Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa
File:                     1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa (raw, json)
Hash identifier:          SASO0AQXFZ3qxCE1GFF0+hD1AML+EJPbSRkFb8il0ys=
Subject key identifier:   49:86:93:06:D9:F7:A4:DF:54:64:D6:29:66:AD:85:CB:D7:9D:31:A1
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F374D3F879340714BC1E1F8C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        140.248.208.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:3f:87:93:40:71:4b:c1:e1:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=7c3b0802-9dc9-49b6-bd31-a4fe0d53e163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:68:0d:c5:ab:f2:37:d1:95:12:f0:76:6a:bd:
                    79:ae:a7:7d:37:11:22:6c:55:fa:cd:71:f4:6e:89:
                    7c:3b:48:5f:f0:30:7e:d8:94:3a:46:6c:73:43:89:
                    90:a6:aa:33:50:0d:16:99:2d:c8:f5:ab:b5:81:15:
                    78:b9:5c:23:d1:33:93:98:e0:d0:e8:06:f5:89:e0:
                    fd:ed:0c:2e:b0:06:4e:b5:f4:a0:e7:77:35:6e:86:
                    09:e8:41:0c:bf:16:20:00:7e:91:1c:a4:9d:4e:ff:
                    05:74:a3:19:f0:e9:1a:d7:23:4c:eb:6e:ea:f9:76:
                    ef:eb:0d:5a:2a:82:c8:c3:a7:fb:e7:cd:6e:b5:60:
                    5a:3f:b4:e7:93:aa:3b:22:95:1c:51:6f:b7:64:25:
                    f6:0c:ec:a5:3b:d0:1c:a6:3c:be:1f:23:c0:47:fd:
                    df:e2:2e:22:15:f2:c0:f4:8d:08:fb:fa:3b:5f:95:
                    d0:ef:79:8a:0d:30:66:a8:3e:fc:40:f8:77:7e:73:
                    1b:87:6f:6a:18:36:09:3c:ca:2d:05:5b:75:c8:db:
                    b3:a5:78:ae:28:53:6c:39:9e:e2:87:52:53:fd:31:
                    a2:bf:a8:6d:66:ad:8b:04:9d:1d:e2:7d:9d:38:ed:
                    cf:eb:68:a2:c5:9c:56:4a:2a:68:5c:e4:f3:d0:f6:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:86:93:06:D9:F7:A4:DF:54:64:D6:29:66:AD:85:CB:D7:9D:31:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.208.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e7:01:6b:26:8c:b8:31:ab:43:64:2b:6b:15:6d:00:1e:88:
         47:df:25:12:9a:fc:83:c8:58:ac:88:73:07:03:27:39:04:dd:
         b8:7b:38:5c:95:9c:57:38:42:13:be:bd:d4:ec:ce:68:f3:84:
         ac:b1:de:51:fb:72:89:41:ee:42:f5:93:8c:f4:8b:9d:01:5d:
         98:1d:dd:2f:bf:c3:c7:35:13:e8:42:b9:64:8b:8d:f6:26:54:
         51:94:b1:f9:c9:c7:86:f1:a4:94:7a:d9:0f:79:83:58:ac:6a:
         60:e9:84:5f:bf:30:10:39:8d:e3:d3:b9:b3:80:d7:aa:dc:f0:
         2f:48:40:a8:9d:7b:3a:38:a8:ae:2f:4b:cb:bb:1e:2a:84:10:
         ea:76:fd:3d:0c:75:22:cc:ea:e7:ea:4a:9d:33:fe:4a:9d:82:
         08:91:68:72:5f:de:65:e5:d8:4f:c2:23:79:4d:80:ac:3a:07:
         6a:bc:22:56:31:f3:7c:b3:35:c0:1c:26:95:71:f8:9d:01:45:
         7c:33:e0:3d:61:cd:24:47:35:08:92:50:d3:f7:4d:aa:1f:36:
         6b:b7:9c:13:69:28:9a:68:d6:9a:32:f6:14:c9:ab:ec:cf:86:
         66:19:4f:b7:f4:49:c8:2a:b2:0c:91:90:f2:1d:21:d6:c4:fd:
         23:3f:31:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:43:25 2026 by rpki-client