Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f29116ea-6c40-36e0-8a0d-de6d7775b4d4.roa
File:                     f29116ea-6c40-36e0-8a0d-de6d7775b4d4.roa (raw, json)
Hash identifier:          HqfqGSwL4EtgoQDLk3/9cmzNBduP7+SXaVPl35aRpG8=
Subject key identifier:   27:F7:2D:BE:2A:3A:06:FD:E4:D6:9D:C6:99:54:13:2E:3F:34:54:08
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B1E456FE32A35B4272C00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f29116ea-6c40-36e0-8a0d-de6d7775b4d4.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        140.248.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:1e:45:6f:e3:2a:35:b4:27:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=76c015e2-4084-4e0d-92c0-0a6231a94bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:65:49:a0:94:79:bf:d4:c4:ee:bb:49:4f:40:
                    dd:e0:19:1e:98:16:93:b7:7e:a9:9c:5b:03:e1:d2:
                    e3:d3:e0:3a:5f:e6:de:6e:ba:d5:15:a5:94:73:34:
                    9f:03:64:4d:65:6b:94:8f:ae:d1:a9:b9:87:65:5c:
                    fb:45:f1:a5:51:05:a9:5f:91:58:05:8c:3d:fd:77:
                    b4:3e:db:2f:f3:59:3c:60:be:27:17:11:a4:d5:49:
                    7a:19:4b:76:8d:1e:c6:50:6f:fa:aa:7a:8f:3a:d3:
                    23:95:84:0a:38:30:0a:64:c8:b6:69:8d:6a:34:bb:
                    5c:ea:27:7c:a0:ac:1e:3e:9f:fa:22:2e:6f:6f:dc:
                    e9:c0:b3:9e:25:e0:f8:aa:58:8a:72:56:22:63:24:
                    6b:31:aa:d0:0f:1f:b3:0b:fe:d9:ab:b4:c2:a4:0a:
                    f4:35:0d:37:58:a4:59:23:1c:8b:27:fc:49:fa:ba:
                    2c:8f:41:25:32:5e:99:e9:b9:22:f3:b8:d6:c4:c7:
                    f2:80:a6:99:d0:ae:40:2f:1b:fc:1c:87:df:4b:95:
                    39:80:bd:12:1e:02:94:46:7d:c4:99:dd:fe:ad:33:
                    c3:8d:28:e1:cf:4b:12:4e:d0:81:6b:76:90:af:2d:
                    d6:23:11:0c:b8:23:b3:36:85:23:a9:19:e4:65:3b:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F7:2D:BE:2A:3A:06:FD:E4:D6:9D:C6:99:54:13:2E:3F:34:54:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f29116ea-6c40-36e0-8a0d-de6d7775b4d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ad:86:63:f1:5a:b2:86:98:c5:c3:88:00:72:62:3d:6e:97:
         9c:6a:e3:40:d3:da:95:ec:b8:9c:8e:1a:30:ec:6d:fd:ce:62:
         ed:0b:94:2e:8d:7c:69:1f:9a:49:5f:3c:c1:a6:32:18:07:4e:
         87:16:28:47:53:77:10:fe:8a:a4:84:9d:66:9a:43:45:2f:85:
         bd:6d:96:31:4a:93:bf:27:1c:c2:65:91:e0:cc:7e:7d:56:0c:
         08:68:05:0f:70:7a:8f:26:46:34:a4:46:03:67:ce:66:15:6a:
         b4:bd:b4:c0:6d:9c:f3:bf:7c:4d:18:b0:f2:4a:e7:a0:c2:ab:
         6b:b1:5a:5b:f6:60:4c:77:38:a5:59:33:12:1d:7c:12:4f:68:
         dd:98:55:5e:d3:f3:4c:88:87:00:ec:a9:19:27:4f:ba:9d:18:
         f5:50:2f:73:7e:05:b0:e0:d1:21:d4:f2:ce:f2:60:0e:c2:41:
         6a:4e:c7:20:09:45:7b:9b:b2:d9:5e:b8:43:ce:0e:04:87:19:
         59:98:36:47:93:a3:39:c5:af:24:1e:b8:4d:f4:a1:8d:29:02:
         2d:bf:93:1e:19:d8:6d:17:7c:3d:91:81:67:0a:0d:c8:0a:b2:
         c1:d7:36:b9:47:0c:35:8b:94:21:80:ec:2a:7d:72:78:4e:ca:
         4c:18:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:38:35 2025 by rpki-client