Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/839e4c27-acae-3a87-86e6-cc37e34e9dc5.roa
File:                     839e4c27-acae-3a87-86e6-cc37e34e9dc5.roa (raw, json)
Hash identifier:          eCGNctUT1FC5CbbydVxVsrHR+9ZQO/g8nyamJ0MyMfw=
Subject key identifier:   EF:DF:81:F3:FB:46:7D:B0:03:47:82:D1:76:40:45:F3:C6:03:0B:2C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD40790957A288E1CAE81B0C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/839e4c27-acae-3a87-86e6-cc37e34e9dc5.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        140.248.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:90:95:7a:28:8e:1c:ae:81:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=e5999853-e8c5-4a6b-91bc-112050ea4bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:75:f8:d8:18:10:3a:a6:43:64:d4:6a:c5:
                    90:13:0d:f5:35:e7:b3:9d:94:dc:11:54:10:fd:44:
                    a5:28:bc:15:ab:3c:3c:3d:06:54:61:15:03:2d:e4:
                    25:13:06:a3:83:4e:ae:17:1c:39:1c:1d:da:c6:a3:
                    fc:9f:6f:8c:9f:93:2c:82:85:8c:37:dd:bd:60:e5:
                    45:cb:c9:8e:ab:99:ee:c0:56:eb:c3:3a:34:6d:fb:
                    9b:ae:4f:f7:59:f4:2a:bf:42:00:a4:33:a8:18:f6:
                    a8:a3:fe:0a:1b:3b:37:15:ba:86:e4:02:dd:a3:e3:
                    d4:2e:f7:0b:9a:3a:4f:c7:3e:1c:ed:60:c0:a4:93:
                    81:94:69:06:34:d7:4a:e1:d4:7e:1c:39:58:26:97:
                    e5:ab:7f:43:78:4c:af:49:c6:c6:dc:46:db:62:56:
                    16:fd:6a:89:01:30:b0:02:a7:0e:9e:96:f8:b0:3f:
                    c8:6a:44:e0:a2:2b:30:00:a3:c9:a5:81:df:bb:da:
                    ca:00:50:75:e7:b8:f3:a6:68:48:bf:b2:df:19:c5:
                    03:cb:00:b0:d5:7f:e5:9e:0b:b0:08:fb:b0:bb:f4:
                    78:2c:b8:db:dc:26:2b:81:05:ac:65:7a:8c:b4:3d:
                    8a:fe:aa:ca:ba:59:a5:9f:65:c6:e7:bd:1d:dd:00:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DF:81:F3:FB:46:7D:B0:03:47:82:D1:76:40:45:F3:C6:03:0B:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/839e4c27-acae-3a87-86e6-cc37e34e9dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a3:4f:db:04:b9:71:6e:39:53:e8:69:0b:ae:f3:c2:e8:fd:
         1a:52:0d:fc:d3:1e:cc:52:03:75:7b:59:63:1c:ac:ec:a2:d7:
         c2:37:cf:22:e5:32:2f:e2:be:e8:7a:0b:ba:fe:71:3a:23:cc:
         20:0c:64:ab:ce:08:76:3c:2c:4a:da:5a:09:44:c7:a8:65:f5:
         a0:96:52:63:28:fa:70:0e:6f:ae:3d:17:ee:04:a5:76:5e:bb:
         36:d9:1e:f1:a5:a7:54:a6:d8:26:31:bc:60:01:a8:0a:2d:6a:
         ce:e1:9d:62:1e:22:e7:04:f2:30:32:9f:ba:9d:fb:ed:1b:05:
         c5:6f:e7:3c:e1:76:0a:28:9f:ee:55:e5:ca:2e:28:07:cb:cc:
         7b:71:89:3e:e1:81:4e:71:cb:90:da:24:3b:62:d5:99:dc:0d:
         96:1e:22:63:50:23:75:eb:2c:d0:77:5e:69:db:b3:ee:ce:87:
         8e:5a:20:99:06:92:1c:3b:c6:ad:7a:ed:80:5a:05:6c:ee:e7:
         22:4d:49:07:d3:7d:a5:a4:83:c0:4f:34:d7:0b:e6:38:2a:3c:
         52:ea:de:33:08:63:81:61:c8:ff:68:1a:f3:c4:4e:5c:32:4f:
         30:b1:ad:16:9f:48:ad:28:78:f2:aa:d1:7a:ca:5d:e6:31:8c:
         45:84:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:14 2026 by rpki-client