Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc7f2701-a19d-35b1-ae7d-b1d72ab473b7.roa
File:                     cc7f2701-a19d-35b1-ae7d-b1d72ab473b7.roa (raw, json)
Hash identifier:          RzWbteQDKAQlMmubICyTBhSpCGDs1dyTHwfPkC0iwqs=
Subject key identifier:   E7:01:E5:07:36:E9:78:9A:C1:91:EA:D6:EE:EF:B6:D8:CE:AC:AB:F1
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CB552046A17CA27D8A3750280
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc7f2701-a19d-35b1-ae7d-b1d72ab473b7.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        140.248.236.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:52:04:6a:17:ca:27:d8:a3:75:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=33d21eee-1e44-40a8-902e-f33a1d320ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:dd:8f:04:00:fe:5d:f3:68:91:51:68:4a:
                    dc:2a:f7:29:e8:00:66:db:30:0f:f1:39:06:1e:aa:
                    71:1e:81:01:91:ac:06:8b:cc:a7:1e:b3:b4:d0:69:
                    b4:a0:10:77:dd:a9:94:fc:3a:81:9e:01:5d:84:60:
                    60:76:16:8a:cc:2e:34:56:ae:9a:34:ac:de:42:2e:
                    52:75:48:3b:ca:81:54:01:06:df:27:85:a5:5f:58:
                    49:13:b2:ae:1b:23:a7:91:44:80:d0:1f:33:2c:c8:
                    88:44:98:a2:97:0b:ee:5a:48:92:5e:00:88:3c:3b:
                    da:9e:50:ab:0f:5b:80:69:79:86:47:be:d7:12:c0:
                    fc:f4:7d:b2:a4:23:52:a1:9d:57:48:eb:6a:02:5f:
                    f5:35:ff:39:4c:ab:68:e5:e0:fe:36:a8:08:de:64:
                    05:a7:8b:74:65:01:b6:e5:24:63:b0:f2:54:f4:c9:
                    22:24:ea:2d:89:63:f0:3f:11:d5:5d:fd:4b:55:f6:
                    67:ab:13:3a:fe:e5:6f:e2:ec:a5:3b:11:67:ad:8f:
                    6f:dd:61:fc:72:76:81:74:d7:31:ac:49:1a:68:69:
                    5b:1b:09:73:47:9e:6c:e2:41:f0:4b:02:70:3a:a2:
                    8f:0c:66:0c:37:d2:06:9a:ba:1a:b6:3b:ad:2e:f9:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:01:E5:07:36:E9:78:9A:C1:91:EA:D6:EE:EF:B6:D8:CE:AC:AB:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc7f2701-a19d-35b1-ae7d-b1d72ab473b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.236.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:68:8c:74:0e:fc:79:f2:87:a5:5c:75:7f:55:32:f5:d3:1b:
         26:04:1d:5b:6c:d8:d7:06:d9:2d:62:20:9c:ee:dc:5d:20:a6:
         96:1e:a4:ee:35:d7:64:a3:6d:e4:18:2a:2c:1a:d3:b7:f5:cb:
         8b:02:7b:ad:59:e2:d3:2d:9f:77:ce:5e:f2:88:16:b0:da:a4:
         5a:c8:e3:8b:8d:6b:21:e6:27:df:be:ec:94:8a:92:fe:39:6a:
         cd:72:e3:b6:5a:7e:c1:b9:d1:6c:6d:39:24:f2:d8:3a:23:70:
         12:ad:74:51:7f:76:f7:34:09:8e:e3:c8:fe:6e:73:b4:cb:cf:
         b3:9d:35:61:fb:cb:a8:f1:bf:0a:46:6f:b4:a9:30:9c:0c:d6:
         92:df:c7:4b:1e:2e:6d:45:e3:dc:e8:49:cf:aa:9b:da:67:32:
         1f:26:70:34:2f:e7:ec:f2:37:da:5a:67:ad:b4:dc:6a:ef:68:
         9e:97:c9:21:02:3a:dd:42:d3:6a:a9:92:38:c6:58:37:1e:b0:
         cb:eb:fc:bd:37:ec:bd:db:05:89:5d:54:a8:07:7b:5c:50:f8:
         b3:f6:64:fb:aa:a1:7e:55:6e:7c:f9:c5:59:41:95:f0:35:c7:
         85:8e:21:e2:11:6c:6e:3c:1d:d8:76:d1:ae:c9:c7:7d:56:43:
         9d:06:0c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:26 2026 by rpki-client