Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/41be34f9-5533-3cb4-84f1-c0c0e3485ecc.roa
File:                     41be34f9-5533-3cb4-84f1-c0c0e3485ecc.roa (raw, json)
Hash identifier:          h/5MLY9LoGAOYWjo0glrOENdzuUy2MVNnbM3lKhiqTQ=
Subject key identifier:   E5:72:0E:7E:8D:D3:06:9D:78:94:D6:33:D6:2B:87:33:E9:D5:85:FB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B17F78E6DB0C5F937B8F6
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/41be34f9-5533-3cb4-84f1-c0c0e3485ecc.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        140.248.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:17:f7:8e:6d:b0:c5:f9:37:b8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=b1701ea8-7f59-48f0-b641-fa8774c84f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:9a:6e:06:98:87:2e:30:73:d2:70:05:00:
                    a4:1a:f4:a4:4f:67:4f:b3:7f:fc:63:79:7d:6e:14:
                    bf:36:a2:62:4a:6d:49:2e:2c:2c:37:5f:03:3f:9a:
                    45:ad:6d:5c:49:3c:d4:53:81:01:be:05:90:76:97:
                    49:e2:6e:ac:cd:74:00:d1:c2:86:b6:ad:50:4f:81:
                    6c:ff:d9:21:3e:4b:f2:c6:43:c0:01:5c:06:ea:f4:
                    9e:f8:47:73:c7:9b:ca:70:b2:55:e4:76:12:68:61:
                    e8:5a:a0:ec:16:88:59:76:b8:a5:a4:ce:27:96:56:
                    1d:9d:21:03:25:8e:d7:23:7e:2f:4f:1b:ab:e1:4f:
                    fc:54:af:be:9a:cf:f6:45:ef:7b:3c:ee:c3:e2:f1:
                    01:4f:23:bd:94:8c:90:ad:80:3d:76:59:f3:38:75:
                    e8:8f:cc:d6:e2:15:46:fd:e6:e2:c7:e1:1b:20:0f:
                    23:72:51:92:eb:6b:70:fa:61:a4:bf:16:56:19:e1:
                    44:3b:a2:12:6b:86:ae:ea:49:67:f7:fc:4a:1f:40:
                    77:38:c5:24:df:b7:7e:c9:94:01:d4:92:ee:5e:54:
                    0d:21:85:30:12:82:9c:8c:e5:a4:a8:bb:d3:b6:ef:
                    df:e8:ea:b7:87:e0:89:be:d2:fe:46:af:99:6b:eb:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:72:0E:7E:8D:D3:06:9D:78:94:D6:33:D6:2B:87:33:E9:D5:85:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/41be34f9-5533-3cb4-84f1-c0c0e3485ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ab:c0:10:cf:c5:e5:20:72:76:d1:20:21:56:af:20:75:52:
         56:f9:7c:d7:9c:8c:ba:5b:98:85:87:6b:53:04:9c:36:ce:cd:
         38:1f:86:0b:33:12:57:b8:34:a4:9c:f4:dc:89:d1:17:8e:3b:
         87:ec:eb:12:9c:4f:1e:ec:29:14:22:6d:32:ae:a5:b0:c1:32:
         21:fe:16:39:3b:ae:7c:34:24:7f:e5:30:f4:d0:bb:0e:c3:3f:
         79:16:e3:4a:4c:15:83:1e:ac:ca:8a:b7:71:47:2c:fd:5d:18:
         25:22:09:aa:9b:fa:95:b6:4b:b1:90:ae:9c:8f:c5:38:d5:b0:
         12:99:7e:68:be:15:a0:00:37:53:2a:58:40:4f:c3:12:b9:8d:
         d2:eb:e3:cb:7a:7a:bb:41:19:d3:99:d4:5b:fe:25:71:5b:27:
         19:46:ff:45:11:c0:3d:56:49:66:ab:45:84:54:a5:2d:8d:7a:
         34:f5:70:ee:aa:b1:2d:66:b5:25:45:27:ff:43:90:96:a0:a4:
         da:6d:e4:a3:df:7a:f6:f5:cb:0d:2d:10:3b:35:c2:e5:f7:77:
         12:9d:53:0b:e2:ae:eb:45:6f:f4:3a:8a:ba:a3:29:e7:57:79:
         4b:eb:ac:c3:25:a5:f7:11:fc:a2:c3:43:28:d5:a9:98:be:0c:
         07:15:30:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:57:58 2025 by rpki-client