Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e2c11ea1-c423-35e7-8e41-3c3b9b7542cd.roa
File:                     e2c11ea1-c423-35e7-8e41-3c3b9b7542cd.roa (raw, json)
Hash identifier:          tYr3MvVSIDuIbrQt2hIBm/NRvAVLrPtcvTjRpji7oZI=
Subject key identifier:   09:16:EA:13:72:9C:9A:0F:B8:2C:51:D1:E1:86:87:41:CF:71:07:C0
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A5CFC9389C4AEEE7285C07980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e2c11ea1-c423-35e7-8e41-3c3b9b7542cd.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     54113
IP address blocks:        140.248.220.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:93:89:c4:ae:ee:72:85:c0:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=490aac90-2e7d-4c1f-93de-dacbd523d917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:df:cc:2f:c5:51:51:99:c5:f1:74:46:75:d5:
                    38:07:04:bf:ef:84:77:a3:aa:1b:9f:32:e9:4e:87:
                    0d:32:59:53:ca:67:fb:a5:82:a9:6a:98:20:46:72:
                    a9:72:d8:35:0e:35:1d:5a:24:27:c6:64:46:6a:67:
                    49:3c:93:77:88:4b:14:23:bf:4c:9c:3e:96:64:4d:
                    24:6d:38:87:09:71:c8:ea:f7:72:90:d9:f1:0f:75:
                    e3:ee:e3:82:5c:ac:8d:1e:59:98:7d:0a:a0:76:cf:
                    d1:c0:fe:a9:25:d3:d1:b8:3f:06:cb:c4:90:df:bb:
                    d4:5e:99:0f:9e:3b:fe:8f:c2:49:52:dd:38:34:e6:
                    18:74:06:d9:43:41:cd:d8:70:dd:fb:7a:f6:cd:ac:
                    d0:d0:c2:56:d3:b6:3d:bd:ac:40:65:ed:60:f7:99:
                    5e:35:64:b4:a4:80:ed:63:56:4f:30:e5:d9:8d:cb:
                    d4:46:04:c5:5a:41:6f:43:3c:42:c5:93:17:0d:50:
                    54:e2:fe:4f:01:fd:c6:33:8f:9c:34:06:60:4e:fe:
                    ad:2f:35:cc:1d:75:67:52:e2:17:4a:1a:92:ae:2b:
                    65:f4:1b:a4:a6:ce:bb:ae:ff:3f:63:52:6b:d8:58:
                    57:83:ae:0f:ea:e6:2c:d4:7a:56:5d:83:8d:46:97:
                    76:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:16:EA:13:72:9C:9A:0F:B8:2C:51:D1:E1:86:87:41:CF:71:07:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e2c11ea1-c423-35e7-8e41-3c3b9b7542cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.220.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ec:7e:58:ed:fa:57:b9:bc:e1:a7:0d:23:73:8c:16:10:90:
         79:31:fd:af:50:2c:a6:bc:dc:cb:f1:d4:aa:96:f2:85:70:84:
         fd:eb:5b:16:1e:88:46:4e:2f:14:da:38:69:c6:9d:d5:0f:33:
         71:f3:64:e7:fb:46:39:78:d4:f0:bf:e2:42:2a:e5:7c:f7:ca:
         8a:b2:a9:7d:1b:de:a0:8c:d1:42:ff:b3:98:4b:e4:41:98:44:
         03:4c:79:6d:df:f4:33:ef:76:da:e0:82:83:d4:ca:c2:1f:e7:
         9f:68:90:fe:b0:8f:56:78:ee:df:23:85:f9:02:13:19:2d:e5:
         5b:9d:8e:70:2c:73:92:2b:8a:77:9f:e4:41:c9:20:cb:3a:ad:
         1f:cc:ca:e0:ca:cb:dd:2c:4a:35:8a:f1:c4:c0:cb:d1:4b:20:
         f0:36:26:13:a2:42:e0:fd:70:66:d5:c3:92:b1:47:a5:20:c1:
         0f:ff:24:e9:ee:f7:f3:a8:30:b5:c6:d1:c8:26:0f:c3:b6:ae:
         38:d8:4b:25:22:74:0c:db:23:3e:0b:73:bc:13:f4:03:51:b8:
         71:1e:42:0e:e1:d8:5f:4b:ef:77:75:33:52:bb:e1:c5:0f:ae:
         e8:1c:20:a4:57:de:4a:3b:a3:2b:74:a4:45:f2:9a:36:62:07:
         29:7a:c0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:00:10 2025 by rpki-client