Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa
File:                     128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa (raw, json)
Hash identifier:          wcWUdSiKDbyt68xVsdZQfR7Qz6/52052wwKp15Kt/Ok=
Subject key identifier:   C1:BF:DD:4F:5B:4A:84:71:18:35:F9:62:3B:27:AB:3E:C6:AB:A6:6A
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A59931AED5DB73ED416940
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        140.248.220.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:99:31:ae:d5:db:73:ed:41:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=6ca57934-7f1d-4f54-b524-f9f679eb67d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:8e:7f:32:45:85:2d:12:5c:ca:07:27:71:
                    0d:09:9c:31:f2:9f:b0:09:23:51:c4:a6:b1:ff:28:
                    47:04:c5:aa:47:8b:46:e9:4d:77:1b:35:46:af:a4:
                    94:0e:aa:d5:7b:0e:74:b4:8c:c1:d1:3c:4d:c9:18:
                    5e:da:73:5f:eb:8e:49:26:88:7e:a5:6e:a3:ed:c3:
                    60:42:58:70:3d:05:87:26:ee:38:27:db:16:de:4e:
                    5e:6e:f2:db:91:c4:53:f9:9f:2d:b3:c9:9f:15:fb:
                    72:7a:6f:21:ec:80:8e:c2:e0:1f:ff:fa:59:b3:e7:
                    9c:02:8c:d0:c1:21:22:4b:88:25:17:f1:12:79:48:
                    9a:7a:e9:01:4e:fc:87:2a:db:b3:06:cf:85:4e:d7:
                    6d:4a:11:8f:45:1b:91:d1:dc:b6:8f:9b:0a:02:c6:
                    69:ac:89:77:93:6f:98:1b:eb:7f:9d:15:b4:72:ed:
                    e3:b8:77:d1:f1:ce:fb:e5:67:14:27:f4:33:dd:35:
                    0c:09:44:aa:27:e8:53:c7:b4:e3:45:f0:5a:14:e0:
                    e1:b2:e0:fa:ab:fa:2c:eb:e9:36:98:2f:15:10:3f:
                    50:4a:cc:c3:11:e2:eb:7b:13:41:b3:61:17:eb:de:
                    07:40:be:a2:6d:c7:d9:86:6a:ae:ef:97:db:03:8d:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BF:DD:4F:5B:4A:84:71:18:35:F9:62:3B:27:AB:3E:C6:AB:A6:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.220.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e6:82:e3:83:18:15:27:e5:66:cc:1a:14:b0:c0:cc:5a:c5:
         c1:c5:26:4c:97:a3:83:19:ed:f9:87:7d:e1:99:37:3e:e2:2e:
         50:9f:ba:6e:72:81:89:20:2e:1b:49:64:57:39:4d:67:ab:eb:
         c5:f7:a7:91:03:4d:e2:74:e2:1b:e7:b1:f8:50:32:31:99:48:
         bb:01:1b:27:cc:6d:6e:52:1e:2e:37:5e:31:62:28:b3:1b:28:
         75:5e:ac:86:f6:8a:77:0f:eb:0c:80:26:cb:39:5a:06:06:b9:
         67:c0:7e:78:46:a9:7c:4f:4e:4f:96:c3:cb:ac:9b:f0:b5:17:
         47:87:7d:c0:8c:a9:07:fb:35:4d:b8:c6:d1:ef:d1:f1:aa:08:
         ac:9f:69:d8:17:46:d1:0a:b9:63:11:54:84:ed:e4:7f:60:e0:
         21:6e:47:30:0b:0f:62:fe:20:e8:29:4a:ea:de:a0:1a:a0:c4:
         f7:03:6c:7c:9e:56:c4:23:b0:56:70:9f:06:18:fa:e3:8c:37:
         db:cf:3e:10:d5:c8:76:35:f2:12:f4:f6:a2:05:e7:81:e0:be:
         82:ac:e2:dd:7c:fb:6c:1f:63:ca:e8:14:2b:bc:2f:3c:71:3c:
         68:5b:e3:a7:45:28:be:ea:17:ea:f6:bf:a4:f5:15:f2:cb:55:
         d2:d5:e9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:53:52 2026 by rpki-client