Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa
File:                     c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa (raw, json)
Hash identifier:          qDDZxBInFUyXFTR/DgzK/rjBX6kmjb+rrQni9Jl9YyI=
Subject key identifier:   04:99:95:50:48:7B:7E:94:E7:16:41:32:0D:E2:A6:9D:35:3B:1A:3C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B0EE53A84734126518D00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        140.248.253.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:0e:e5:3a:84:73:41:26:51:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=aaf60eea-5af0-4280-9b5c-bc1cafceee86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:21:89:c9:48:d3:46:44:c8:6a:bc:d8:8e:1f:
                    ac:06:e4:5f:ca:2a:ac:04:a6:ff:41:70:e0:d0:fd:
                    9d:ed:49:44:7b:42:6b:82:80:f4:d7:9c:e5:d5:23:
                    c2:19:9d:e7:dd:87:ff:2f:33:83:4d:98:51:ba:8b:
                    56:c5:a3:eb:9e:4b:19:86:b0:23:dd:02:a0:80:42:
                    f4:29:cd:9a:d0:85:41:69:51:d5:0e:a6:59:9f:e3:
                    f8:b1:a8:84:59:c5:f2:df:b0:e9:ff:44:8e:a3:03:
                    c2:ac:cf:17:5c:87:c8:bb:e7:99:9c:5e:26:49:dd:
                    28:7b:6b:21:78:4f:4a:98:65:76:cf:ba:f3:de:9a:
                    86:d6:27:a3:72:90:da:c2:e7:42:81:10:09:f9:f0:
                    f9:36:0b:5e:23:5c:cf:11:a9:2a:a3:48:8e:dc:8e:
                    44:82:f7:9f:c2:bc:6e:ee:d3:2d:e6:ed:2a:e8:ff:
                    60:2a:29:bb:d7:bd:b6:0b:70:76:0a:d1:4e:e0:42:
                    f6:5b:6b:84:af:3f:88:79:e0:15:bf:a6:42:bf:2a:
                    b3:86:10:89:84:cf:ed:5e:e8:e3:70:68:3a:0d:f8:
                    eb:91:3c:02:c3:d0:18:11:6b:74:38:7a:c8:d2:d7:
                    64:39:35:93:b3:c2:0a:38:90:0f:90:de:8a:66:70:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:99:95:50:48:7B:7E:94:E7:16:41:32:0D:E2:A6:9D:35:3B:1A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.253.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:85:6c:7f:53:7c:c1:7e:68:be:63:53:52:5b:3f:6d:e4:52:
         4e:9e:2c:b8:d9:35:85:90:c1:4b:be:22:0d:65:5a:3b:fe:c6:
         29:a4:24:cd:23:9f:78:99:56:b7:40:b4:d8:a3:94:7d:08:b1:
         16:ea:f6:a0:67:30:4b:48:d1:cf:76:d0:5e:a6:ba:1e:91:6e:
         f3:a1:bb:01:3d:81:07:ec:c4:a2:98:cc:58:a3:68:73:0b:71:
         21:a5:1f:ff:78:36:c7:a6:4c:f8:1f:a3:7a:9b:97:d0:96:2d:
         ca:60:9c:eb:48:03:4f:5b:cf:cc:09:9f:02:c2:ce:2a:db:12:
         f9:25:c9:38:06:e3:93:17:5b:0c:74:a3:3a:93:00:d9:b5:1f:
         d5:30:5a:22:55:ad:05:75:93:e4:ae:bb:f5:37:87:c5:9f:0b:
         dd:e9:48:00:aa:fb:eb:b1:a3:99:b4:d6:df:c8:c8:9d:e9:2a:
         b9:76:65:5a:5c:00:7b:de:2b:29:1a:d6:f6:98:e6:0f:82:61:
         a3:1a:ab:98:e2:27:82:2a:9f:3e:d1:b6:ae:8d:58:26:78:38:
         0f:8c:29:aa:c8:19:0f:c6:ba:10:2a:de:77:0c:42:87:64:87:
         84:65:a1:7d:bd:81:8c:9f:8a:8f:34:fc:86:36:66:ac:db:9e:
         08:73:08:bf
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEozGw7lOoRzQSZRjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
YWFmNjBlZWEtNWFmMC00MjgwLTliNWMtYmMxY2FmY2VlZTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSGJyUjTRkTIarzYjh+sBuRfyiqsBKb/QXDg
0P2d7UlEe0JrgoD015zl1SPCGZ3n3Yf/LzODTZhRuotWxaPrnksZhrAj3QKggEL0
Kc2a0IVBaVHVDqZZn+P4saiEWcXy37Dp/0SOowPCrM8XXIfIu+eZnF4mSd0oe2sh
eE9KmGV2z7rz3pqG1iejcpDawudCgRAJ+fD5NgteI1zPEakqo0iO3I5Egvefwrxu
7tMt5u0q6P9gKim71722C3B2CtFO4EL2W2uErz+IeeAVv6ZCvyqzhhCJhM/tXujj
cGg6DfjrkTwCw9AYEWt0OHrI0tdkOTWTs8IKOJAPkN6KZnA4JwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFASZlVBIe36U5xZBMg3ipp01Oxo8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYzI4YWNkNWYtNWZhNi0z
YzI4LTliODEtZDg4OGMxZTczODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGjPj9gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDMhWx/U3zBfmi+Y1NSWz9t5FJOniy42TWFkMFLviINZVo7/sYppCTN
I594mVa3QLTYo5R9CLEW6vagZzBLSNHPdtBeproekW7zobsBPYEH7MSimMxYo2hz
C3EhpR//eDbHpkz4H6N6m5fQli3KYJzrSANPW8/MCZ8Cws4q2xL5Jck4BuOTF1sM
dKM6kwDZtR/VMFoiVa0FdZPkrrv1N4fFnwvd6UgAqvvrsaOZtNbfyMid6Sq5dmVa
XAB73ispGtb2mOYPgmGjGquY4ieCKp8+0baujVgmeDgPjCmqyBkPxroQKt53DEKH
ZIeEZaF9vYGMn4qPNPyGNmas254Icwi/
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:50:21 2025 by rpki-client