Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/42c5f217-6b59-34fd-a68d-300d4884c234.roa
File:                     42c5f217-6b59-34fd-a68d-300d4884c234.roa (raw, json)
Hash identifier:          TqQAWvnfwxBOlOwz4nqGlidGaqIZUTQrc8FX27M01eI=
Subject key identifier:   A5:3C:B7:BE:59:CD:AF:06:D3:3E:B7:45:7C:83:91:90:EA:17:6A:2F
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD40784DA3A21B21C5BA04B80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/42c5f217-6b59-34fd-a68d-300d4884c234.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        140.248.76.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:84:da:3a:21:b2:1c:5b:a0:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=9a6a355c-0097-44ac-be4b-65e367d12444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:31:73:25:a7:33:40:90:33:56:1c:32:c6:
                    6c:21:1a:88:6c:fb:87:10:cf:76:a7:e1:f1:1b:af:
                    dc:d1:08:63:b3:8e:2d:46:99:63:86:7f:3a:e0:3f:
                    6f:4e:bd:43:4b:57:86:88:06:2f:f2:40:f3:c3:32:
                    eb:eb:26:80:02:6e:d0:58:8a:85:f0:19:d8:8b:c7:
                    44:e7:00:3b:19:04:37:06:c7:b8:3d:f4:72:11:0b:
                    03:95:dc:72:16:bb:60:34:d2:f3:65:73:48:19:22:
                    0e:54:65:1c:c7:b2:f1:e6:76:2f:81:c9:92:20:e2:
                    8a:72:a4:98:71:cf:0e:a8:86:51:0f:79:86:ea:e6:
                    96:5d:16:0a:36:2e:c1:9e:11:59:c0:57:6d:e5:96:
                    d6:42:73:99:f4:01:89:84:ca:d5:79:bf:0c:30:cf:
                    03:c6:36:7a:18:bb:33:90:c3:bf:90:94:76:bb:fb:
                    e5:1a:76:1a:96:93:b7:a1:35:79:5f:2c:19:20:62:
                    c8:34:0f:14:bf:6f:7f:f4:40:b8:0f:eb:75:3c:6c:
                    c3:26:93:f3:ae:18:bc:9b:14:5c:79:2e:7b:61:c3:
                    b2:88:c7:6d:c8:ac:83:e7:b0:c1:a7:b4:c2:3d:5e:
                    3f:3b:56:57:0b:ec:3e:0f:12:39:d1:32:96:21:a7:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3C:B7:BE:59:CD:AF:06:D3:3E:B7:45:7C:83:91:90:EA:17:6A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/42c5f217-6b59-34fd-a68d-300d4884c234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.76.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:25:a5:d3:cf:28:25:a7:9c:67:e2:07:90:ae:d1:3f:d8:85:
         29:b4:9d:fb:40:7d:9b:c1:e2:46:cd:8c:7b:37:40:d2:ca:bf:
         40:5c:2d:00:4a:96:77:70:08:76:31:32:6c:51:41:7f:57:d7:
         9e:e5:21:5a:4b:7a:b0:66:21:5c:f8:45:7d:ab:e5:ad:1c:9a:
         c7:24:65:74:12:72:06:08:4b:e7:44:d1:a3:12:da:10:51:a5:
         2a:14:b8:e8:1e:37:8c:89:34:cd:11:92:3a:58:49:b8:a3:09:
         d5:9c:9f:6c:9d:41:07:e3:fe:4e:9c:a9:81:10:25:1a:22:b0:
         36:a2:7f:17:c8:a7:ce:74:d5:4e:2e:a5:ad:b1:eb:7a:9e:fd:
         3c:86:4c:b6:9f:28:c8:0b:ee:67:7e:13:2b:63:0b:95:22:33:
         bd:bb:58:89:bd:56:25:bf:5d:27:fb:de:19:78:49:33:a1:04:
         87:65:24:50:48:2b:51:fe:ac:de:fd:c4:2e:db:f7:df:45:d6:
         20:ae:37:4b:b0:4e:1c:a7:88:bd:36:9b:b2:0a:32:80:b3:23:
         10:bb:dc:b1:af:0c:71:43:a3:57:64:24:c1:78:38:5f:cd:ba:
         36:44:a6:58:e6:7d:ad:cc:58:d2:75:ee:7a:10:03:56:3d:12:
         39:c8:ba:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:21 2026 by rpki-client