Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f63c22c9-dc03-34db-9401-af753888b43a.roa
File:                     f63c22c9-dc03-34db-9401-af753888b43a.roa (raw, json)
Hash identifier:          LhaN3yswPSjsLD4MeuN934nx4HTjamiUACQChWdH/b4=
Subject key identifier:   8D:F1:6B:04:F3:5B:12:56:7B:AE:AD:EE:DA:F4:D5:16:FA:EA:9A:80
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD40790017BD07462FB1D8200
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f63c22c9-dc03-34db-9401-af753888b43a.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        140.248.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:90:01:7b:d0:74:62:fb:1d:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=ae8a167a-77cf-43f8-b721-c39a02ff5cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d0:92:99:bb:42:b8:2b:29:66:c0:ab:4d:cf:
                    36:fc:a6:04:18:c5:ef:61:43:97:5c:73:5c:f1:74:
                    b6:15:4e:0e:e7:2d:7e:6e:cd:33:d4:e2:c8:ed:20:
                    96:ce:c6:7f:80:09:c0:ec:a9:79:eb:5b:70:f5:ab:
                    e6:d0:d6:6c:e6:52:81:b8:af:d7:c5:45:56:62:b0:
                    84:95:bb:f0:8b:97:35:94:03:d5:77:7c:a2:fd:2c:
                    c1:f7:1f:ab:e8:b5:d0:a2:5a:09:6a:10:25:74:9e:
                    26:d3:e9:77:03:07:4d:ab:a9:3c:ac:7c:66:39:3e:
                    6f:11:17:0d:0e:b0:bc:ae:de:e3:f8:59:98:f6:54:
                    39:40:23:c4:ac:2a:28:13:03:23:76:e5:a5:c2:7e:
                    e2:9d:64:e2:8c:ba:b4:b9:0b:cc:66:d8:84:f6:8a:
                    8c:89:7a:63:14:50:b2:76:44:04:9a:e1:61:f0:94:
                    bd:37:29:0d:a8:44:59:d5:8b:c8:19:11:f9:c6:5e:
                    f6:c8:8f:a4:58:48:73:5e:09:d8:2d:0c:ef:9b:a9:
                    ee:50:58:cb:b8:02:97:2d:6e:dc:5d:bb:ba:3d:3c:
                    b9:76:76:32:95:05:98:ce:ea:9b:19:8b:5b:2c:1d:
                    47:05:62:91:59:cc:4f:b7:7d:9f:0d:70:d6:17:68:
                    f7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F1:6B:04:F3:5B:12:56:7B:AE:AD:EE:DA:F4:D5:16:FA:EA:9A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f63c22c9-dc03-34db-9401-af753888b43a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:98:94:3f:bb:96:fc:b8:d1:de:1b:14:8a:13:57:14:90:6a:
         72:c1:d4:b3:0a:dc:42:91:d4:98:ff:01:2d:51:48:71:37:9b:
         f7:45:49:ef:bd:e0:9f:f1:10:cf:e1:95:1b:da:fc:fb:e5:31:
         a8:d4:9f:69:96:e8:2b:5c:92:38:2b:b4:62:b8:4e:01:60:6c:
         75:6e:63:ac:9a:d0:59:b5:1b:4d:07:0a:3d:f2:50:7a:8b:8f:
         45:1a:88:e8:6a:1d:19:b4:ed:ba:4d:cc:d9:ca:17:21:8b:75:
         f2:03:7c:21:8b:bf:75:7d:68:e7:22:d9:2f:46:d9:2a:7c:a9:
         84:e4:aa:75:45:55:1f:e5:ac:fe:0b:32:35:3c:4f:61:51:a4:
         c0:ed:ad:2b:55:64:6c:dd:c5:35:ed:8e:dd:64:26:09:01:a3:
         a6:52:a1:45:1d:8b:3c:4c:ec:35:c4:72:80:e6:7c:c3:65:61:
         0b:38:2f:29:b2:0f:04:35:0c:34:ef:d4:87:1a:15:1a:7e:19:
         7c:da:8b:54:14:4f:f6:d8:7f:18:e3:1c:5c:d8:1c:c3:30:ac:
         b3:2a:36:7f:d4:39:8f:14:1c:62:ae:c2:be:c2:0e:5c:27:03:
         9a:1a:80:c2:b3:14:b9:31:10:72:d5:15:40:81:e8:19:30:00:
         ec:3c:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:46 2026 by rpki-client