Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c4037901-ff6b-3135-ab5f-be7b8cce4d49.roa
File:                     c4037901-ff6b-3135-ab5f-be7b8cce4d49.roa (raw, json)
Hash identifier:          HHnl8d8FkCeiYcj+oWDh2h6nLdMGJaebi4l0Cqe3Wo4=
Subject key identifier:   A5:E2:BB:51:38:C0:46:71:B3:1A:21:D5:A1:BC:B9:E8:C8:0F:33:49
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD4079037B780157A0A902880
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c4037901-ff6b-3135-ab5f-be7b8cce4d49.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        140.248.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:90:37:b7:80:15:7a:0a:90:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=b2d56185-c6c5-48f9-aa64-89aa343b0b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:b7:93:dc:43:fc:1d:cb:21:16:41:0e:f6:
                    8b:e9:0c:79:c6:de:19:43:ea:46:be:89:e7:e6:c3:
                    c3:7a:ca:f4:58:14:07:15:63:d0:db:58:60:dc:eb:
                    dc:56:66:ac:46:cd:21:bb:fe:0a:17:a9:3b:b8:e7:
                    d5:bb:9b:0e:e5:c1:7a:54:de:84:86:3e:08:a3:ba:
                    ca:17:97:91:24:fa:b4:f8:a6:be:a0:f4:1c:77:91:
                    8b:a5:56:36:fe:c6:38:64:1e:76:ac:c9:0f:17:8f:
                    57:ca:8f:77:23:4a:39:3b:84:68:d1:0f:8d:50:2e:
                    cc:95:54:3f:2e:de:92:e5:0a:df:72:34:ae:3f:bc:
                    1c:3e:7d:fb:7f:fe:3a:2d:7e:6a:52:71:8b:64:3c:
                    d9:c1:fd:38:67:60:07:17:79:6e:cb:46:bb:88:c2:
                    1f:7b:07:1d:ec:92:6a:22:79:9c:a0:4a:7b:33:4f:
                    e3:50:61:11:72:17:a6:5b:1a:4e:9a:a6:32:22:c0:
                    39:09:e3:4c:69:45:ff:43:ef:9c:24:d1:2e:7f:b8:
                    b7:cf:a7:f0:2c:45:a5:4a:13:e7:37:76:c0:d3:d3:
                    33:01:20:3d:3a:50:6c:d3:8d:a4:e8:ff:e2:92:20:
                    25:5f:cc:0b:1f:36:53:35:14:c3:0b:0a:23:1d:7d:
                    33:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E2:BB:51:38:C0:46:71:B3:1A:21:D5:A1:BC:B9:E8:C8:0F:33:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c4037901-ff6b-3135-ab5f-be7b8cce4d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3c:ab:20:9c:47:d0:77:dd:a5:ec:db:92:74:53:34:ce:5a:
         0b:8d:5d:74:99:51:68:cb:ff:b0:fc:d3:53:93:d4:ef:00:cd:
         38:8d:89:e4:ee:b5:13:f8:12:46:db:e2:61:ce:43:13:95:32:
         31:11:0c:5f:c5:f5:63:f6:14:f2:bd:79:ef:e5:61:7f:cc:f1:
         f9:9c:23:cd:be:c2:76:b6:12:64:d0:de:f8:d6:e8:f9:01:1e:
         c2:9e:2f:99:d6:33:2c:e8:b9:de:4f:ec:f3:24:f7:a0:fd:8b:
         45:ca:62:92:d3:0d:50:87:62:98:ef:5e:60:e4:16:b7:eb:31:
         b3:3f:08:0f:4b:0a:07:13:3c:27:59:73:fd:49:50:b9:cf:b1:
         56:1e:bb:d0:48:fb:07:6b:ab:7b:18:39:4d:5f:f5:52:3d:f9:
         ba:24:3b:a2:13:cc:b0:5d:9c:84:09:34:db:50:f0:5e:52:ee:
         26:10:5e:cf:bb:e9:53:6a:6b:d0:c7:61:c6:a7:07:8f:d4:41:
         b0:a3:e8:ca:03:52:70:d2:24:c4:af:ad:cc:07:d8:e6:ef:c6:
         e2:a6:61:29:89:89:79:8f:85:2c:b6:76:c8:a7:12:f4:a8:c6:
         de:55:47:a9:e1:bd:7b:61:20:79:d5:7b:91:32:a1:2a:6b:a4:
         09:c5:92:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:23 2026 by rpki-client