Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ae5cad08-16f5-38d3-957e-c65cee2f781e.roa
File:                     ae5cad08-16f5-38d3-957e-c65cee2f781e.roa (raw, json)
Hash identifier:          gEnHi7igkE7UoEhpgRcW+P7fUnH6HvLR/jq/BlXUdXA=
Subject key identifier:   85:78:E0:E2:27:ED:69:6C:7F:E3:5A:E5:3C:B9:A2:BB:78:80:9E:4C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A7CF7E2536F1D5816E069EAC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ae5cad08-16f5-38d3-957e-c65cee2f781e.roa
Signing time:             Sat 12 Jul 2025 00:00:27 +0000
ROA not before:           Sat 12 Jul 2025 00:00:27 +0000
ROA not after:            Fri 10 Oct 2025 00:00:27 +0000
asID:                     54113
IP address blocks:        140.248.106.32/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7c:f7:e2:53:6f:1d:58:16:e0:69:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 12 00:00:27 2025 GMT
            Not After : Oct 10 00:00:27 2025 GMT
        Subject: CN=b7136acb-a0d9-41c9-b1f1-5445634d22cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:52:d0:86:38:3b:94:fe:da:69:20:3a:95:5a:
                    63:c0:28:a6:3f:e0:de:df:87:39:00:ae:1c:d6:7c:
                    0d:0d:45:ba:bd:21:d8:54:90:9d:00:29:5e:29:c7:
                    3e:77:91:ff:6c:23:ac:2d:b3:88:62:a0:8a:61:59:
                    90:42:d9:e4:9f:ad:dd:90:32:6b:fa:d9:71:36:d3:
                    e7:f9:b2:21:42:69:ec:7e:7f:98:a6:13:68:94:4e:
                    50:79:09:46:e1:e4:7c:77:51:68:6a:4b:20:44:b0:
                    ad:e8:64:ee:67:ee:1f:44:57:fc:09:47:fd:89:20:
                    9e:2b:4c:3d:f3:cd:60:da:0e:9b:e4:81:0e:12:79:
                    da:4e:95:00:9b:04:f3:25:e3:62:c9:2c:77:62:98:
                    bf:85:44:bc:a0:34:21:51:df:81:f2:6f:b3:67:04:
                    ce:28:aa:15:75:a2:83:c2:50:77:28:5b:cc:ef:c3:
                    30:f5:7a:66:19:28:9d:13:ea:75:c9:1f:34:84:aa:
                    f1:1f:07:db:0c:fc:fb:95:87:b8:45:71:e1:c7:24:
                    5f:bc:6e:b9:b7:87:60:ee:a9:a7:cb:9b:22:e8:46:
                    31:c0:86:d4:2a:c9:bd:52:a2:ee:1f:ed:14:12:79:
                    9c:9e:03:50:65:97:3b:22:c6:25:a4:6d:f6:be:20:
                    7c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:78:E0:E2:27:ED:69:6C:7F:E3:5A:E5:3C:B9:A2:BB:78:80:9E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ae5cad08-16f5-38d3-957e-c65cee2f781e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.106.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:9b:87:7d:66:a9:e8:b4:7b:14:98:6d:ef:d8:47:49:5e:b4:
         ad:0f:97:1c:41:27:ff:e6:00:38:32:f5:a8:db:bc:d2:9a:c4:
         e7:3d:de:60:03:a7:00:a9:38:d4:e4:ab:89:62:fa:2c:b3:97:
         c4:5a:d0:94:3d:f6:52:d6:dd:fa:ad:8a:ed:f6:85:e8:f1:31:
         6c:d3:bf:3d:64:f5:eb:54:04:00:55:b0:17:a1:f0:74:73:11:
         75:84:e2:e2:f8:54:02:bf:06:40:1f:bf:96:0b:36:aa:73:e5:
         5b:93:2b:6f:9b:e9:4d:84:45:09:cc:da:9b:34:64:6c:5a:b6:
         e0:67:ee:ff:e7:ca:0e:5e:e1:4b:43:73:62:00:85:43:8c:3b:
         84:fd:eb:53:30:36:21:e5:e2:b3:a0:7b:67:87:2a:ce:30:92:
         3b:6a:22:1d:c0:26:41:72:73:60:a6:92:bd:a8:b5:0c:dc:e7:
         83:b3:17:40:4c:73:7c:cd:41:3d:20:1b:ce:10:75:af:ef:b9:
         90:be:65:3a:62:e5:2b:7e:ea:ba:8b:9e:f7:1e:97:58:70:7d:
         33:f3:c9:17:ca:18:21:9c:b7:c6:06:ed:9a:51:b5:75:28:eb:
         de:db:15:0f:e5:9b:ae:02:73:6b:e2:90:8f:d7:32:33:df:fb:
         11:a9:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:16 2025 by rpki-client