Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ba1abe5a-bace-3910-bd56-9ccf57414412.roa
File:                     ba1abe5a-bace-3910-bd56-9ccf57414412.roa (raw, json)
Hash identifier:          W6u5bm7R4xK1zGEZ6moGFc8wi2XO9inR4YLXHzPubcA=
Subject key identifier:   8B:CF:6E:7C:B0:B4:35:F7:79:2A:12:C9:36:18:A4:1B:A7:E0:58:98
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F2D87E41987A2040412385580
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ba1abe5a-bace-3910-bd56-9ccf57414412.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     54113
IP address blocks:        140.248.118.3/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:e4:19:87:a2:04:04:12:38:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=fe7da700-d8aa-4fee-8c5d-a3e1898fcc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:ab:71:36:84:cc:db:d2:70:a2:6c:fd:ec:
                    54:cb:70:bf:27:8e:19:81:dc:9c:e3:a7:46:89:bb:
                    a1:19:be:f9:5c:4b:00:78:fe:ae:c6:c3:11:04:8f:
                    fe:2c:77:75:15:96:ac:fd:46:4a:70:27:5f:b0:52:
                    30:ad:c2:f3:c4:6b:80:f2:68:8c:2b:cf:39:67:f1:
                    95:75:55:e8:f5:21:ee:e3:32:68:10:bd:76:eb:7e:
                    7b:43:d5:27:2f:d3:35:5a:3f:61:90:57:70:cd:7c:
                    d4:ca:5f:0d:df:1e:e8:e4:05:9e:1b:5f:88:55:6a:
                    50:fb:d2:34:b0:82:ae:4a:99:3a:18:3b:fa:c9:02:
                    a3:f1:8c:89:25:9b:ce:0b:ed:98:24:84:02:36:3b:
                    1e:34:12:5a:34:b0:74:39:eb:ef:aa:12:ed:9a:38:
                    cf:3f:06:87:77:a6:02:c6:30:af:02:2f:44:a7:10:
                    4c:4f:ee:1a:4e:37:82:a2:25:a2:de:90:6d:4e:03:
                    1f:0d:39:8b:ac:68:b0:ef:c9:26:d8:74:bd:ec:cc:
                    05:42:08:a8:b0:94:c5:52:d3:6b:d7:ec:08:47:64:
                    e1:99:4f:00:4b:ab:17:dc:8c:34:d1:43:2b:26:c2:
                    15:59:aa:fd:1a:71:61:35:87:49:7c:57:df:f2:c3:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CF:6E:7C:B0:B4:35:F7:79:2A:12:C9:36:18:A4:1B:A7:E0:58:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ba1abe5a-bace-3910-bd56-9ccf57414412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.118.3/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e6:94:9f:7b:5d:e4:e6:1e:e9:b7:87:24:e2:35:9f:c4:a3:
         54:14:a9:cb:b1:7c:59:cb:7f:f5:3e:b0:92:8d:56:06:e1:dd:
         78:79:d2:4d:fb:6f:fa:fe:5e:b7:37:8e:e3:a3:7d:d4:7f:2b:
         ea:9a:c8:c8:c8:a1:bf:f0:53:f1:39:c2:a3:88:0c:06:1b:99:
         03:9a:b9:37:c6:9d:16:bb:ea:42:ff:b0:bc:53:dc:01:7f:4d:
         36:64:e4:e9:57:b4:1d:56:4c:b4:02:25:db:a0:27:db:89:e0:
         c7:13:39:7a:e4:1e:41:21:0c:4f:36:37:8c:39:9d:eb:9f:83:
         78:2e:32:67:17:b0:e6:25:b7:0a:c5:78:99:8c:1c:ca:6c:55:
         98:68:1e:6f:64:5d:ee:2b:e5:d4:2d:5d:ff:cf:1b:77:02:a1:
         76:d6:9e:a9:1d:c8:6b:51:63:a0:61:1c:33:21:68:a8:29:8a:
         f2:6e:3e:e2:77:de:e8:0f:79:18:40:0e:78:d7:fb:6c:0f:52:
         eb:58:f9:ab:e1:54:d0:68:2c:7b:9e:7b:e7:16:00:3e:97:98:
         98:9b:60:ce:4b:60:c8:37:05:d0:c6:42:9a:fe:1a:5e:34:df:
         ae:0e:fd:7f:0b:43:e6:6a:79:2a:fd:4c:67:4c:b3:a2:34:92:
         be:87:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 09:36:37 2026 by rpki-client