Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/424bc481-a3d9-3ac4-a1cf-f289a49512f0.roa
File:                     424bc481-a3d9-3ac4-a1cf-f289a49512f0.roa (raw, json)
Hash identifier:          1IaZsIP/YT4WURxzaH81fYQaqkcv+xLIbvb4lCgJ2hs=
Subject key identifier:   0B:9B:B9:41:88:54:9E:28:19:F6:C8:E9:C0:76:61:5A:D2:50:87:25
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD40786D0C5EC37500D229D80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/424bc481-a3d9-3ac4-a1cf-f289a49512f0.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        140.248.247.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:86:d0:c5:ec:37:50:0d:22:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=9f6a28db-cbde-44db-bd6a-08ffd8c8f260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:43:27:8a:f3:ef:f6:1b:ff:13:7c:43:2f:17:
                    2d:9d:84:d2:d8:19:2a:63:62:f7:d4:cb:b0:bd:98:
                    cd:04:cf:d2:bb:99:5a:f0:e3:aa:af:f9:a1:55:29:
                    a4:24:75:b1:66:16:4e:97:94:4e:9b:31:f2:c2:95:
                    9d:9b:50:78:4c:98:ba:e0:af:cd:7c:dd:fa:3e:1c:
                    48:c0:50:a6:24:f5:59:66:09:11:a8:49:0f:ef:32:
                    51:dd:47:89:53:11:e9:fd:fa:d2:32:4c:34:70:2d:
                    d9:5f:22:57:0f:5c:90:f6:b5:75:80:87:6e:24:e2:
                    a8:88:24:ef:c4:d6:af:af:5b:54:95:78:c6:4c:d2:
                    58:b2:4b:e6:43:ee:10:d9:59:56:0e:1e:3e:07:c3:
                    0b:09:c2:5f:4a:e4:43:84:60:54:c7:c0:65:e4:f7:
                    54:bd:8b:df:b3:d2:85:5c:ca:f3:6f:09:29:34:14:
                    de:21:54:61:cb:e0:dc:1d:0a:6f:97:cf:1f:2f:61:
                    47:da:1b:0f:7e:55:27:f3:84:0c:15:68:8e:1e:fa:
                    c9:7b:62:06:26:01:b0:40:7e:74:46:32:16:31:93:
                    93:3c:d0:d1:97:76:f1:14:4f:ff:ba:f3:d3:f8:69:
                    d3:74:74:0e:47:4e:34:2e:b3:d2:80:79:ae:98:ff:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9B:B9:41:88:54:9E:28:19:F6:C8:E9:C0:76:61:5A:D2:50:87:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/424bc481-a3d9-3ac4-a1cf-f289a49512f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.247.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a9:39:48:40:76:8e:70:f9:19:e1:9b:f6:01:ed:b8:69:76:
         f1:b5:34:7f:59:29:43:9a:3e:fa:84:85:34:81:2e:ab:45:d7:
         f8:79:40:2d:a5:b1:36:c5:d3:98:de:94:ab:2b:17:3b:03:bc:
         8a:86:0b:a1:28:82:b1:4e:d6:f4:fb:80:0b:b4:1e:91:d1:99:
         e6:be:b1:82:1d:69:83:55:cd:9d:bb:d3:18:59:b7:18:44:00:
         c1:2f:9d:41:e0:5c:f9:86:18:35:09:5a:ec:e2:21:68:05:a1:
         d9:ff:ec:19:22:b5:58:43:a9:25:32:7c:c2:1e:55:31:db:b9:
         3c:59:28:59:fc:78:84:45:1b:a5:37:35:49:fc:bb:58:8b:5f:
         7c:53:13:44:61:1d:c1:eb:45:70:67:e9:ab:76:65:ce:9b:fc:
         7e:23:1f:46:0f:f3:57:08:59:94:23:c3:d8:06:aa:03:6f:98:
         b3:86:ed:74:3b:17:96:24:3b:a5:2f:0c:1b:36:30:5f:1f:9a:
         d4:32:56:8b:9e:11:66:e3:79:bf:61:5b:6a:d7:9a:b0:d0:04:
         70:c0:ef:05:60:ad:02:61:49:d6:ad:05:41:3d:1f:e0:78:80:
         b0:a6:38:a3:a7:db:47:3f:60:c0:65:3c:66:5b:32:4a:f5:cc:
         46:7a:56:fe
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzUB4bQxew3UA0inYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
OWY2YTI4ZGItY2JkZS00NGRiLWJkNmEtMDhmZmQ4YzhmMjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkMnivPv9hv/E3xDLxctnYTS2BkqY2L31Muw
vZjNBM/Su5la8OOqr/mhVSmkJHWxZhZOl5ROmzHywpWdm1B4TJi64K/NfN36PhxI
wFCmJPVZZgkRqEkP7zJR3UeJUxHp/frSMkw0cC3ZXyJXD1yQ9rV1gIduJOKoiCTv
xNavr1tUlXjGTNJYskvmQ+4Q2VlWDh4+B8MLCcJfSuRDhGBUx8Bl5PdUvYvfs9KF
XMrzbwkpNBTeIVRhy+DcHQpvl88fL2FH2hsPflUn84QMFWiOHvrJe2IGJgGwQH50
RjIWMZOTPNDRl3bxFE//uvPT+GnTdHQOR040LrPSgHmumP8kdQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAubuUGIVJ4oGfbI6cB2YVrSUIclMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNDI0YmM0ODEtYTNkOS0z
YWM0LWExY2YtZjI4OWE0OTUxMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGjPj3QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCfqTlIQHaOcPkZ4Zv2Ae24aXbxtTR/WSlDmj76hIU0gS6rRdf4eUAt
pbE2xdOY3pSrKxc7A7yKhguhKIKxTtb0+4ALtB6R0ZnmvrGCHWmDVc2du9MYWbcY
RADBL51B4Fz5hhg1CVrs4iFoBaHZ/+wZIrVYQ6klMnzCHlUx27k8WShZ/HiERRul
NzVJ/LtYi198UxNEYR3B60VwZ+mrdmXOm/x+Ix9GD/NXCFmUI8PYBqoDb5izhu10
OxeWJDulLwwbNjBfH5rUMlaLnhFm43m/YVtq15qw0ARwwO8FYK0CYUnWrQVBPR/g
eICwpjijp9tHP2DAZTxmWzJK9cxGelb+
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:12 2026 by rpki-client