Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c32f2009-76a6-322c-9d24-bb6fb413c863.roa
File:                     c32f2009-76a6-322c-9d24-bb6fb413c863.roa (raw, json)
Hash identifier:          bcb8ZSdwuCTtMOutM7P+7f1NAptsx4nUjZ5EOjsppng=
Subject key identifier:   64:87:86:3A:BA:26:97:22:6E:41:AA:AA:37:2F:BC:31:0C:03:F7:50
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B0A59DEA54D5B3C00BD40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c32f2009-76a6-322c-9d24-bb6fb413c863.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        140.248.242.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:0a:59:de:a5:4d:5b:3c:00:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=f8a3ea45-ff0b-4022-ae07-868e5f5cadba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:d7:34:62:4d:10:a0:4a:0a:a1:ac:55:97:
                    dd:96:e6:f1:01:28:80:af:be:f1:5f:76:11:c0:cc:
                    b3:b3:7d:e3:c1:e6:c2:13:f6:5b:a7:4a:7f:ff:45:
                    e3:d1:c9:01:d2:39:49:06:e5:b5:2a:21:53:0d:3f:
                    d7:b1:83:66:9a:4b:33:5f:b5:8b:52:16:20:2e:d8:
                    1a:bd:3e:a7:23:f5:81:29:02:38:b5:f7:4b:66:fe:
                    69:1f:6b:20:eb:a8:d6:96:2b:3e:b8:91:bf:7b:df:
                    62:93:34:dc:20:2a:cb:18:55:4e:21:c3:0b:9a:e2:
                    9f:9d:a1:55:61:9f:e9:f0:e0:fd:71:45:f7:c0:19:
                    dd:32:48:09:08:0e:9c:fe:11:0e:2a:69:5b:f2:ca:
                    f9:c2:24:bd:a6:40:c0:7c:17:45:3b:8c:b1:e8:65:
                    8d:20:e6:68:26:cc:fc:e8:18:0a:c8:f4:6d:52:e0:
                    78:65:0c:18:c4:34:17:1c:43:2e:0d:50:25:d0:bf:
                    1c:47:fd:df:69:e7:dd:e4:53:19:5e:98:ae:e9:7e:
                    00:b6:84:41:4f:a9:0b:df:44:63:ae:ef:b0:e0:c1:
                    dc:0d:1c:24:93:31:21:c1:05:2a:94:f5:7c:ae:2f:
                    33:90:5c:76:37:70:50:d1:ce:55:0f:2b:5b:d5:31:
                    ef:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:87:86:3A:BA:26:97:22:6E:41:AA:AA:37:2F:BC:31:0C:03:F7:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c32f2009-76a6-322c-9d24-bb6fb413c863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.242.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:dd:3b:4c:00:91:c8:9b:08:91:2b:d4:cc:5b:51:9c:e4:7e:
         9e:41:b8:88:07:51:5d:00:a3:cd:e8:3a:a8:d5:c8:5f:5c:51:
         b2:64:3d:1a:db:f4:3a:64:73:3a:17:1a:fe:b9:7a:9f:d0:cb:
         7f:3f:3d:e5:53:20:5c:22:5b:2d:af:a7:2f:ba:1e:50:93:ed:
         fe:53:59:05:33:0a:5d:17:76:59:39:0d:a6:f8:8a:3a:29:7c:
         de:13:df:c2:51:9d:15:4e:83:a1:9b:89:03:7d:fc:f9:0b:bf:
         bf:24:d2:75:b1:f7:9d:52:77:1a:ce:db:34:9d:b4:ed:dc:8f:
         c5:ff:e2:98:91:98:35:81:e8:7c:fc:54:c6:38:87:ef:e5:88:
         0c:a2:d9:f6:3b:95:0e:6a:c9:15:f7:c0:57:af:8b:d2:d9:5d:
         bf:6e:01:22:79:29:20:38:8b:39:39:fc:1d:bc:b8:cd:c8:7d:
         89:a0:9d:b6:9c:60:cb:10:e1:a3:fd:5c:f6:13:e0:ab:3f:f7:
         3e:ef:39:a5:01:31:35:49:d8:26:de:95:3a:a0:e2:0d:f9:80:
         ea:30:1f:73:be:f5:c3:c8:7e:0d:44:a9:0a:86:8d:47:ca:1a:
         5b:81:2c:af:a9:64:93:3f:e4:d8:23:60:85:21:39:f0:7e:51:
         ed:58:53:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:37:53 2025 by rpki-client