Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/39b29de0-10da-3a5b-8d2c-337ab3f65ad9.roa
File:                     39b29de0-10da-3a5b-8d2c-337ab3f65ad9.roa (raw, json)
Hash identifier:          DFbf0f/3qliOzHEo0iuJA6vWgo+Ili0V99LIouCQ6Ao=
Subject key identifier:   F9:06:05:01:E7:50:B7:1A:97:32:14:6F:D9:02:43:24:D7:DA:65:9B
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B7B21FDD78F6CEB1E977F98C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/39b29de0-10da-3a5b-8d2c-337ab3f65ad9.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     54113
IP address blocks:        140.248.72.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:fd:d7:8f:6c:eb:1e:97:7f:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=0f710583-dba7-4c13-afff-2ca08f28363d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:67:2b:04:af:f5:08:16:46:05:71:8c:1e:
                    42:0b:5a:aa:e7:29:49:83:ea:49:b8:de:ae:cc:fb:
                    12:19:00:44:01:f4:b3:71:86:98:b0:77:2f:0b:aa:
                    3b:84:b9:14:a5:18:c4:36:56:e0:c6:21:27:92:ab:
                    4c:dd:54:4c:fa:ed:16:1c:55:af:4c:d2:89:f2:29:
                    af:61:ef:0f:ad:c0:4d:78:3b:8e:29:2c:68:48:f1:
                    bb:cd:0a:9b:15:08:f6:3b:5e:7c:bf:7d:b7:03:d6:
                    08:c0:82:12:1e:b6:5d:15:d1:3d:77:cc:21:e9:82:
                    c3:af:ee:13:5e:15:63:a4:bd:44:af:46:b3:7a:3e:
                    fb:c6:45:4b:34:04:a1:e8:70:b3:d6:81:35:59:bb:
                    af:64:76:fb:c1:af:9b:dd:1c:18:3f:14:eb:2e:ba:
                    44:60:47:ae:e1:ca:61:f7:b5:dd:01:a5:6b:83:32:
                    c1:7c:cd:bf:1c:bd:eb:b0:78:a2:42:f2:ea:f1:7c:
                    2e:bc:f4:fb:39:a0:4f:05:98:45:52:51:92:08:5d:
                    d7:d9:9f:f3:2f:4d:8c:5e:5f:90:6d:fb:d3:65:94:
                    18:93:71:a8:f5:ac:a8:06:a6:8a:e7:8e:d3:04:9a:
                    bc:98:ae:fd:cd:2a:dd:cc:f4:8a:14:27:b9:94:21:
                    8e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:06:05:01:E7:50:B7:1A:97:32:14:6F:D9:02:43:24:D7:DA:65:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/39b29de0-10da-3a5b-8d2c-337ab3f65ad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.72.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:87:02:14:80:00:14:6c:ac:bb:ee:d2:05:a5:c5:13:19:65:
         6b:5a:59:f0:2a:b6:83:e7:b1:17:cf:9a:7f:4c:41:c2:84:8b:
         df:5d:d4:c2:29:62:49:ef:91:4b:38:15:cc:da:14:6b:0e:7e:
         9a:a3:9f:39:7b:bf:f9:9b:de:c4:e0:23:93:89:6b:f1:b0:36:
         89:c7:e8:f9:1a:13:47:d1:d8:92:63:d6:57:3d:a4:15:a0:94:
         c4:66:4a:61:49:02:03:d0:84:77:6e:d7:0a:a7:6e:0e:0b:44:
         5b:21:04:4e:65:24:a9:fe:0b:8e:98:86:0a:e8:3d:c9:37:5f:
         1a:a9:26:69:b9:92:e1:9b:76:0b:fe:05:45:8d:08:14:b3:e9:
         05:f2:c6:c9:18:ff:ca:60:65:a2:55:42:2f:f3:82:d1:44:26:
         fd:bf:5b:2f:3b:99:8e:88:cd:80:2c:21:cb:5a:98:e2:9a:61:
         87:25:53:15:e0:1f:98:54:d5:5c:01:7f:66:24:11:aa:d0:b7:
         1d:93:16:bb:84:8a:0c:7c:01:9e:22:c3:ee:37:4e:3f:e1:3d:
         26:3c:b9:99:66:5d:fa:c5:50:37:22:10:e9:07:88:d8:ae:38:
         e7:33:9e:b3:14:4c:6c:1c:7a:5c:4d:b8:bc:59:6e:dd:97:aa:
         c2:59:8a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:04:20 2025 by rpki-client