Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/af0b51e3-09fb-3ef8-89c0-64c0f8f7cbde.roa
File:                     af0b51e3-09fb-3ef8-89c0-64c0f8f7cbde.roa (raw, json)
Hash identifier:          Tic6Cd/xOy3yGkgnqIpBYAdfm4c28ILZ7OcexuRSn3s=
Subject key identifier:   89:97:1C:A2:C0:7F:BA:F2:78:0C:70:F8:0F:EC:32:2C:C9:21:D0:26
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B183D7EB195A79DBA72A0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/af0b51e3-09fb-3ef8-89c0-64c0f8f7cbde.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        140.248.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:18:3d:7e:b1:95:a7:9d:ba:72:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=d0211b7f-4652-4841-ad37-ce4378d88ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:d0:03:37:76:a2:f4:d2:b9:54:38:8a:cb:
                    e7:11:e5:c1:fc:cc:0d:c8:6b:6f:7d:e6:9d:5f:23:
                    42:d7:55:82:95:65:2a:cd:63:9f:f2:81:f9:57:ee:
                    d9:e5:9b:b1:8e:03:5c:63:17:b7:93:0e:82:f8:f5:
                    42:3f:3d:58:c1:2b:93:13:6e:2d:5e:c4:ed:87:8f:
                    c6:94:99:0d:a7:24:98:59:56:50:05:4a:4d:43:b7:
                    19:6f:e9:3b:65:52:0e:9f:d9:28:d7:a4:9d:ca:dd:
                    ef:a9:06:b4:26:81:14:e8:b6:b5:ed:1e:e4:44:2d:
                    54:1f:dc:ab:1d:2c:7f:78:c8:0b:2f:71:3c:04:77:
                    d0:58:db:f0:30:c5:14:29:58:4c:6c:3d:da:20:96:
                    c3:0d:23:72:81:b7:07:16:21:7b:65:26:e8:1e:cb:
                    a3:6c:98:7e:7a:a9:39:68:a5:76:8f:ac:3a:33:24:
                    36:b1:cb:03:dc:7d:7c:c5:b8:09:0d:82:09:f5:bc:
                    be:d9:20:18:51:c2:2c:69:17:fe:98:48:89:0d:6b:
                    ed:c0:ce:93:5f:a4:1c:40:06:27:82:aa:85:b7:70:
                    34:60:6b:90:4b:18:96:3b:55:eb:6b:05:52:00:88:
                    17:41:fd:3d:dd:f0:65:6f:b0:57:50:a0:27:a8:c4:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:97:1C:A2:C0:7F:BA:F2:78:0C:70:F8:0F:EC:32:2C:C9:21:D0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/af0b51e3-09fb-3ef8-89c0-64c0f8f7cbde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:7c:4f:8a:66:08:5b:fc:f7:e3:13:d7:22:7e:29:7a:a1:65:
         f9:dd:16:2b:78:35:6b:e5:99:fc:77:a9:78:d7:4a:da:74:0d:
         3d:2b:16:a4:69:c0:65:10:8a:a9:ac:63:b9:eb:2b:82:77:da:
         00:ce:7b:51:ab:f9:65:d2:57:22:50:fe:31:f3:7f:a3:86:74:
         3b:9d:01:08:2f:9c:21:34:af:7f:31:fb:49:52:d7:60:40:fe:
         5d:99:01:02:14:77:33:2c:9a:0c:2f:78:4a:50:45:17:9d:a2:
         30:ad:2a:ee:e4:e2:22:f5:27:f1:7e:9b:42:17:6d:b6:8b:bd:
         fe:26:60:f9:a0:81:84:4e:d0:73:49:59:76:5f:9e:4a:46:23:
         c1:49:1e:d9:8d:10:c3:b0:99:3b:95:6e:25:ed:a4:79:f5:8d:
         ca:f1:9b:f3:2a:a5:b4:0e:29:50:81:df:7e:5e:ff:47:89:c0:
         3d:c8:1a:e8:a1:39:d5:d3:23:5d:48:00:cb:be:2c:5b:ba:2e:
         be:f1:eb:4a:42:31:a0:26:c6:9a:49:10:c3:c9:ed:70:4b:63:
         83:7c:2d:0b:06:7c:03:90:93:af:ae:6f:06:22:b3:d2:10:ef:
         de:6a:b5:0f:92:de:db:f2:8d:eb:3f:7d:81:4c:a5:33:f8:30:
         e5:69:70:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:38:56 2025 by rpki-client