Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/94ca9e1d-d107-3d5c-babd-8dfeb8529aa7.roa
File:                     94ca9e1d-d107-3d5c-babd-8dfeb8529aa7.roa (raw, json)
Hash identifier:          B4FBqrVYVn7MwywJt01z4MNNsQYSUT94ngN6je4hw4I=
Subject key identifier:   64:28:B1:1E:1C:A8:1F:FE:27:46:8D:9E:F2:FF:E0:50:87:A1:3A:2E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584D5024F77DA08B694999B53D80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/94ca9e1d-d107-3d5c-babd-8dfeb8529aa7.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     54113
IP address blocks:        140.248.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:f7:7d:a0:8b:69:49:99:b5:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=1cf431ee-cdb9-44b5-b4c6-5f2627781f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a5:a5:5b:ff:fe:a7:ee:67:87:f5:fa:e3:43:
                    a1:40:9f:2a:a2:08:e3:3a:a6:cb:53:be:a0:36:40:
                    00:a3:22:12:53:e9:18:27:d4:80:fa:29:23:a4:cc:
                    6b:b5:b9:42:8f:ed:b8:1b:50:6c:ff:e4:56:da:1e:
                    7a:e9:fd:f0:94:1c:0b:e3:5b:f3:29:b3:c0:97:48:
                    8b:91:1f:88:dd:3e:8f:e8:18:69:57:50:70:32:cc:
                    43:e8:9b:f6:d9:c2:fd:87:3d:c1:a8:e8:92:93:cc:
                    30:07:2c:46:f4:8d:ed:d9:01:68:36:1f:83:fd:10:
                    7b:3d:4c:23:5e:91:01:39:8e:0e:ff:e6:ac:31:2a:
                    07:3d:55:a6:75:6c:db:bb:88:26:52:70:0b:80:ed:
                    96:f7:dd:0f:bb:ab:a0:11:9e:e3:5c:eb:3f:e9:f5:
                    09:24:42:e0:57:49:6a:2f:10:f8:53:28:70:ff:78:
                    9f:45:c8:43:48:b6:37:a8:54:37:15:81:30:a0:89:
                    fc:a9:07:ba:d1:43:47:dc:0d:e5:52:02:c6:84:12:
                    f9:22:01:31:4e:d3:c5:86:36:22:cc:d6:30:d1:bb:
                    50:4a:af:80:48:b4:ae:fa:e9:fe:ce:3c:4d:ae:70:
                    2a:f5:d9:40:80:4d:ec:57:a5:79:c1:27:61:c8:c5:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:28:B1:1E:1C:A8:1F:FE:27:46:8D:9E:F2:FF:E0:50:87:A1:3A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/94ca9e1d-d107-3d5c-babd-8dfeb8529aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a4:8e:82:80:09:fe:ce:a1:42:98:bf:51:36:81:f0:f0:84:
         c6:eb:bd:15:26:e0:3b:f0:31:99:a5:01:89:b7:c8:71:66:e2:
         c0:31:86:df:93:f7:45:94:03:d4:16:d3:63:6e:b9:38:04:cb:
         5c:0c:99:72:56:93:35:ce:f6:84:3b:9f:50:23:b3:2b:ed:f0:
         41:3a:e3:2f:89:b8:b7:95:2d:cc:8f:ae:65:ef:c0:ad:cf:a1:
         e6:de:ec:e3:2b:c5:72:8c:6b:6b:de:ce:b0:f1:3d:a4:ca:aa:
         e5:0f:94:f8:f3:b2:ec:90:e0:d7:53:4f:2c:7a:6d:12:17:77:
         cd:90:6b:5b:d8:2b:ed:d5:f4:e0:ae:e0:ae:b1:d2:df:92:3a:
         18:85:4f:b4:7d:7b:38:35:77:db:c1:ae:b1:e9:2e:8e:6b:df:
         43:b3:39:53:c4:56:f3:be:c0:71:1b:ad:40:cf:12:2f:ad:8d:
         38:5a:17:42:6c:3d:2a:c7:08:59:4e:36:d0:f6:0b:a5:17:81:
         db:f0:b5:ad:cc:3d:36:d3:26:48:f3:0a:40:6a:59:14:73:ac:
         ca:81:ef:27:8f:c8:e8:8a:8b:b2:6c:5e:d3:ee:ec:bb:58:6d:
         e8:4f:89:ab:44:ce:9b:7e:77:db:f1:a9:d1:b2:20:37:e8:ea:
         66:13:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:41 2026 by rpki-client