Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4a88eca9-f613-3814-8c96-386dc7c326e3.roa
File:                     4a88eca9-f613-3814-8c96-386dc7c326e3.roa (raw, json)
Hash identifier:          qzVcTlbdAUsMLbkSFYUiYjmNb/Ylkyp1qHTdgxzxbOQ=
Subject key identifier:   C0:32:99:4C:CA:EA:83:89:AE:3B:3B:92:70:E6:A5:F1:92:88:65:33
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285849E0BF887B1A89CC068C34E300
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4a88eca9-f613-3814-8c96-386dc7c326e3.roa
Signing time:             Sat 17 May 2025 01:00:47 +0000
ROA not before:           Sat 17 May 2025 01:00:47 +0000
ROA not after:            Fri 15 Aug 2025 01:00:47 +0000
asID:                     54113
IP address blocks:        140.248.238.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e0:bf:88:7b:1a:89:cc:06:8c:34:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May 17 01:00:47 2025 GMT
            Not After : Aug 15 01:00:47 2025 GMT
        Subject: CN=001c7878-e4bd-4105-89f7-103b3af692bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:a2:f9:76:c4:c5:2a:06:21:52:9d:75:51:
                    9a:10:1e:15:cf:fd:03:c9:6e:61:6c:e4:e6:5a:68:
                    2d:14:c6:a9:71:26:2d:90:5c:37:af:7f:1b:d2:59:
                    a0:0e:10:21:e2:89:51:88:ed:b1:44:31:2d:5c:c8:
                    7e:bb:85:46:71:35:66:54:1b:b0:35:b2:1f:fc:26:
                    bb:f9:63:9b:5c:1e:89:8e:51:c0:be:9f:ae:55:74:
                    0d:bc:b0:86:24:61:a9:30:25:6f:bf:f7:da:77:89:
                    bc:9e:9e:62:02:54:00:89:da:31:da:60:f1:9b:06:
                    b4:e2:b1:b8:8f:99:08:74:da:a5:05:dd:b0:5b:52:
                    d6:97:38:28:ba:ca:d5:c1:43:0c:dd:4f:d5:87:85:
                    e0:d5:92:7e:31:35:08:b3:c4:15:1e:ec:fa:4d:a7:
                    7c:e0:9e:4c:6e:f4:64:dd:c0:20:17:1d:2b:17:95:
                    8f:1f:91:52:81:3d:c7:ba:a5:fc:53:55:ee:98:cd:
                    b8:25:14:58:50:ac:6c:0b:0a:f7:b2:61:59:c6:36:
                    c2:fc:40:9a:26:e3:3d:00:3b:d0:ee:f6:c4:bd:de:
                    81:6e:1b:77:e3:f8:81:da:93:67:05:66:e5:c6:fa:
                    6c:33:b9:44:4a:11:e7:f1:7c:d9:58:09:45:70:3d:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:32:99:4C:CA:EA:83:89:AE:3B:3B:92:70:E6:A5:F1:92:88:65:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4a88eca9-f613-3814-8c96-386dc7c326e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.238.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:52:62:fb:1d:bf:83:40:5a:2b:07:c0:76:7a:28:bb:dc:10:
         e2:d9:1b:10:c6:93:45:d8:02:2b:4a:03:05:bc:8f:4b:5e:79:
         64:54:9a:70:55:50:af:c8:46:71:97:dc:58:17:48:ac:20:96:
         0f:80:31:df:12:c5:3c:8e:bf:88:5a:30:e8:e5:3e:44:b1:ce:
         49:8d:71:4a:29:04:aa:b8:6c:8e:aa:17:d4:c6:91:6c:c8:55:
         c2:f9:f0:f5:01:f3:df:9c:6f:c7:0d:e4:c6:0d:67:a2:f8:53:
         73:a1:0f:21:12:ca:a5:7d:6f:99:49:6e:76:03:e5:59:ed:dc:
         58:24:b5:e7:a1:e3:f7:28:4d:7f:ff:9f:cc:6a:09:3a:3c:83:
         1f:03:a9:44:58:96:fd:88:9c:b3:ec:79:78:ce:f6:76:fb:55:
         00:ba:d4:07:98:73:07:07:7d:c9:49:6a:b1:8e:38:5b:c7:fd:
         a0:b9:fb:d2:b6:6d:8f:bc:6a:af:ef:b5:8d:bc:95:fb:d0:7f:
         02:f4:47:34:a2:16:80:23:51:0f:34:98:d7:83:5e:ee:e7:51:
         e3:83:df:90:01:f4:24:4d:0f:16:8c:8b:46:7c:4c:e2:3e:98:
         47:6e:92:59:7d:38:4a:dd:97:2c:aa:5b:bb:be:2a:dc:fe:8f:
         c3:48:25:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:14:55 2025 by rpki-client