Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/678288a1-08e1-387f-8902-46b21f84d113.roa
File:                     678288a1-08e1-387f-8902-46b21f84d113.roa (raw, json)
Hash identifier:          OCdEp0A8euzOwa0nrYRPgdea9G3cu47yLErQA9QqCTI=
Subject key identifier:   2A:AE:AD:49:BE:82:92:38:8D:44:38:3A:12:EF:44:FD:9C:C7:FE:6E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD4078A5A9B478F0B42971D40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/678288a1-08e1-387f-8902-46b21f84d113.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        140.248.247.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:8a:5a:9b:47:8f:0b:42:97:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=368bb43d-906b-49a5-8c4c-b30ee900b505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:15:d7:76:d6:95:72:d3:88:66:2d:be:50:
                    80:c9:12:53:76:f2:bf:b0:c2:2b:12:a6:f3:0c:1b:
                    03:f1:db:2d:8b:b0:4d:a7:a2:53:16:d9:92:9b:b0:
                    4b:be:fe:2d:ec:0f:38:75:48:b9:f8:72:31:00:a7:
                    7f:08:27:6b:d9:a9:37:b6:cc:ef:d8:16:7a:d7:aa:
                    56:cb:c6:76:a2:16:1e:a6:6d:4f:24:37:3f:6f:be:
                    68:fd:7f:1d:4d:3d:fe:8b:8c:50:46:db:cb:7d:6d:
                    2f:b4:88:b0:05:1d:4a:85:82:49:15:22:b5:fc:a1:
                    3c:7b:a5:cf:65:ed:af:a5:66:04:ee:9b:fa:73:ec:
                    5e:4e:70:4d:12:71:26:5b:5b:6e:bf:62:e7:d4:92:
                    41:ea:33:20:cd:44:0b:56:b0:14:c8:95:e1:e9:27:
                    0a:8b:f1:df:f3:14:fb:00:3d:67:34:7a:37:c7:48:
                    9f:7c:18:39:69:e5:d3:f7:f7:dd:e8:7d:03:fe:66:
                    45:bb:c1:5c:51:0d:8d:d1:78:36:f8:d3:75:a0:fb:
                    14:8f:c6:b2:8b:9b:67:01:61:ca:af:70:c3:8f:78:
                    2d:92:f7:d1:00:f5:0f:9e:cc:50:11:ed:37:69:4f:
                    f9:1a:4a:12:d4:66:5c:fd:99:27:e9:99:39:8a:46:
                    b8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AE:AD:49:BE:82:92:38:8D:44:38:3A:12:EF:44:FD:9C:C7:FE:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/678288a1-08e1-387f-8902-46b21f84d113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.247.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f1:5a:92:f5:cf:d5:c5:ed:11:ff:fa:c7:f7:8a:fb:85:c3:
         8d:51:9a:5e:bb:fe:43:95:a5:25:28:7e:18:ed:8a:b8:01:17:
         d6:01:8e:a5:9d:65:01:44:0d:5b:15:7f:cf:4a:ec:a4:29:e5:
         08:4f:a9:5f:b8:4b:6c:21:57:30:10:0b:32:61:be:92:86:ec:
         52:f6:9d:54:b2:a0:76:f5:13:e9:d3:a9:29:ac:10:62:b9:44:
         2a:82:ae:bd:6b:20:fd:1c:31:00:b9:23:6e:9c:46:ef:b6:fd:
         d6:b0:44:1d:8a:24:e2:22:0b:d9:32:1d:31:03:9f:fe:d5:28:
         f2:51:2e:95:56:57:c0:6b:20:27:e0:7c:21:d0:ef:8d:1b:9c:
         94:8b:c7:e6:ad:f2:a0:91:3a:5e:fa:fc:76:47:2e:1f:ec:e6:
         bc:d8:b8:0e:68:5c:13:ae:3a:fc:df:23:b5:65:4e:b7:e3:42:
         48:31:51:ea:05:35:76:09:9d:db:20:75:40:e4:00:52:1c:df:
         fe:0c:e3:ec:84:b1:b4:f4:0b:c9:09:c8:0e:e8:06:65:a6:35:
         43:fc:42:01:8a:9e:b8:d8:23:93:30:c8:b6:66:37:2e:66:28:
         27:06:6c:dc:95:dc:22:50:35:2c:9e:79:07:ed:21:c4:8e:1f:
         29:97:81:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:40 2026 by rpki-client