Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1eee8da8-61da-3886-ac9d-24e9c872c0f8.roa
File:                     1eee8da8-61da-3886-ac9d-24e9c872c0f8.roa (raw, json)
Hash identifier:          7ScR34427zIpQqvkpB6ChVRqU/Asv3LTIGe8yd2JKV8=
Subject key identifier:   ED:21:B5:B2:4B:50:76:56:4E:F5:FD:65:5C:21:6E:D7:43:43:81:66
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B12373C0D2AC2F8493040
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1eee8da8-61da-3886-ac9d-24e9c872c0f8.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        140.248.244.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:12:37:3c:0d:2a:c2:f8:49:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=aa22e66b-10de-4f7d-8e33-2c212ee29e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:77:3c:20:1b:73:73:62:9f:33:78:10:db:77:
                    be:76:4b:48:24:30:c3:a8:fd:09:cf:ab:48:2f:9d:
                    55:f6:8b:ba:ea:37:f5:a7:5a:1b:a3:fd:75:be:01:
                    3b:d4:bc:18:8f:b1:97:ab:88:e9:43:94:63:31:c9:
                    d2:ba:eb:a0:cc:21:e0:92:78:a9:27:7d:f6:61:56:
                    c0:3d:99:0e:b5:ce:19:de:3c:e9:c5:e8:77:d7:78:
                    17:1d:bd:94:ef:b1:12:1d:8d:43:59:74:ca:5f:c9:
                    bf:6f:51:2c:d6:b9:48:a8:c2:eb:95:b8:43:14:a5:
                    db:3e:b9:80:b0:02:3c:70:ae:00:67:73:69:d6:e1:
                    cc:b9:e3:10:4e:63:ec:d6:05:b7:79:bc:1a:27:14:
                    fa:83:d0:b4:9e:a9:c4:c3:7b:4b:b6:66:06:c5:3f:
                    96:2c:c4:64:12:bd:a9:36:55:96:b2:ff:2f:72:08:
                    a6:b6:71:04:ad:70:4c:ea:68:b0:f9:50:73:9b:74:
                    e0:d7:45:88:50:f0:2e:c6:53:52:be:be:ad:70:f2:
                    49:e6:8a:65:2c:32:96:9a:bb:06:02:3e:09:ad:3a:
                    01:53:7e:37:20:5a:83:07:79:b0:5a:08:c3:c9:50:
                    8e:7d:9a:fd:44:e6:90:eb:88:cf:bc:2f:e0:e3:93:
                    24:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:21:B5:B2:4B:50:76:56:4E:F5:FD:65:5C:21:6E:D7:43:43:81:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1eee8da8-61da-3886-ac9d-24e9c872c0f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.244.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d1:74:e6:2b:bc:76:da:04:8f:6b:04:e8:7e:14:12:73:cc:
         61:c6:4e:78:c7:d0:78:c4:8b:87:68:8b:cb:23:0c:e7:28:6b:
         da:83:c0:1a:4a:51:1a:b5:1a:00:9c:d1:ff:2d:3f:cd:57:3f:
         01:18:bc:b0:e9:ac:27:0b:a0:3d:98:b1:9f:47:6c:0a:ec:70:
         62:3e:15:3a:ce:d2:88:42:95:20:6a:ca:82:f1:b5:f1:32:fe:
         fc:fd:47:6e:6c:74:bf:01:09:e5:23:15:66:64:23:70:e3:b8:
         c1:c5:6c:c6:0a:1a:16:f9:94:78:53:56:02:8d:01:51:57:22:
         e8:b2:9d:b0:45:66:02:06:20:d2:0f:30:aa:29:31:95:09:d1:
         35:9f:38:c8:4f:9e:b4:77:cb:7b:41:b6:6e:d0:ce:49:65:fa:
         86:f4:d2:c7:12:d5:11:59:84:b7:3f:e1:d9:07:40:de:bf:74:
         48:2b:2d:75:23:04:e7:00:a0:a9:10:15:0f:ef:a6:36:0a:c7:
         11:7e:0b:b6:e1:ff:0f:e2:8e:4e:a1:dc:94:0b:6f:6c:04:50:
         df:cc:a3:a5:e9:0f:b0:ea:2f:5f:e4:24:a1:43:e0:a4:e8:36:
         6b:5a:bf:b5:bc:54:c9:00:df:51:f5:ff:c2:1e:74:8f:0e:72:
         e3:c1:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:49:47 2025 by rpki-client