Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9bc6120c-1131-3272-9bcb-8d35dbd00778.roa
File:                     9bc6120c-1131-3272-9bcb-8d35dbd00778.roa (raw, json)
Hash identifier:          VuUwWNp5JmknoGvMTO1UwaLhGELUzkd4F/EN59PmSY0=
Subject key identifier:   1F:A1:E8:2A:B0:E9:BA:9C:B9:F7:96:27:EB:84:0A:C7:18:AE:94:E4
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584D1F4A395C80AC409AA91D2210
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9bc6120c-1131-3272-9bcb-8d35dbd00778.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        140.248.107.16/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:39:5c:80:ac:40:9a:a9:1d:22:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=e3bb2c60-e027-47f0-9b0c-5960feadf0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:75:e1:3d:92:f1:9b:1a:1f:24:c1:d4:79:
                    03:0a:3d:36:af:42:84:31:b6:d3:5f:71:c3:60:72:
                    31:3d:c2:b3:98:37:e0:3a:95:98:10:1b:ee:5d:ad:
                    a8:b7:ac:57:99:78:c1:b7:1e:0c:9d:3e:3e:f0:7a:
                    3f:b4:ce:80:a6:ad:39:7f:b3:fb:ce:78:c0:ef:d7:
                    9b:e3:f1:cc:b9:e4:3c:cd:98:e2:92:05:aa:e3:5a:
                    01:7b:d5:e5:44:5b:8d:ad:e2:4f:80:7b:45:7b:60:
                    92:3f:1a:e9:72:9c:ba:fe:2d:92:a9:2a:cb:fb:83:
                    af:9b:79:43:1a:bd:0a:0e:3c:71:39:04:eb:97:f9:
                    e4:85:fb:cf:23:20:2f:ad:05:f6:b5:34:49:07:fb:
                    41:33:c9:74:69:34:b1:f1:b8:4b:0f:4d:1d:91:8d:
                    b4:82:d0:e6:9f:1a:db:e9:67:8f:c9:48:7a:eb:d4:
                    b0:61:ff:f6:ea:b1:9a:f3:b2:a1:c6:27:15:c1:97:
                    b2:56:92:61:bb:36:cc:6f:d9:33:8c:f6:e7:c3:19:
                    d9:73:a3:e7:d3:1a:9f:cf:73:5a:21:fa:61:36:46:
                    7e:b0:17:36:8d:50:c1:b4:da:93:4f:f4:63:2d:36:
                    65:1c:b1:b5:45:18:fd:9e:2a:61:e7:41:e3:d4:69:
                    ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A1:E8:2A:B0:E9:BA:9C:B9:F7:96:27:EB:84:0A:C7:18:AE:94:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9bc6120c-1131-3272-9bcb-8d35dbd00778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.107.16/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:a0:25:99:51:e4:bf:c0:5c:91:ff:1c:17:89:a3:7a:18:
         6c:94:95:93:14:7d:70:38:1d:bc:10:42:54:3d:27:1d:50:88:
         e5:65:37:d2:da:ae:2e:59:15:e9:ba:ef:2e:62:30:5d:5c:fc:
         21:2c:5f:b7:63:32:e1:a8:6c:5d:09:62:28:90:fe:1b:49:de:
         c8:ec:8f:74:22:f1:2a:28:3a:f5:3f:2e:fa:56:f9:42:ff:ea:
         0b:66:f0:6d:0d:ed:e0:e3:8c:f9:3f:2f:11:38:54:81:30:e6:
         ea:8c:1e:ad:29:71:bb:6d:25:c6:d2:5c:08:60:1c:5d:52:45:
         9e:ef:51:b4:a8:c0:b1:ed:7a:95:4b:df:8f:3f:a9:65:ce:13:
         c7:ed:6d:65:0a:6b:79:60:7f:ef:45:2e:b2:d3:86:3c:32:39:
         64:1c:9b:9c:b2:82:59:5b:76:ee:81:f8:46:69:17:f4:0b:63:
         d4:a5:54:47:3b:19:e4:a5:5a:65:38:3e:23:77:75:83:8f:49:
         ef:12:b8:d0:ec:1b:4f:79:db:64:d4:3d:40:e7:8c:67:52:33:
         34:19:23:23:4e:99:c5:d0:db:79:c5:a1:48:f5:e1:69:92:1d:
         54:db:3a:ae:27:db:cf:0b:b0:ed:72:32:7d:1d:d8:dc:af:bd:
         72:67:07:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 17:59:26 2026 by rpki-client