Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c922d974-e0c4-3be6-b33b-d85df1c5a977.roa
File:                     c922d974-e0c4-3be6-b33b-d85df1c5a977.roa (raw, json)
Hash identifier:          h8gc9DGVYCb2vYERjMExkx2Wc1t1wBEKQQfbrN2UUqY=
Subject key identifier:   AC:C6:C4:DF:06:52:9A:63:55:85:EE:1E:E6:C7:7D:20:ED:86:B1:4D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F18978E3F4E544602636DE080
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c922d974-e0c4-3be6-b33b-d85df1c5a977.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        140.248.120.8/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:8e:3f:4e:54:46:02:63:6d:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=8da19d95-beb6-41e6-9174-816de098b7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:81:a9:76:3f:1b:7a:6f:9a:92:ad:bd:84:
                    bc:c5:46:e5:77:55:17:43:ff:f0:88:35:6e:56:0d:
                    cc:2d:07:02:4b:90:ae:cd:16:c0:74:32:4c:61:d9:
                    16:7d:3d:31:57:f2:7d:38:b2:18:ef:ae:05:f3:41:
                    5e:ad:eb:ca:89:08:0f:6c:e2:10:34:a3:c7:9e:1c:
                    56:91:48:f3:77:98:23:eb:66:6c:b7:8a:e2:71:f8:
                    3b:2d:1d:f7:0c:f3:f9:89:06:39:53:35:45:9d:63:
                    61:b7:4a:0f:0a:02:ce:75:e6:6d:61:e2:ca:cb:ec:
                    8e:55:f0:fb:e7:4f:7d:18:40:46:48:b2:25:13:01:
                    65:cf:0b:3f:8f:ad:f5:96:c4:f0:05:fd:eb:d8:06:
                    5e:58:dd:07:0f:96:eb:4d:6f:85:0b:ae:cc:86:08:
                    f3:04:7c:af:32:53:87:52:da:2c:2e:52:d9:77:9d:
                    6c:19:65:29:41:c4:f6:60:de:7d:52:bc:cd:ec:99:
                    ac:e2:a1:70:cd:6b:10:c9:b6:bd:4c:0c:42:7a:67:
                    91:57:ba:80:42:7b:10:45:25:a7:ee:5b:5b:20:09:
                    77:d7:9e:40:97:1d:c9:2e:00:12:09:bb:93:cd:8c:
                    73:70:7b:5b:a5:56:a8:00:8b:09:be:65:e2:53:30:
                    94:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C6:C4:DF:06:52:9A:63:55:85:EE:1E:E6:C7:7D:20:ED:86:B1:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c922d974-e0c4-3be6-b33b-d85df1c5a977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.120.8/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:84:dd:d5:4e:88:fa:5b:8c:49:d4:6f:58:c9:95:ff:1e:
         d5:fe:0c:1b:13:b5:bd:e9:59:d9:9a:33:91:c1:94:86:72:a4:
         67:5d:53:80:9d:d4:75:5f:96:d1:67:ad:3c:f9:12:2f:39:48:
         c0:ab:07:72:bf:61:03:95:6d:aa:78:2a:b4:66:8e:e6:eb:cf:
         33:a9:dc:b9:14:f9:1f:fb:52:0a:e4:59:f2:40:15:5a:4f:46:
         c8:85:e2:2b:f1:68:77:10:d6:69:90:1e:9c:a8:05:86:51:6a:
         5a:6a:03:63:74:37:92:cd:b3:94:a2:88:ee:ce:7a:ed:e4:3e:
         6d:a6:61:55:01:2e:dc:1e:ea:28:9e:73:98:ea:76:5c:ca:c1:
         98:39:de:e9:91:bd:a0:e4:f4:5a:ee:0b:5f:48:32:2c:56:a9:
         3e:79:80:5c:16:36:53:ed:b6:07:07:b9:57:44:dd:f4:07:03:
         6f:04:d9:25:54:bd:4d:c6:ed:62:a8:e7:b8:8f:8d:b6:22:d2:
         c5:83:41:7d:3d:94:b5:2a:5c:af:58:67:d3:bc:63:49:3c:8b:
         16:c3:a4:e9:e1:64:cc:b9:46:19:0d:9f:af:a7:e3:3b:80:34:
         e9:18:e5:9a:8b:a5:ee:60:05:7a:2c:e3:17:dc:7a:2b:6c:0c:
         cc:3b:d8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:00:44 2026 by rpki-client