Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1d23a43e-d959-3743-84e6-7e59f8fd696d.roa
File:                     1d23a43e-d959-3743-84e6-7e59f8fd696d.roa (raw, json)
Hash identifier:          Whh2gY+/fClH9Dfu9Jehb7Z4Vmg7ik6SSl7bip8v4a0=
Subject key identifier:   95:1C:EC:17:8F:C6:D5:BF:09:2B:E8:77:1D:F7:DD:FB:CC:7D:55:83
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A9BCB75A919111D3E1CFD6200
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1d23a43e-d959-3743-84e6-7e59f8fd696d.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     54113
IP address blocks:        140.248.105.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:75:a9:19:11:1d:3e:1c:fd:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=c25da60a-e813-432f-9cc7-74bfe2a26f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:4f:2a:1a:44:0c:c7:a4:26:bd:69:e1:71:9e:
                    4d:3a:7e:a2:93:dd:1b:7e:98:38:eb:35:1e:c9:13:
                    de:ed:4c:ca:fc:fd:c5:1c:53:66:a6:8a:50:60:69:
                    8b:ea:37:9d:e9:50:0f:8d:ef:83:4c:8d:44:57:15:
                    9f:bb:27:fb:1f:48:2b:c3:f1:9e:6c:03:57:b2:7c:
                    c1:cf:70:78:7d:8f:69:3b:6d:63:8f:d8:41:70:30:
                    f2:f9:0c:c7:32:0e:7e:55:16:ba:65:96:27:47:e5:
                    e8:e2:96:e5:10:cb:e6:83:be:f8:b0:9e:b4:4c:2d:
                    9b:7d:5b:5c:31:95:eb:e6:35:a2:2c:1f:1b:82:bb:
                    55:3f:1c:a5:96:5d:25:4d:ba:ab:b4:a9:69:f7:3c:
                    d6:33:cf:58:05:4d:4a:fc:34:dc:91:24:48:73:64:
                    14:80:d9:f6:87:cd:01:87:a2:83:69:88:92:88:8d:
                    53:30:d8:4e:40:41:61:97:24:b3:bb:ea:88:c5:76:
                    b0:92:92:b8:a9:77:78:42:ff:9c:3d:87:ea:09:60:
                    02:f2:8f:9c:46:e0:dc:44:a5:28:24:59:b2:08:ea:
                    97:d8:26:26:83:c4:df:c4:ee:74:26:04:d0:d5:6c:
                    a8:dc:ed:32:17:d9:f3:a5:c2:c5:d2:4e:14:87:93:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1C:EC:17:8F:C6:D5:BF:09:2B:E8:77:1D:F7:DD:FB:CC:7D:55:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1d23a43e-d959-3743-84e6-7e59f8fd696d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.105.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:90:90:84:ac:6e:d6:d2:ff:dd:47:12:00:98:57:d9:13:61:
         f5:f0:b7:7a:7f:08:f6:01:e7:4c:ab:29:f9:b0:3c:89:60:04:
         e3:e5:ca:ed:c6:8e:9c:b0:c9:1e:ac:06:bb:e0:f8:9c:5f:ff:
         45:03:c0:48:53:64:68:1a:9c:52:b2:33:49:26:92:bc:82:82:
         1c:e8:87:91:1a:10:e6:f6:77:59:ba:6c:3f:9c:6e:27:6f:c9:
         1b:8d:e8:5d:d3:16:03:21:85:66:b8:e7:d4:95:88:75:15:64:
         06:c2:db:9e:46:ec:de:25:59:f3:a5:66:f6:94:53:1e:72:3a:
         be:36:c8:60:ef:f5:74:f2:7d:ea:17:bf:a3:4e:19:47:92:25:
         7b:c6:70:d2:1b:c7:7d:fc:02:2d:ec:36:2a:0d:3f:ff:47:91:
         8a:71:81:1d:ea:fd:6b:94:4e:f7:dd:14:7d:0b:bf:7c:0d:a2:
         22:ea:e3:10:5e:11:9a:55:10:e5:ea:4c:a2:63:a6:12:84:77:
         ac:08:27:da:5b:b5:4f:3b:89:c4:6f:08:9f:ed:b3:d9:cf:ea:
         fb:b5:90:41:9b:6d:9e:1c:16:9f:8a:1a:b2:92:a7:27:f0:8a:
         06:a9:e1:cc:fe:f9:91:40:b3:0b:a3:2e:12:58:9a:27:2a:1c:
         c0:73:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:23:11 2025 by rpki-client