Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/06a79a51-0ad5-343a-b679-dde6ab8c434c.roa
File:                     06a79a51-0ad5-343a-b679-dde6ab8c434c.roa (raw, json)
Hash identifier:          R5R5lW/WN5PSHim9EwrhiYOxCMBXE3Ok8uUQLD/J/g0=
Subject key identifier:   9C:70:AA:4D:72:C8:8D:C4:FE:C9:45:CC:3B:97:82:29:6B:DC:70:DB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A59C8E85A3078C2CEA78C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/06a79a51-0ad5-343a-b679-dde6ab8c434c.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        140.248.243.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:9c:8e:85:a3:07:8c:2c:ea:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=d0baedc5-25f5-479e-a077-07623b7a48e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:6e:3c:38:fe:51:a9:24:33:91:25:cb:92:
                    3b:49:ee:70:af:69:a0:25:bd:9b:a1:40:f1:80:72:
                    5a:86:17:ff:a2:01:1f:c3:f3:e2:19:71:21:93:88:
                    95:25:39:5d:9d:7d:72:0a:23:3c:13:99:78:cb:b3:
                    43:36:dc:3c:5e:17:d9:9a:af:bd:6d:9f:0e:70:ab:
                    5e:41:cb:32:69:10:97:ea:5e:46:e5:6e:36:84:7e:
                    ba:ec:62:30:ed:8d:0b:3f:ed:01:cf:51:ef:66:df:
                    35:27:1f:2f:4a:20:ae:01:a0:26:d3:d4:75:0f:1f:
                    3c:b0:c4:12:8b:6c:eb:08:70:93:c5:27:74:57:92:
                    71:a7:d2:2b:d5:fd:57:b6:f1:38:b9:6f:61:3d:ae:
                    49:17:1a:1e:cc:15:0c:5f:f5:5e:2a:d8:23:fa:25:
                    cc:1c:c3:8a:79:c9:e6:15:55:15:47:54:93:bb:c4:
                    54:00:31:50:21:ec:f7:fd:8a:a3:22:53:f4:3f:b1:
                    4e:45:4e:40:d8:2a:d1:33:05:2f:06:5b:6a:97:09:
                    9b:5b:16:fb:11:df:c5:23:aa:07:1e:ce:00:dd:e7:
                    8e:e3:22:83:81:57:44:be:8f:2e:67:02:df:28:a3:
                    fb:11:ae:fc:6c:26:e0:47:65:1e:87:ef:64:ce:d5:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:70:AA:4D:72:C8:8D:C4:FE:C9:45:CC:3B:97:82:29:6B:DC:70:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/06a79a51-0ad5-343a-b679-dde6ab8c434c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.243.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9c:21:04:b4:76:76:22:09:5f:f4:86:3e:75:6e:13:57:dc:
         cc:86:94:ec:e0:68:89:f6:35:6c:ac:50:7a:bd:fb:be:a1:45:
         f2:4b:f4:ef:00:01:48:bd:d1:3c:01:02:91:80:0b:b2:95:bc:
         5f:7c:0d:c9:e4:de:80:b8:59:0e:e4:96:aa:82:12:30:11:01:
         b6:88:f1:29:0b:83:21:d7:ae:51:d5:ae:88:f3:93:42:92:a0:
         6e:18:25:e0:0b:f0:e1:86:b2:d2:b0:cf:36:dc:39:66:a2:fe:
         c1:f2:62:d0:5a:cd:ff:b6:0c:c8:e8:e4:82:81:1a:21:c4:33:
         ea:cf:3c:91:5e:c0:16:de:44:77:b1:84:f9:4f:ab:43:8e:fa:
         d0:1d:a3:25:d7:eb:42:12:c6:b9:9e:5d:32:71:76:d2:5c:97:
         e8:66:57:d3:cd:6a:f4:ac:aa:54:28:f5:b8:e6:ac:68:5c:c8:
         61:53:a2:dd:27:2a:b0:bb:b7:ad:94:1a:8d:d1:5b:2d:97:03:
         59:e1:1a:50:3b:33:f0:b4:66:82:d6:02:0e:b0:2f:17:84:38:
         84:da:2f:73:54:89:01:a8:e9:98:e9:7e:b3:51:e2:02:51:23:
         db:d1:78:b4:2a:ac:ce:b7:43:f4:10:1d:6b:f7:33:d4:1a:5c:
         32:b9:ba:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:55:51 2026 by rpki-client