Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b81c207f-2f64-3aa8-813e-cdbefa5eb695.roa
File:                     b81c207f-2f64-3aa8-813e-cdbefa5eb695.roa (raw, json)
Hash identifier:          lBb5xK9cD+JbQUxYbh+mnuD7peLZG0WUScYleNWYmRo=
Subject key identifier:   B7:78:51:D0:A2:59:E5:09:09:89:FE:A3:7F:C0:BF:8C:35:A3:F1:7B
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584AC0164F0CF5E0678445387D80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b81c207f-2f64-3aa8-813e-cdbefa5eb695.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     54113
IP address blocks:        140.248.89.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:4f:0c:f5:e0:67:84:45:38:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=eab01c36-f91e-4c46-a628-bfb45ad1bf44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1d:e0:d4:36:e8:ab:49:a5:4e:0a:fb:dc:24:
                    13:50:61:32:4e:4c:e4:1a:ad:29:9b:7a:64:ac:02:
                    2a:f6:0d:3a:0b:78:a1:7e:39:a6:e2:c9:59:08:10:
                    cd:3b:68:ab:f8:bd:50:15:bf:5a:ba:a7:88:56:9e:
                    81:79:fa:51:07:c4:c7:30:5f:77:e5:83:83:75:78:
                    f5:a1:81:61:6c:d0:65:ac:16:ed:22:f2:b3:a1:dc:
                    50:de:b7:9c:86:4a:d8:4c:6b:57:f4:6d:a7:8c:d1:
                    21:a8:72:ee:3e:8f:3c:b6:b9:b9:d5:00:ea:29:e9:
                    d8:5a:01:b1:76:4f:b4:19:6a:d3:8b:43:29:0e:d6:
                    95:95:60:db:7f:42:ca:a1:1c:2a:dc:aa:d4:4d:1a:
                    cb:82:d4:55:5e:27:a4:20:81:f4:b4:c1:5e:62:7e:
                    2e:94:09:aa:a2:d3:72:4c:a9:32:05:dd:f5:0a:05:
                    92:59:2b:9c:4d:b4:d7:b2:13:6c:48:af:e6:f3:ce:
                    3c:36:a8:ef:fb:30:88:dc:c4:8e:c9:5c:83:16:73:
                    73:c9:d1:17:21:48:1c:a8:a1:d1:64:db:cf:88:01:
                    a6:e5:cd:c7:3a:16:38:60:6e:25:b4:ed:c1:0b:b8:
                    a4:6c:f0:46:d7:7d:46:75:00:fa:93:de:ec:14:3c:
                    66:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:78:51:D0:A2:59:E5:09:09:89:FE:A3:7F:C0:BF:8C:35:A3:F1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b81c207f-2f64-3aa8-813e-cdbefa5eb695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.89.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:62:48:cb:e0:89:97:5c:2b:4c:a4:8a:f9:b6:da:17:54:18:
         ec:b0:95:dc:99:15:82:65:77:41:2c:b9:3e:04:83:27:4e:70:
         d2:65:e9:ce:2c:03:34:c1:5b:79:10:41:c2:bf:d5:23:4c:e4:
         21:63:77:60:23:af:3a:6d:21:50:5a:9a:1d:62:86:b9:c0:61:
         09:1c:63:b2:4f:0d:9a:76:5d:39:0d:2b:54:71:12:f6:53:4a:
         f3:cd:c3:1e:f4:36:20:93:34:f4:2c:47:3f:db:07:c1:5c:b1:
         90:4f:5c:ac:a6:b3:9a:28:37:a9:7f:fa:3c:69:41:4e:f5:fb:
         c1:ee:b5:72:08:3c:2b:90:89:9c:5f:d6:be:7d:7d:75:91:8c:
         19:09:e6:c2:c7:f8:d2:4f:83:8a:62:a1:97:c0:87:d7:56:a4:
         38:84:de:0f:23:96:87:95:9c:ea:00:82:57:49:c4:33:ec:f6:
         8b:54:53:86:77:91:a1:49:d5:f0:6e:73:ae:5e:fe:b5:98:43:
         2d:21:1f:63:c0:47:ae:eb:2a:3d:28:a8:68:a4:63:c9:5b:c9:
         92:62:37:e4:fb:11:c0:45:d9:79:c5:4b:ff:44:9c:4d:22:51:
         e9:2b:95:7d:14:7c:a3:7f:1b:56:06:31:cd:fa:07:d8:b8:fa:
         2b:03:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:05 2025 by rpki-client