Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/00cb2885-00e9-36b4-b0ff-119e9a17c4e8.roa
File:                     00cb2885-00e9-36b4-b0ff-119e9a17c4e8.roa (raw, json)
Hash identifier:          0YZ+4F1wH7dg2eomvMU1Iteg6cv26b3gaPkk0LbqZJU=
Subject key identifier:   7A:7C:0E:E0:38:1E:FE:BC:61:29:29:56:6F:B7:BA:99:26:17:2D:0D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B10ED1A0BBC30C12CEB00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/00cb2885-00e9-36b4-b0ff-119e9a17c4e8.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        140.248.209.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:10:ed:1a:0b:bc:30:c1:2c:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=d3a49844-545c-4d1b-a169-c00ce010099f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:26:cd:03:65:15:78:ff:b0:b7:ef:c3:8d:c6:
                    d8:59:9c:2c:bd:b1:78:d0:d3:ca:a2:9a:a2:32:7a:
                    14:a8:d6:ea:1e:31:f0:a6:d4:af:22:ff:02:af:ec:
                    27:0c:1f:ae:33:c6:40:ab:59:c4:e0:7c:22:b6:18:
                    70:d2:bc:cf:cd:da:fd:af:ba:8b:30:60:6c:c4:d1:
                    67:d5:57:7f:50:38:6c:a0:4e:95:5b:d9:46:2b:e4:
                    82:98:11:69:e1:ca:77:ce:ba:c9:6e:72:b6:26:3a:
                    ea:82:cc:13:75:5c:7a:e5:64:f4:ec:d3:d8:ce:30:
                    7d:be:14:64:eb:d9:5b:8f:8d:81:77:59:f7:53:b1:
                    fb:db:b0:de:71:cf:d2:01:5e:5d:ed:ef:af:c3:ce:
                    97:48:6a:0d:76:33:3f:de:9f:c6:fd:82:d6:61:c7:
                    d0:74:39:e1:c1:a2:58:a8:5d:63:fe:47:f5:93:31:
                    e4:da:bc:a3:8f:50:12:f5:33:46:26:3d:7b:4c:91:
                    65:6b:64:86:db:87:59:af:de:70:97:c0:92:da:eb:
                    64:d6:94:2d:e8:02:43:c8:a9:92:ad:5b:a7:ef:96:
                    31:27:1e:2d:f5:82:ca:03:cf:c0:00:df:9a:ad:e2:
                    c7:07:2f:b1:cc:e8:cb:7b:b8:31:6a:42:da:70:e2:
                    a4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7C:0E:E0:38:1E:FE:BC:61:29:29:56:6F:B7:BA:99:26:17:2D:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/00cb2885-00e9-36b4-b0ff-119e9a17c4e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.209.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:d5:a3:5b:26:e0:52:34:47:45:72:cd:f7:8f:de:3e:47:56:
         ce:cd:39:75:72:3f:1b:22:d7:6e:a1:06:2c:65:09:ae:40:02:
         35:c7:28:20:43:79:7b:9c:48:33:39:37:88:b5:dd:e2:cd:3f:
         e8:81:74:c2:e1:57:19:c0:29:8e:25:ff:fc:03:7a:42:d7:6e:
         a7:26:a8:39:5f:d6:8d:2d:da:16:01:4f:26:0d:50:31:b9:2c:
         5f:3a:6c:43:58:ca:43:da:0b:7e:ea:3c:9d:15:e5:62:0b:89:
         46:a0:56:8c:41:70:3c:ee:90:c8:af:dc:b5:11:ba:93:41:49:
         da:b2:f1:d9:40:e5:71:8d:0a:17:65:6c:5d:fc:ff:64:37:53:
         b2:ca:20:15:32:05:d1:6f:9b:f8:c5:c7:18:00:97:b8:31:3b:
         ab:f6:09:0f:89:62:95:48:78:5d:67:02:f6:7e:a7:c3:12:b3:
         e9:17:f9:9e:a3:73:9c:6b:2e:d5:66:db:d6:94:ad:6a:9c:28:
         c6:66:dd:a9:fb:eb:74:5f:45:03:19:f5:a4:54:d0:3b:0d:64:
         47:e8:58:d9:09:9c:b6:65:98:87:e7:b7:64:06:12:a0:ed:97:
         ad:c0:24:06:c7:65:57:94:d0:f1:ee:7d:0f:ca:36:ad:2d:cd:
         12:32:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:44:15 2025 by rpki-client