         31:b0:eb:7d:55:db:36:23:b0:b5:9f:05:d8:12:c6:e6:4f:22:
         85:b8:08:1e:9c:58:35:60:76:d6:e8:4b:26:3c:02:ec:3c:96:
         4f:cb:9e:18:c2:d8:9a:4c:78:f6:2d:2f:30:dd:df:54:ba:55:
         8c:3c:99:da:da:06:e4:6f:65:9b:5a:de:a0:cc:92:a2:36:9b:
         54:a6:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:43:34 2025 by rpki-client