Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08ff9662-4609-3d2e-af6f-7a8538b797b9.roa
File:                     08ff9662-4609-3d2e-af6f-7a8538b797b9.roa (raw, json)
Hash identifier:          Bh3uLmcmpvam/GXHsWgmWp7QBhmByWV+qqIS4jtSJZY=
Subject key identifier:   3E:C6:DC:83:0D:E2:B6:35:0B:04:E1:F6:E9:9B:59:2E:7D:8E:AE:B4
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F374D3FF50DA1F00BF2F24970
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08ff9662-4609-3d2e-af6f-7a8538b797b9.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        140.248.217.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:3f:f5:0d:a1:f0:0b:f2:f2:49:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=9db5df8d-99dd-4afa-9a60-30358f7e2745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:f0:3e:ac:95:c5:a2:d7:63:fd:8b:56:a4:
                    62:3b:08:00:a9:68:9d:0b:50:9e:fd:f2:6b:59:75:
                    82:21:69:af:b5:64:50:e5:5d:eb:67:df:e0:00:ad:
                    b8:23:e3:0c:74:71:f7:95:be:d9:ce:87:bb:bf:53:
                    bf:10:eb:45:de:15:ca:f0:36:7c:8b:8f:75:bc:ef:
                    0f:8e:8c:d4:6a:f1:ca:ab:c0:aa:e1:62:b9:07:0a:
                    0d:dd:69:53:a7:20:a5:a5:ed:39:ed:f2:04:a9:93:
                    9a:24:00:ad:b7:48:21:0e:08:13:29:b5:df:3c:c6:
                    ca:c9:b8:88:aa:a0:0d:3c:93:73:df:0e:5d:0d:61:
                    a3:b1:65:5d:c1:8e:1d:2f:67:09:83:c6:2c:8f:0a:
                    06:a7:6c:79:5a:a3:c4:79:3d:a4:c6:ff:09:05:a4:
                    58:2b:3e:76:d0:4d:4b:95:5f:0e:c5:06:73:44:df:
                    0e:19:5d:ee:06:a9:97:05:21:ca:49:01:43:05:a4:
                    42:17:35:7b:00:13:76:ea:63:48:78:74:3c:f9:e3:
                    cc:07:73:05:37:12:63:26:fe:a0:19:ac:5d:bb:60:
                    99:b1:1b:ba:de:5f:37:c0:9b:de:7a:68:23:ba:07:
                    6f:98:17:47:da:08:53:f9:ca:73:58:09:2d:c2:89:
                    f9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C6:DC:83:0D:E2:B6:35:0B:04:E1:F6:E9:9B:59:2E:7D:8E:AE:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08ff9662-4609-3d2e-af6f-7a8538b797b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.217.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:2f:85:06:d0:20:f9:8d:39:c6:18:88:63:47:2a:67:a6:87:
         75:7a:aa:55:1a:65:1a:b8:4f:d1:88:cb:e3:27:31:1b:37:a1:
         48:31:b1:55:6e:65:0d:8c:89:cb:43:10:ae:da:af:17:91:8b:
         a4:e7:fd:de:f8:ce:79:34:8e:18:0a:43:13:d9:7b:08:cb:86:
         36:8c:bd:5c:5f:6c:b0:b5:91:c1:80:ab:fe:0f:88:04:5e:52:
         fe:37:24:64:5c:eb:62:9f:0f:e6:e0:00:03:77:dc:d1:ae:fc:
         3f:fd:0d:bb:37:d4:42:89:74:29:24:a5:fb:79:6c:2d:c7:1c:
         2f:aa:85:78:8a:3b:b7:20:a2:7c:98:dc:fa:93:ef:59:1e:2b:
         9a:12:f9:b1:ee:9e:26:88:d5:84:29:9b:30:31:ac:2b:71:67:
         25:a7:78:f4:9f:62:2f:99:03:d0:8d:7e:98:4c:1e:6a:aa:8d:
         88:8f:d3:80:0d:fe:2a:7d:bf:c2:72:c2:24:16:ad:74:dd:91:
         c1:82:14:1e:34:52:e7:52:08:af:82:6e:f1:46:50:7d:67:7b:
         7c:52:74:a3:a7:5c:e7:9d:b2:89:b3:a2:09:46:e5:c5:ff:38:
         11:dd:99:9b:f4:7f:5f:ce:32:f2:06:75:fc:01:ff:8d:01:d9:
         0f:26:54:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:33:02 2026 by rpki-client