Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5888d3ac-a94d-3911-bde4-643e8f09663c.roa
File:                     5888d3ac-a94d-3911-bde4-643e8f09663c.roa (raw, json)
Hash identifier:          ZduLbnc+GpO5Iyn7S2unrrkNCfFfj5NqtI+nvKy7W/k=
Subject key identifier:   B7:EC:01:A3:52:2F:E9:93:99:37:16:9E:A0:E6:85:D3:6C:27:05:48
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD407863C3EF25C752E932C80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5888d3ac-a94d-3911-bde4-643e8f09663c.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        140.248.223.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:86:3c:3e:f2:5c:75:2e:93:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=6846e684-0460-4973-b351-399c1d17aa08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:43:d3:3a:02:6d:84:9b:a2:b5:9e:08:1c:
                    22:8d:cc:88:67:5a:e3:15:a5:ad:af:64:b2:68:9d:
                    7a:36:7d:fd:a5:97:25:66:ca:3c:2a:ba:c0:2d:03:
                    e6:91:6d:3a:c9:7c:de:f8:b9:09:c7:1d:a7:f7:61:
                    ab:f1:b5:af:96:18:6e:db:34:0a:06:47:09:33:18:
                    c2:a8:e7:e7:f3:d0:4b:1c:ff:c4:48:83:01:85:55:
                    79:d8:32:27:ab:a0:46:78:dd:8d:ed:7b:0d:07:44:
                    57:03:e1:46:19:6a:28:c2:fe:cb:46:8e:11:6c:8c:
                    9b:cb:88:e8:7c:34:8a:4a:e7:5c:35:60:4b:63:be:
                    45:10:94:1b:04:49:71:1a:19:fc:67:ae:07:86:9d:
                    58:1d:59:52:71:6b:da:40:71:91:03:ae:9d:69:04:
                    aa:90:2b:f1:cd:d1:50:35:08:f2:81:1e:03:fb:cc:
                    de:db:06:c9:32:01:08:eb:e5:1c:6b:54:8b:53:99:
                    13:86:eb:63:30:a7:b3:51:d3:a1:d0:55:4c:2f:1e:
                    0b:1e:84:6e:b7:a1:8c:69:0c:07:06:4d:9b:49:2b:
                    85:3d:cd:ac:d7:0e:12:0c:c4:51:d5:64:59:1a:f4:
                    69:7c:20:40:a1:d7:48:4f:17:c5:3a:a6:43:49:99:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EC:01:A3:52:2F:E9:93:99:37:16:9E:A0:E6:85:D3:6C:27:05:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5888d3ac-a94d-3911-bde4-643e8f09663c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.223.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:56:a0:12:af:f8:bc:b3:a0:19:9b:8f:35:26:7c:1e:43:
         2b:14:cf:97:7a:46:0f:9f:69:37:b2:0f:7f:32:82:1e:0d:59:
         25:36:78:dc:1e:44:24:97:2f:ad:42:0e:4e:df:71:6d:05:be:
         72:0e:45:07:a5:1a:0a:a4:3a:c6:72:90:c3:83:56:a3:9c:87:
         39:b0:34:04:e2:4f:b7:5d:ac:c6:a5:c4:91:7a:80:52:84:be:
         d4:cb:09:61:b5:b0:1c:3a:34:80:98:98:39:a3:ca:bb:1e:eb:
         f9:fb:64:60:4c:74:49:e9:d4:0d:f6:5a:72:45:18:2a:ba:d6:
         1f:03:53:2f:e4:03:82:8b:35:9b:41:87:ef:7e:26:f9:0d:ce:
         74:64:dd:fa:e8:2c:e7:4d:50:57:0e:66:a2:81:dc:1b:77:3c:
         c3:9f:9c:a4:d4:33:a6:b2:b3:c1:69:0f:99:a4:89:7d:67:34:
         59:b9:8b:3c:99:b6:9f:75:fa:88:85:6c:c9:bc:47:1e:40:c4:
         5a:6e:5e:36:5d:06:cd:b9:9d:d7:73:c4:76:4b:14:57:94:5d:
         81:51:b1:67:5d:2b:e1:7f:51:73:46:3a:b9:e2:cc:99:f9:f6:
         da:80:e1:2b:16:e1:7e:41:20:c4:41:0d:4e:93:46:9c:73:e9:
         85:06:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:19 2026 by rpki-client