Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/12677fbc-b204-3ad1-9663-2ab9084c19fa.roa
File:                     12677fbc-b204-3ad1-9663-2ab9084c19fa.roa (raw, json)
Hash identifier:          6AA04jeCZy7LHTn39l8UCAyB4WmHC2ZPmLpZnGXbu2o=
Subject key identifier:   27:2A:A8:5F:F1:6F:43:A4:F4:56:3F:D8:CF:D1:02:78:73:F1:39:F5
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD40788D56630B779E7258D80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/12677fbc-b204-3ad1-9663-2ab9084c19fa.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        140.248.208.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:88:d5:66:30:b7:79:e7:25:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=92582169-313a-4f7d-ac36-b3532d2089b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:fa:c0:2f:47:62:cf:0f:86:78:b9:e5:92:
                    c6:60:94:27:c0:fb:43:11:2e:a2:95:3c:4f:4e:ec:
                    a6:82:dd:45:7c:ff:5d:bc:03:27:67:c5:a1:2f:c2:
                    5a:ea:fd:38:1d:65:3c:22:17:c9:02:7f:d2:7e:39:
                    ea:05:86:73:61:fe:30:e5:ce:e6:63:e0:76:3c:8c:
                    4a:48:e7:b6:51:1c:9a:d7:10:80:2d:ac:82:70:b5:
                    cb:95:39:66:10:be:52:05:8a:f5:a1:09:37:76:ce:
                    b7:06:52:aa:06:93:3a:03:03:e0:7d:27:78:e7:ad:
                    64:4f:b5:ff:d1:a5:ac:ae:e1:21:e7:7d:04:e4:b8:
                    f6:8d:4b:bb:a0:38:c4:64:d4:d0:b6:a4:a2:f0:6f:
                    64:c1:bd:a7:b8:37:89:25:d1:a8:2d:98:4f:18:f0:
                    f6:45:b3:4b:60:28:5c:d4:95:02:2d:c3:f5:ae:cc:
                    7f:60:79:2c:89:5d:b9:88:7f:a7:53:95:85:10:16:
                    03:c4:7b:26:15:39:f0:22:c9:68:02:4f:e0:ab:c5:
                    1b:32:cb:24:aa:d6:f8:83:bc:75:6a:81:ee:b2:30:
                    3a:83:e4:fb:a0:70:32:48:05:6b:17:0d:65:64:e3:
                    b3:12:e5:f3:32:15:6d:29:51:4f:e5:f6:b5:54:35:
                    4a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2A:A8:5F:F1:6F:43:A4:F4:56:3F:D8:CF:D1:02:78:73:F1:39:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/12677fbc-b204-3ad1-9663-2ab9084c19fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.208.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:88:40:dc:97:8f:24:03:39:a3:64:a6:65:5d:21:e8:dd:cb:
         f2:0d:96:d3:d9:1e:d7:f5:9e:33:bf:28:44:09:26:e2:45:4d:
         cc:bf:80:11:4c:3f:f3:b5:0d:a1:73:02:cb:81:ef:b5:4f:b0:
         0c:b5:56:01:da:d1:67:98:bb:a1:28:9b:ff:82:e2:54:c7:b1:
         e9:bc:3b:9f:f7:35:2e:da:41:12:3d:e8:77:2b:c5:7d:79:a8:
         c4:54:1e:96:db:82:a6:d4:9b:cf:9e:de:ec:ea:93:f1:e6:0a:
         36:28:ca:25:bd:fb:9a:34:83:2f:8d:c5:0c:c6:a7:b3:17:9b:
         12:e2:27:56:52:9d:84:a5:2c:48:68:5f:ab:05:a8:d9:d9:80:
         c3:e9:51:c9:ef:c4:a0:8f:9a:b1:4e:76:22:1a:5e:30:c2:cf:
         4a:49:cc:1a:ad:03:b2:ae:ea:89:a1:50:6e:ad:a8:57:16:09:
         a5:f0:a4:9d:f1:a2:fc:3f:72:3f:32:27:14:ab:9d:7b:e0:2d:
         76:08:e7:11:b6:4e:b9:56:b8:a2:f5:4a:5a:6c:1a:91:5a:df:
         83:bc:f6:5a:20:84:37:46:d8:71:42:c4:75:c1:fd:40:d1:6d:
         a8:6b:6b:87:d3:01:e7:75:4b:ef:c1:43:b5:75:a1:06:a9:ab:
         d3:bb:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:01 2026 by rpki-client