Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/db0fbefd-97f5-31f6-bd0e-be1d8dd24b7e.roa
File:                     db0fbefd-97f5-31f6-bd0e-be1d8dd24b7e.roa (raw, json)
Hash identifier:          8hlxmM6OWLBxkmioonCDDw27rb4X8QZjeG5vJZY4Omk=
Subject key identifier:   87:92:3F:46:C5:40:22:38:3C:84:83:38:10:CE:2C:E5:EF:AD:27:D4
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B09C07918864E8116FB00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/db0fbefd-97f5-31f6-bd0e-be1d8dd24b7e.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        140.248.210.32/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:09:c0:79:18:86:4e:81:16:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=ed260ae5-a253-4378-a75b-7824e0e3107f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:55:e6:ed:42:ca:23:d7:fd:03:63:b0:a1:1b:
                    f0:eb:4f:eb:17:15:77:f9:39:f8:22:d3:92:af:57:
                    36:b0:41:9d:1f:15:d1:f5:f9:39:ff:51:c8:ee:fa:
                    56:96:9a:22:2f:f6:bc:53:b0:c5:b2:6f:65:89:69:
                    dd:39:ea:ab:45:2b:4b:42:4c:a5:11:19:e5:b0:51:
                    01:21:b7:23:e9:54:a8:4c:0c:18:a5:f3:55:a6:b5:
                    80:54:2f:ba:fd:be:a3:0d:ee:6d:6c:79:7a:ae:ca:
                    16:91:0c:42:38:5b:31:48:24:58:f3:24:91:58:9c:
                    26:34:8b:43:8f:d5:73:e2:ee:60:8c:a4:f4:1f:98:
                    65:f5:6c:c5:3d:be:75:be:04:7a:15:66:68:2f:a8:
                    38:73:5d:1d:58:33:cb:eb:c9:2b:61:47:05:fc:05:
                    d5:17:04:e0:ec:64:dc:83:18:93:92:35:29:a2:8c:
                    9b:d5:d1:7e:63:a1:d5:73:2c:ea:05:eb:c4:b9:91:
                    5a:32:44:d4:15:a7:5c:96:fd:5e:d3:b1:18:8f:74:
                    97:2c:66:79:9f:20:24:68:e7:53:cf:9b:b6:81:99:
                    7d:67:2d:34:70:ec:49:1b:fe:66:e0:e9:56:a7:06:
                    a4:7a:bf:cc:2c:b9:de:31:d1:08:29:e4:af:25:2d:
                    08:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:92:3F:46:C5:40:22:38:3C:84:83:38:10:CE:2C:E5:EF:AD:27:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/db0fbefd-97f5-31f6-bd0e-be1d8dd24b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.210.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:28:c9:1a:12:d2:b6:6f:ef:c2:c7:e0:b5:0b:cf:47:c7:
         97:71:bd:f1:35:5f:63:44:28:d6:7f:be:ed:dd:e7:2c:ef:e8:
         30:38:5e:6d:53:37:6a:c5:55:6b:ee:57:dc:d6:12:11:06:6d:
         82:0d:9d:52:cb:bd:ca:92:b4:02:f9:51:6d:41:3b:12:e5:f6:
         7d:9a:56:51:13:b4:c3:9c:0e:2c:eb:65:5e:15:38:1a:54:8f:
         d2:74:c7:4e:c2:c0:11:a3:9e:c2:0c:60:d7:b3:5f:f1:f7:c5:
         51:c9:1b:62:cb:90:dc:d7:a9:aa:62:8a:b0:93:68:e3:5d:f1:
         b1:ad:af:55:dc:8a:07:9d:86:1e:77:73:89:9d:66:20:8e:70:
         86:84:38:3e:a3:1c:87:9c:53:f1:9b:9f:d3:80:dc:cb:a4:5a:
         bb:55:cb:5a:bd:f0:7f:fe:d1:89:a5:41:4e:2e:ff:3e:4a:9e:
         d5:3f:00:d6:8b:dc:fc:68:21:6e:24:28:8a:46:a5:15:10:06:
         dc:60:07:74:42:89:ab:09:54:f2:23:ec:f8:31:75:6a:64:8a:
         0c:9c:0c:c3:c8:c0:c6:06:89:69:7b:08:14:d9:f1:8c:94:ae:
         d3:c5:99:66:71:d4:f5:bc:83:06:f4:27:10:e8:bd:fd:46:a0:
         27:6d:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:01:47 2025 by rpki-client