Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa
File:                     1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa (raw, json)
Hash identifier:          sehOfZ8zqgh19vPWidSZBVIiuWPxKTYooPvNtsSPfUU=
Subject key identifier:   BE:D8:F6:8F:A8:0D:06:A5:6D:5E:69:B6:D0:34:56:14:B5:4A:DF:EE
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A59B949F4B440ACC934020
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        140.248.208.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:9b:94:9f:4b:44:0a:cc:93:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=8b1e94e6-a479-46a8-b86d-4b5712d89540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:35:14:5e:8a:34:99:85:af:4c:09:72:28:
                    d0:12:e3:cc:78:d5:f4:ec:7f:bc:d6:82:0e:09:d5:
                    fb:c1:2d:00:c1:1a:b0:48:3f:a2:ab:2d:23:0f:3e:
                    39:36:a2:f8:ea:47:8e:a3:21:6a:e2:11:11:6b:4d:
                    29:6c:ff:c2:58:7a:44:64:9d:66:88:d0:2d:dd:fd:
                    21:bf:1a:b6:6c:e1:81:c7:49:88:ef:b5:db:f3:65:
                    b0:ce:b4:4c:16:4b:3e:a1:3a:fd:5d:c2:0e:c8:ae:
                    01:99:88:f0:85:48:e8:d8:e2:e9:cc:1f:58:81:b0:
                    7e:6e:7d:59:c4:1a:52:c3:6a:fa:1d:24:08:b5:37:
                    a7:5a:2b:57:40:a3:6c:c8:2a:4b:f2:af:62:1d:94:
                    c1:a9:1f:72:d0:bc:25:1b:de:4a:83:9a:ca:81:bf:
                    84:69:0a:20:af:97:75:3d:8b:3c:cc:05:d5:bc:e3:
                    91:4f:12:01:5f:95:72:8c:3d:32:be:c1:70:0a:b9:
                    46:c4:f5:6c:38:3f:df:01:11:25:6c:8b:a6:00:be:
                    41:ec:09:42:9a:1f:f6:35:a8:db:a7:76:96:64:4a:
                    4e:eb:9f:9d:85:91:a6:7f:08:32:88:1b:19:65:3c:
                    5c:56:28:96:8c:57:d5:a4:61:86:48:48:41:41:27:
                    80:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D8:F6:8F:A8:0D:06:A5:6D:5E:69:B6:D0:34:56:14:B5:4A:DF:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.208.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:73:62:a5:34:9b:da:7d:ba:c8:23:20:e9:cd:e1:55:1e:ac:
         24:39:2f:bb:73:ae:a5:8c:ce:98:69:d6:89:60:45:f4:f6:1b:
         5c:6a:c3:41:a9:81:29:cd:31:d2:22:11:b5:5e:a3:17:0c:20:
         34:ad:99:59:78:21:1f:8d:4d:90:43:5f:c9:13:f8:7c:03:b6:
         c6:27:f1:a6:3f:e1:a6:02:b8:10:2b:52:51:5d:6c:b6:ca:2c:
         8f:b3:bd:d8:09:d4:91:08:46:d2:7b:7e:4d:32:2b:a8:54:52:
         77:59:ec:86:47:42:75:ca:e8:d6:9d:f2:d1:ea:42:5a:08:64:
         dc:0a:97:b2:4e:6f:7d:c1:50:ff:e3:d8:95:83:00:7d:45:60:
         04:05:7f:da:70:1d:ed:5f:27:45:c5:49:20:d0:e5:af:39:09:
         b7:c8:84:c9:1c:44:82:75:d6:f5:8d:8b:bf:3d:14:fd:51:56:
         84:f4:49:d8:15:02:bf:ec:d0:62:59:4a:a3:4c:43:25:c1:64:
         ca:a3:28:22:64:93:f3:3e:06:60:38:07:1d:2b:24:7f:d1:8f:
         b5:f8:0e:06:91:8b:67:bf:6a:d9:c2:06:9c:8a:bb:cc:e2:53:
         56:e4:e9:ca:f7:57:ac:28:ad:74:00:31:0f:2e:c5:ff:f3:96:
         8a:7d:fc:a0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE20pZuUn0tECsyTQCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
OGIxZTk0ZTYtYTQ3OS00NmE4LWI4NmQtNGI1NzEyZDg5NTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0k1FF6KNJmFr0wJcijQEuPMeNX07H+81oIO
CdX7wS0AwRqwSD+iqy0jDz45NqL46keOoyFq4hERa00pbP/CWHpEZJ1miNAt3f0h
vxq2bOGBx0mI77Xb82WwzrRMFks+oTr9XcIOyK4BmYjwhUjo2OLpzB9YgbB+bn1Z
xBpSw2r6HSQItTenWitXQKNsyCpL8q9iHZTBqR9y0LwlG95Kg5rKgb+EaQogr5d1
PYs8zAXVvOORTxIBX5VyjD0yvsFwCrlGxPVsOD/fARElbIumAL5B7AlCmh/2Najb
p3aWZEpO65+dhZGmfwgyiBsZZTxcViiWjFfVpGGGSEhBQSeANwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL7Y9o+oDQalbV5pttA0VhS1St/uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMWNkYmQ2OGItNmM1Mi0z
ZjE2LWI2NDMtYzNmNTY0NmE5NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjQgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBRc2KlNJvafbrIIyDpzeFVHqwkOS+7c66ljM6YadaJYEX09htcasNB
qYEpzTHSIhG1XqMXDCA0rZlZeCEfjU2QQ1/JE/h8A7bGJ/GmP+GmArgQK1JRXWy2
yiyPs73YCdSRCEbSe35NMiuoVFJ3WeyGR0J1yujWnfLR6kJaCGTcCpeyTm99wVD/
49iVgwB9RWAEBX/acB3tXydFxUkg0OWvOQm3yITJHESCddb1jYu/PRT9UVaE9EnY
FQK/7NBiWUqjTEMlwWTKoygiZJPzPgZgOAcdKyR/0Y+1+A4GkYtnv2rZwgacirvM
4lNW5OnK91esKK10ADEPLsX/85aKffyg
-----END CERTIFICATE-----
Generated at Sun May 3 17:53:56 2026 by rpki-client