Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/879c81c5-641b-39e4-9b87-97282e6ed895.roa
File:                     879c81c5-641b-39e4-9b87-97282e6ed895.roa (raw, json)
Hash identifier:          xQhGPslM5sFrfC0EMqRkCYslJhElDAytq8vYEhYu1o4=
Subject key identifier:   A4:BD:18:3C:E2:55:24:00:0F:14:CE:87:8D:CA:20:F9:3C:90:8B:34
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CE3621994AC035DB562B5D980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/879c81c5-641b-39e4-9b87-97282e6ed895.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     54113
IP address blocks:        140.248.223.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:19:94:ac:03:5d:b5:62:b5:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=e83dcecd-8961-438f-bdf9-6a6374a58f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ba:3e:79:62:1b:24:38:d2:a9:0b:7b:30:d1:
                    08:03:3f:16:21:11:6d:9d:fd:78:1d:ae:4f:b7:76:
                    43:5b:89:40:1c:60:3f:de:ed:e4:40:1b:0b:24:f5:
                    bf:51:25:b9:1c:d7:eb:ae:0d:25:1b:b7:8b:d0:56:
                    e5:6e:4b:f2:f2:29:e3:50:fc:8e:09:91:ac:af:f4:
                    ab:5e:98:44:da:1f:6c:0a:cb:86:a6:5a:d6:c0:3c:
                    c9:97:b4:7e:ac:e3:3f:ea:d2:1b:68:06:fe:8b:a9:
                    ad:2b:46:59:94:18:17:9f:b5:cc:ab:9a:dc:ca:a2:
                    ea:5c:2b:30:6e:18:64:35:66:a9:08:87:87:f4:94:
                    43:53:e3:f3:39:14:eb:86:71:45:67:d9:64:ba:29:
                    98:b0:48:a7:9b:3f:c6:d3:e7:5f:78:5d:e9:b9:00:
                    e0:55:07:47:05:5e:0b:0c:73:0d:53:6e:9d:5e:27:
                    67:6f:2a:b8:c6:5a:0f:4c:4b:d8:44:04:c8:93:db:
                    77:53:f5:5c:b5:b4:04:e8:28:8c:70:cd:db:29:dc:
                    e4:6d:1a:72:bf:c4:e2:90:6c:8f:ae:13:f4:b2:fc:
                    cc:a1:5c:04:9e:b8:37:c7:fa:83:2f:1c:34:5b:b5:
                    fc:4b:a9:fc:44:f9:33:d4:fa:a6:c5:5d:b0:77:1d:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BD:18:3C:E2:55:24:00:0F:14:CE:87:8D:CA:20:F9:3C:90:8B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/879c81c5-641b-39e4-9b87-97282e6ed895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.223.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:66:35:41:30:41:fe:1d:83:8c:1c:17:6a:86:44:ac:6b:10:
         2e:6d:9a:13:7b:84:26:d1:b0:d2:0c:e2:31:5d:a1:bf:14:65:
         d9:eb:2c:94:36:d3:4a:81:d8:62:8d:68:5a:31:3d:82:c6:e8:
         12:f0:c3:13:21:fc:6b:d9:fd:c1:ba:be:7d:20:96:b8:8b:54:
         5d:73:dc:80:fc:24:cc:31:2d:15:c6:ff:fa:d1:64:39:19:31:
         30:d9:cc:bd:29:ba:0e:55:47:09:b8:0b:8d:71:1b:d2:8f:a2:
         da:43:0b:97:11:0e:75:f5:49:8f:56:98:d0:d9:a6:41:8e:a3:
         ba:4b:a8:a8:df:40:2f:9f:5c:07:2f:bd:55:cf:1f:96:4e:14:
         93:04:fe:62:b2:81:56:55:ba:bf:de:b1:14:52:42:2d:fb:d7:
         76:c5:2c:35:60:ce:71:f2:1b:0e:25:d6:01:90:a3:4c:ca:ae:
         81:80:ba:fa:c9:95:8e:59:9f:77:8b:aa:3f:e5:e6:bd:40:d6:
         9f:17:8e:cb:2f:b9:d8:02:2b:ee:65:f3:5e:fb:4b:9e:41:9d:
         23:3c:e9:3d:88:5f:97:56:f0:68:9d:6b:34:0b:26:47:f5:9c:
         54:22:03:c3:a4:c9:f1:f8:df:3d:a6:22:12:53:0d:4f:06:a6:
         38:9f:c8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:51:58 2026 by rpki-client