Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/60972a4e-500b-3628-8a13-22d7e377a981.roa
File:                     60972a4e-500b-3628-8a13-22d7e377a981.roa (raw, json)
Hash identifier:          yAulvjgA7jLpTZjU3iEEjlUe7wANdFVwDoag+p8kgBw=
Subject key identifier:   FE:FF:5E:35:3F:6B:49:3C:9A:AB:F9:3A:29:E0:3A:D5:D3:3D:69:59
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A9D30FBF53FC700B698D0DBC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/60972a4e-500b-3628-8a13-22d7e377a981.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        140.248.242.192/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:fb:f5:3f:c7:00:b6:98:d0:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=58b5d68e-f16c-4601-b045-bf5e6fb16a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cb:54:57:8e:14:c9:84:4b:65:00:54:33:e2:
                    82:2f:cc:60:6d:f2:aa:92:e5:21:85:b3:17:3f:97:
                    6b:a3:37:ef:49:0e:a5:5a:00:60:5e:26:da:87:b9:
                    ea:22:4e:a3:d9:f2:94:9a:67:0f:6a:b1:c8:05:e5:
                    3c:7e:6a:40:f5:a7:09:10:5c:2e:85:35:1d:1b:69:
                    0a:14:19:e5:37:c2:39:eb:e5:27:8c:ef:95:28:45:
                    50:ef:1e:13:cc:92:e6:f9:06:b8:3b:11:df:40:a5:
                    2b:04:6d:62:c8:42:d0:fc:f6:56:ce:ba:47:76:1b:
                    a8:f4:b1:a6:11:32:66:1f:7d:72:9a:8d:ad:c3:5c:
                    af:b8:f4:b8:c2:2b:b5:e8:5a:cd:cd:70:1b:2c:4e:
                    90:f8:74:90:29:d2:85:39:21:5c:c4:30:99:c0:89:
                    65:b4:45:1f:af:8a:88:c1:31:9f:e8:5d:ea:b0:42:
                    a3:97:75:77:79:a5:48:5b:23:2b:70:d1:e6:da:ea:
                    6f:0e:86:41:76:0c:8c:7a:4d:82:79:6d:4a:90:53:
                    08:dc:70:ff:7b:33:cc:75:b5:7c:ad:38:1f:27:eb:
                    22:9e:8c:b8:63:23:51:fa:f8:a7:99:05:f1:c3:f5:
                    c3:48:2e:cd:29:09:00:20:0c:80:d6:90:9f:43:ee:
                    d9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FF:5E:35:3F:6B:49:3C:9A:AB:F9:3A:29:E0:3A:D5:D3:3D:69:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/60972a4e-500b-3628-8a13-22d7e377a981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.242.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:51:d8:f7:8c:ce:50:27:34:07:ad:56:2e:8e:44:86:27:cd:
         f6:14:2a:1e:ee:a3:be:7e:35:27:1e:60:2e:0a:ff:03:1e:58:
         6b:63:cc:40:33:0b:5b:aa:28:84:dc:c1:77:d7:c1:c0:51:4f:
         3d:95:c8:a1:bb:c6:2c:9e:21:b8:08:24:f7:6d:68:35:1d:da:
         f9:88:b4:b9:87:1b:42:b4:71:38:c5:eb:3e:18:d7:ba:9a:10:
         e2:da:cd:78:eb:a3:36:23:7c:ad:89:84:96:fe:ac:35:4e:7b:
         d1:59:46:4b:01:62:45:fb:d8:b0:9a:f9:82:70:5e:71:41:ae:
         63:43:f1:00:d0:83:9e:59:3b:73:3a:80:8c:e6:04:d2:e4:20:
         9c:c1:71:7e:b4:81:a3:e9:a8:17:5c:58:6e:19:45:17:ce:97:
         44:4c:5f:29:bb:8b:37:d1:bc:3c:b1:58:3e:84:59:40:d2:50:
         33:6f:58:6e:97:8e:e4:72:5c:8c:6f:c3:99:a8:66:a0:a2:dd:
         87:05:86:a9:3e:7c:83:29:c0:c3:ef:86:af:d5:b8:7b:52:d8:
         ae:73:f9:fb:23:83:d2:8b:ee:9f:58:6e:8c:ee:60:2a:d2:fd:
         b7:07:f3:e8:eb:e0:cb:21:25:8d:21:cc:43:ca:05:af:e3:b1:
         50:0a:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:17 2025 by rpki-client