Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7a039629-0c8e-379f-a01c-4be356e6027b.roa
File:                     7a039629-0c8e-379f-a01c-4be356e6027b.roa (raw, json)
Hash identifier:          ajnJVTZL3fNi1H7ahFrjxRh769COdmSGkEvoJPbLCko=
Subject key identifier:   C6:79:9B:8A:27:E7:78:95:3A:5F:1D:DE:0F:7A:D7:37:48:A9:94:BF
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584BA23792EC4BEC4FCC0C053D00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7a039629-0c8e-379f-a01c-4be356e6027b.roa
Signing time:             Sat 25 Oct 2025 01:00:31 +0000
ROA not before:           Sat 25 Oct 2025 01:00:31 +0000
ROA not after:            Fri 23 Jan 2026 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.105.48/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a2:37:92:ec:4b:ec:4f:cc:0c:05:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 25 01:00:31 2025 GMT
            Not After : Jan 23 02:00:31 2026 GMT
        Subject: CN=fe93755d-51d6-4a8b-a0c6-9ce4104b9528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:1c:a3:5d:55:25:30:97:e7:6e:41:c4:9e:
                    17:e2:bf:64:ec:cb:ac:58:64:14:e4:6f:b3:73:c6:
                    8b:1c:4a:46:7c:4e:08:71:51:da:16:48:e3:5e:ba:
                    a5:e7:7c:c5:45:32:84:85:15:f0:b0:d2:32:bb:70:
                    13:f8:34:3d:80:4e:02:1f:de:a0:f0:34:25:59:ef:
                    15:0b:3b:3f:e5:12:56:e3:da:61:68:9f:ba:8d:c3:
                    12:eb:0e:d0:e0:f5:73:94:a9:38:29:4e:53:df:86:
                    eb:d0:c4:35:9a:45:52:ce:a4:20:8e:cf:af:91:34:
                    0d:c4:40:10:59:a6:a3:e2:b8:09:e0:14:1e:60:71:
                    a7:06:3d:7a:cd:10:6f:c5:ef:31:2f:52:3a:43:6a:
                    d0:ff:11:6d:4e:87:46:31:02:14:61:4c:a5:e6:e7:
                    45:c7:29:18:39:a0:19:1a:c4:e5:d8:ee:32:6d:18:
                    78:42:02:d3:d2:43:1d:1a:e8:f4:7f:3d:f1:2d:b9:
                    b6:20:49:a9:8a:a2:d2:7f:16:0a:6d:0f:6d:4d:f0:
                    fe:f5:18:e0:2a:f1:a5:38:30:01:10:3c:a9:b6:ce:
                    92:a2:81:ff:ab:0c:f6:f2:65:fc:88:11:2b:25:98:
                    fa:a6:43:34:91:49:be:1f:84:97:0f:5c:a4:40:1c:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:79:9B:8A:27:E7:78:95:3A:5F:1D:DE:0F:7A:D7:37:48:A9:94:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7a039629-0c8e-379f-a01c-4be356e6027b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.105.48/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:ac:97:c0:18:ec:33:e7:c0:11:34:a2:be:88:f7:f3:c2:
         df:ea:e1:f4:02:95:4d:1b:2d:33:7b:20:ad:ab:1a:ad:d3:1f:
         e6:fd:bd:16:2b:49:cf:15:b5:6b:fc:ae:72:bc:e3:21:ef:4b:
         15:85:f3:73:4f:6f:45:ac:b7:7a:bd:d4:d4:9b:9b:3e:12:24:
         4e:15:8b:79:8d:ef:f7:8f:fa:2c:4d:41:4e:2c:23:d4:af:43:
         58:3a:89:1a:05:b9:04:46:e1:b0:08:c6:b8:93:25:68:2d:35:
         2e:93:18:88:2d:44:83:7b:9d:76:7c:41:68:4d:19:8d:d1:48:
         05:86:da:e1:36:98:f9:fd:bc:72:8e:18:85:ff:7e:2c:4f:91:
         06:60:58:5f:5a:5a:3e:e9:c4:8d:bf:c7:e2:9c:a1:b8:17:90:
         e6:89:09:69:ed:9c:a6:47:ec:49:73:ae:1e:fe:f5:93:18:49:
         03:33:eb:61:cb:7e:0b:02:55:d4:b8:f8:7d:45:43:34:09:26:
         ba:e5:a3:d4:4a:85:c8:87:05:36:27:8c:95:be:f9:43:cc:01:
         af:dc:6b:49:a1:6a:b9:fe:c5:42:d1:20:2e:e4:8e:01:e6:7c:
         6a:2e:2c:d9:e2:ed:4c:15:a7:e6:63:7e:7c:e5:6c:1a:aa:5b:
         78:08:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:54:28 2025 by rpki-client