Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cb5efad-7ea8-3233-a95e-eae80a4544e1.roa
File:                     1cb5efad-7ea8-3233-a95e-eae80a4544e1.roa (raw, json)
Hash identifier:          wlCfKtJWpN05VOymV4wgvcDFzB/Fg0tiI2eHq95k9eM=
Subject key identifier:   49:65:CB:CB:02:12:9F:18:9A:31:B0:D1:37:CA:2C:76:FC:57:8A:C7
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B0A2DF90B455DAAC6F200
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cb5efad-7ea8-3233-a95e-eae80a4544e1.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        140.248.212.112/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:0a:2d:f9:0b:45:5d:aa:c6:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=277264ca-acd6-480d-b54b-a0d7cccd4086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:71:ab:db:6e:fd:0b:66:ca:01:9e:3a:91:
                    25:5a:a6:cb:13:40:a2:18:d1:04:d4:09:f9:de:f7:
                    71:74:b8:cd:6c:f0:15:80:e6:00:dc:d3:86:b8:89:
                    94:a5:27:2c:80:f3:fb:d5:c8:1c:37:17:bd:bd:4f:
                    ab:aa:26:81:15:40:ca:33:3a:4e:c4:30:66:b8:da:
                    25:47:19:ac:4f:31:e6:21:3c:9a:c7:0d:2f:dd:a2:
                    d9:64:06:12:f1:07:df:17:98:1f:07:d9:09:9a:84:
                    60:f1:34:c5:87:59:f3:26:ab:33:aa:8a:1d:f0:29:
                    e0:77:c7:ac:55:61:06:34:bf:32:3f:c5:9b:69:9f:
                    57:dd:92:55:68:15:c4:6a:ca:d5:b9:2e:87:07:2e:
                    49:ca:d0:c0:70:db:c5:7a:67:d9:10:fb:51:79:fd:
                    db:e5:88:fc:93:c9:5b:30:a2:64:fe:6e:3f:ec:39:
                    d7:0e:06:b3:e1:d9:b9:ba:42:d7:f4:a4:65:c6:f4:
                    6a:21:3e:a6:78:e5:e8:71:05:5d:f4:93:e7:94:ff:
                    b6:83:15:40:a5:f3:3f:88:94:99:71:74:48:b4:e9:
                    29:5b:fb:fe:0f:ea:8f:88:03:d1:96:c8:a2:9a:f7:
                    75:37:02:c7:03:5a:b7:b2:38:e7:c1:e8:89:07:57:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:65:CB:CB:02:12:9F:18:9A:31:B0:D1:37:CA:2C:76:FC:57:8A:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cb5efad-7ea8-3233-a95e-eae80a4544e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.212.112/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:0d:0c:11:c0:7b:43:0e:36:49:66:9b:5f:d7:c1:0e:1e:
         2a:08:ab:8a:a0:c7:66:8d:3b:aa:57:53:59:81:6f:cb:7a:0e:
         0d:5c:61:c7:c6:65:89:ba:1c:70:8d:12:0a:88:ae:d1:83:1e:
         99:39:d9:a5:79:09:b4:ee:54:2a:78:9e:1b:7a:0a:f1:4d:96:
         4c:c9:d4:5e:2c:c3:b3:3a:08:9b:d8:bf:3d:9d:5f:fc:9b:1c:
         eb:6b:40:03:fc:76:75:da:82:35:8e:e0:c6:e8:e9:6f:8a:c2:
         53:6a:02:d1:36:13:ab:0b:26:5c:ce:7f:c6:df:e2:5a:98:c1:
         f8:a1:d8:c3:c9:2f:21:d6:b4:a2:7d:6d:46:ad:78:77:e1:88:
         f7:c4:30:6b:91:3d:c3:59:42:aa:df:07:36:af:64:fa:22:66:
         c1:63:2a:77:d3:2d:c9:d4:36:84:98:77:e3:ab:a7:58:26:95:
         6e:2a:0c:42:e0:f3:28:d0:2b:bb:21:1b:b4:53:3c:54:73:34:
         a6:df:e1:d3:7b:5b:87:4b:1b:ec:89:5b:29:5a:4b:8c:22:53:
         20:38:11:e1:33:4b:3c:2f:83:1a:74:c8:c0:0a:ce:02:e8:8f:
         c0:41:fa:a4:2f:1b:5e:1a:76:d5:49:8b:d4:93:b3:60:19:5a:
         4d:ff:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:33:52 2025 by rpki-client