Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/98c25ee8-246b-3b15-bdc8-29c673658cbf.roa
File:                     98c25ee8-246b-3b15-bdc8-29c673658cbf.roa (raw, json)
Hash identifier:          EbWpbo/Ocaaame3LM6CGknDLv+8FnPKFj1b73N9aaCs=
Subject key identifier:   21:2E:45:9D:6B:9D:C9:A4:40:4C:92:9C:14:5A:A0:EB:11:FD:C9:8B
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD40786DED95E643C8F52CE40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/98c25ee8-246b-3b15-bdc8-29c673658cbf.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        140.248.253.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:86:de:d9:5e:64:3c:8f:52:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=6d00e524-3e83-44c0-898e-9aa390acf092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:08:e0:c1:03:e5:22:b5:2b:3c:65:e7:28:
                    23:c4:4d:11:ef:b4:3c:00:78:0c:09:85:49:94:f7:
                    03:81:92:0c:78:73:ca:1b:57:b3:40:8d:35:23:4f:
                    5a:99:6c:ff:9d:76:90:fc:bc:ea:92:50:27:27:39:
                    c2:4f:c7:dd:00:d0:58:4f:b6:78:71:46:e5:16:80:
                    f7:0d:2a:86:aa:3e:46:96:37:02:6e:ea:1d:9e:d8:
                    23:e3:d3:df:2f:74:09:ce:99:65:93:8d:2d:f4:ff:
                    2e:67:df:24:9a:dc:5a:79:d5:da:d8:d4:7e:bb:80:
                    18:9a:1a:7d:ce:21:ff:84:c1:cf:0c:19:08:ed:96:
                    21:db:63:13:c7:4b:f0:9b:82:2e:c7:a3:d8:c0:2b:
                    53:74:11:b6:8a:02:df:0b:31:cb:64:89:0c:1b:df:
                    38:2e:45:19:21:8a:52:d5:28:f5:02:cd:04:64:c8:
                    f5:eb:4a:2f:6e:48:1c:3e:4e:fb:f4:28:d9:12:f1:
                    00:94:d2:19:84:47:dd:c1:84:b3:82:92:a7:c9:24:
                    87:af:38:eb:32:16:ab:9d:33:80:f8:3c:88:93:1d:
                    13:cd:0d:68:f6:04:00:b9:0f:5f:a6:fe:07:9c:97:
                    b9:d0:3e:af:97:98:e6:8c:0e:95:97:49:53:ac:c8:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2E:45:9D:6B:9D:C9:A4:40:4C:92:9C:14:5A:A0:EB:11:FD:C9:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/98c25ee8-246b-3b15-bdc8-29c673658cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.253.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:a4:1a:d7:1f:48:46:ee:46:33:62:35:06:63:8b:a3:3e:c5:
         12:37:79:63:05:fa:14:7b:04:a8:ea:25:b7:71:7c:8a:8f:02:
         8a:77:15:22:39:e9:26:11:2f:49:ba:ef:94:08:73:78:c4:ee:
         d7:e9:67:f9:8a:8a:08:6a:c5:f9:55:d3:73:c9:a6:d8:93:ed:
         12:c6:ba:a7:83:88:f2:c5:7f:1c:b1:6b:90:3e:d2:0b:b7:f2:
         b9:df:e9:89:07:10:48:06:fe:a0:53:1e:f0:c9:c1:8f:1e:7c:
         50:ef:90:2d:bf:72:fc:f3:6c:72:4c:80:c5:05:74:0f:8b:89:
         3b:f2:39:2a:57:d1:b8:ae:5a:77:20:05:f9:18:4f:4c:52:73:
         b1:37:56:07:ae:41:3f:2c:a0:ab:9b:08:32:8b:f4:83:83:f9:
         5b:77:85:c1:1a:18:37:a1:36:6f:fe:7c:92:fc:e8:69:69:a2:
         e4:d7:59:f2:d0:f7:6d:b0:8f:44:7a:41:77:7b:8b:d6:91:48:
         6d:6d:06:c6:36:33:fd:83:45:5f:4c:28:83:25:51:6a:12:38:
         93:e2:04:86:fd:21:90:aa:74:93:48:5c:63:cb:69:f2:53:45:
         fa:2f:af:70:bd:69:ac:e5:40:f5:9d:09:17:5a:b3:b3:76:ae:
         68:b3:cd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:30:18 2026 by rpki-client