Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1d23a43e-d959-3743-84e6-7e59f8fd696d.roa
File:                     1d23a43e-d959-3743-84e6-7e59f8fd696d.roa (raw, json)
Hash identifier:          mcHN+1O76C9F6HNohaX3fIvq+i1497wzTeaXIaQNUFo=
Subject key identifier:   F2:C2:F5:1F:C3:D3:F8:18:9E:DB:30:93:45:C8:4E:9A:31:71:09:72
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E1B7993F6EA90C2ECD767356C
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1d23a43e-d959-3743-84e6-7e59f8fd696d.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     54113
IP address blocks:        140.248.105.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:93:f6:ea:90:c2:ec:d7:67:35:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=94fea188-c105-40af-8183-e0d5ec81754a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5f:d8:4a:25:1a:85:cd:4a:fd:61:8a:45:1b:
                    23:6f:b6:ad:dd:c2:1d:41:00:c1:ca:fe:1b:2e:be:
                    d5:45:2a:0f:de:e1:96:d7:4f:9c:90:1e:1f:f8:d3:
                    fb:0a:aa:85:f1:b8:00:c8:47:0c:33:ed:d5:9d:39:
                    11:a9:37:91:ca:76:8d:90:03:f1:5f:8e:6d:c7:86:
                    75:9a:e0:00:c5:58:3f:8a:75:58:e9:bf:ae:00:63:
                    29:9f:8f:cc:bf:c3:32:11:51:a0:9b:10:88:3f:cc:
                    62:00:a5:77:ce:6e:6e:ea:41:4f:ac:d9:8f:6d:58:
                    0e:1e:38:b7:6b:ad:4d:fe:11:91:59:66:22:e1:0d:
                    b0:8c:7a:42:68:07:83:ca:0a:66:dc:43:4b:8a:32:
                    ab:cd:05:28:94:09:33:85:3c:cd:7b:f3:07:f3:29:
                    41:4f:49:c1:a8:a3:e5:fd:9f:b0:26:22:f0:f7:fd:
                    fd:58:72:67:86:89:ed:78:3c:1e:10:f5:eb:a8:75:
                    33:38:69:a8:41:3d:d5:47:3b:87:46:d7:44:0a:c0:
                    11:15:d8:91:74:f5:8a:7d:23:ff:01:e5:ae:79:70:
                    02:1d:50:b9:d7:44:f1:1b:f8:74:2f:5f:c7:5b:aa:
                    05:ee:4e:b3:96:5c:a0:2b:a1:4b:3e:c6:bb:78:dd:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C2:F5:1F:C3:D3:F8:18:9E:DB:30:93:45:C8:4E:9A:31:71:09:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1d23a43e-d959-3743-84e6-7e59f8fd696d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.105.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:fe:b3:5b:4c:d1:68:3a:ab:4b:23:5b:e5:56:fa:54:36:36:
         5f:94:00:d0:5a:18:36:ef:9a:f9:e9:00:6a:8b:1a:0f:02:7f:
         d3:84:5a:2a:89:26:f5:9c:4f:52:1c:3e:5b:37:f3:2b:42:2e:
         3b:91:07:21:21:a8:77:3f:fb:36:4f:a1:cb:3f:dc:71:49:4b:
         52:1a:c3:05:02:4a:ef:48:b0:a2:20:67:cf:8e:28:e6:31:55:
         f2:38:00:a1:89:bb:9b:3d:60:f2:7d:46:d0:32:cb:82:91:51:
         fb:63:69:0f:37:46:06:a3:85:28:14:e7:e4:f8:fe:20:e8:07:
         19:6e:65:27:8f:93:72:8c:83:0c:0c:97:47:81:89:90:00:65:
         a9:ee:9c:71:6f:1a:b2:bd:ae:9c:84:d4:15:85:71:0c:5a:e0:
         6d:63:e7:65:75:4b:32:1b:9b:e4:92:d5:dd:01:87:d8:65:0b:
         14:b0:dc:bf:43:dd:4c:59:11:46:05:99:85:61:33:ce:f0:56:
         43:4a:9d:33:71:0a:78:93:ee:8e:1e:5c:f3:30:dd:3b:b4:7f:
         2a:2c:3d:55:b3:43:62:38:b8:c5:78:73:cc:28:20:a3:e1:bd:
         66:aa:77:a3:95:c9:1b:78:a3:68:75:80:27:20:db:2a:2a:f3:
         b7:da:34:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:04:04 2026 by rpki-client