Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/74026c3d-46b6-3c59-8b39-8405dac84be1.roa
File:                     74026c3d-46b6-3c59-8b39-8405dac84be1.roa (raw, json)
Hash identifier:          Vx90dDzkRbXLuTAgFGwF20uQ3xL8qxLNv+Oll1b4mvI=
Subject key identifier:   1A:63:52:F0:2C:F6:76:C5:94:C5:DB:86:DE:CD:6D:E0:ED:6B:1B:27
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B0E26618F5231F4079D90
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/74026c3d-46b6-3c59-8b39-8405dac84be1.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        140.248.221.192/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:0e:26:61:8f:52:31:f4:07:9d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=60b6a820-cbdc-44b1-b757-5832363da324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:7f:67:dc:d8:36:59:c9:11:54:a2:15:1a:
                    dc:9f:fb:d2:59:cc:fe:5b:84:6d:03:04:63:03:2f:
                    76:7d:15:6d:c3:dd:bb:5c:d3:75:63:86:a7:18:16:
                    62:73:0f:fe:a4:08:8d:bf:8e:12:57:4f:90:70:26:
                    b1:82:8c:67:01:82:ad:59:a3:26:0a:65:4c:55:a7:
                    00:35:cc:81:2b:d8:86:d5:65:1d:91:b1:74:c8:da:
                    ac:34:8a:f3:f7:fc:e6:5d:03:74:a5:d7:80:8b:e4:
                    cd:31:4d:3b:54:08:5c:4d:98:4f:4a:4c:e8:52:53:
                    a8:78:8c:3b:5e:6f:36:61:e5:f6:8b:47:56:95:cc:
                    12:c1:71:43:d1:e2:8d:0d:64:1d:9d:3f:25:df:dc:
                    b8:0f:29:a9:92:bc:dc:0e:27:c2:38:80:60:71:9e:
                    36:b5:3e:5d:1b:75:c6:04:8b:3d:3f:67:ef:db:ee:
                    1b:9d:43:2e:cf:2b:e1:02:e3:14:55:e9:71:71:82:
                    1e:6e:f2:ac:ab:d0:be:ec:3d:88:a6:85:ac:45:c3:
                    57:1f:68:44:5e:7d:b6:af:22:65:e5:4a:9e:e9:d6:
                    41:d4:90:e6:6a:57:90:3f:eb:c4:76:a7:24:82:3e:
                    ae:b2:87:84:29:22:00:96:b5:78:ab:c1:ac:76:2f:
                    e3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:63:52:F0:2C:F6:76:C5:94:C5:DB:86:DE:CD:6D:E0:ED:6B:1B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/74026c3d-46b6-3c59-8b39-8405dac84be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.221.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:1e:82:59:44:dd:ee:ca:c7:29:78:2d:3d:1a:6f:76:21:7d:
         6a:eb:25:ab:5c:9c:46:8c:16:14:ae:b6:d6:f9:e5:fa:70:49:
         ba:f1:72:3f:ad:f5:d5:05:6b:6e:d7:53:09:cc:9c:c9:4d:7c:
         bc:b1:bd:0a:b1:ac:2a:42:28:37:83:b0:4e:81:31:af:6a:41:
         c5:7d:4f:3a:c1:96:f8:eb:e7:9a:ad:6d:1d:0e:e0:5a:1d:12:
         92:ed:5d:70:b1:0b:d6:a9:1a:4c:f2:e5:2b:f4:ee:ed:ea:31:
         46:a0:63:1c:c5:00:ff:9a:93:1a:42:16:2f:19:53:b0:8d:00:
         bf:13:bb:5a:2a:86:57:db:4f:00:a3:84:c3:f9:86:15:09:23:
         c8:a6:73:dd:2c:1d:5e:5c:ae:1a:82:e8:f9:db:f5:f1:d8:81:
         b3:5f:af:20:b0:ae:8f:f3:78:d4:65:09:b7:3c:55:a4:34:4e:
         17:76:25:a7:d0:e4:3e:22:a1:49:2a:42:c1:9a:91:ba:21:b8:
         6a:85:c4:72:a3:46:f8:a7:6c:fe:9d:93:d7:52:72:27:e2:93:
         ac:ad:73:f4:a0:e9:bd:b3:b4:4a:05:40:44:ab:ce:b1:12:56:
         cb:ca:2d:f3:09:f0:76:87:48:13:67:f8:d7:60:04:2e:97:38:
         62:36:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:09:35 2025 by rpki-client