Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2f7c0897-630e-306d-b091-4de2bc57aa39.roa
File:                     2f7c0897-630e-306d-b091-4de2bc57aa39.roa (raw, json)
Hash identifier:          CR9OwI8HouxJNEOUk4QoLibwXJcWvUuzYND6SR24VJc=
Subject key identifier:   C1:B4:AB:FA:12:64:A1:5C:BF:FE:2F:F1:03:28:4A:21:A0:D2:90:61
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A59D076974A9EBE27992E0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2f7c0897-630e-306d-b091-4de2bc57aa39.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        140.248.250.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:9d:07:69:74:a9:eb:e2:79:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=797663ad-4589-4549-9db3-3ce2c7dae4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:51:a5:6b:11:d9:52:84:2f:b0:2b:ec:e2:1c:
                    e1:42:c4:82:ec:b1:18:da:1e:70:18:7e:53:db:8c:
                    24:b6:d4:03:7a:7b:31:71:25:65:e2:64:ca:f1:c9:
                    95:3d:de:05:6d:37:81:1c:a2:68:b3:53:3c:2e:fd:
                    18:ce:46:c3:94:c3:5f:b8:51:62:62:83:b5:17:13:
                    98:91:07:ca:97:f1:e2:28:c5:a4:a5:f8:7f:28:f4:
                    5a:9e:a1:60:8d:d4:5a:67:7a:0a:44:42:ac:55:9c:
                    a4:1c:ef:ec:47:43:33:5b:32:0b:2d:c3:61:8d:bb:
                    76:09:71:df:ef:67:e2:ac:7e:2f:65:d9:d0:f3:0b:
                    f3:bf:f0:9f:38:73:c8:b3:4f:8d:fe:9a:fa:5d:38:
                    5c:46:d8:16:31:f3:83:17:ef:32:66:5c:46:9f:e4:
                    ee:e1:7f:2a:8f:f8:99:ed:32:26:df:e3:7f:b6:73:
                    7b:c1:54:3d:e1:62:8f:18:7a:27:3f:ce:ab:cc:c3:
                    de:26:05:1b:ea:01:c9:a7:d3:d3:23:cd:24:99:bd:
                    59:cc:a5:78:a4:b6:d8:cd:7e:eb:bb:f0:64:ae:75:
                    d5:fa:3d:a2:ee:3a:5c:92:8f:67:c5:f7:85:0d:92:
                    58:05:08:76:f0:6f:61:bb:29:f9:fe:21:c2:c3:45:
                    65:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B4:AB:FA:12:64:A1:5C:BF:FE:2F:F1:03:28:4A:21:A0:D2:90:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2f7c0897-630e-306d-b091-4de2bc57aa39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.250.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:8d:69:46:8a:07:11:b4:f1:69:d3:6e:9e:c9:e3:88:af:d8:
         4c:65:a1:0f:76:b1:99:fe:4b:f3:d9:07:60:fc:cf:69:a8:b3:
         f0:99:12:b0:74:31:64:12:2f:ca:d5:60:5e:7f:24:32:47:72:
         95:86:5b:90:3a:a4:82:9d:0f:fc:6c:19:50:3b:3b:66:34:c0:
         c6:9a:c2:2c:65:9b:33:1c:64:13:7d:e9:cc:b3:d8:17:d5:c2:
         44:f6:b6:66:46:75:01:8b:6b:95:10:6d:c8:bb:5f:14:88:6d:
         eb:57:b9:b0:57:85:b2:56:37:69:95:fc:b0:6c:0a:13:e4:87:
         b7:d5:eb:8d:52:63:02:b8:a3:40:5d:9e:0e:ca:b4:7e:fe:85:
         86:f4:04:d6:3c:96:fc:34:26:d8:14:69:55:1f:52:f7:61:ff:
         55:0f:03:08:63:48:9d:dc:35:a9:e3:a0:10:38:3d:cc:89:76:
         d2:ab:19:c5:c9:80:0d:ef:bc:18:92:ce:72:db:95:c6:5a:dc:
         98:89:4d:10:25:bf:d6:65:09:66:cb:91:7f:c2:39:19:85:97:
         98:f8:cd:aa:d7:73:6a:e8:5d:72:aa:25:aa:c2:a6:68:73:cd:
         93:8f:01:7c:2e:0e:08:0e:a4:2c:0c:4b:a5:fa:aa:9e:bf:c7:
         19:9f:c0:a9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE20pZ0HaXSp6+J5kuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
Nzk3NjYzYWQtNDU4OS00NTQ5LTlkYjMtM2NlMmM3ZGFlNGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVGlaxHZUoQvsCvs4hzhQsSC7LEY2h5wGH5T
24wkttQDensxcSVl4mTK8cmVPd4FbTeBHKJos1M8Lv0YzkbDlMNfuFFiYoO1FxOY
kQfKl/HiKMWkpfh/KPRanqFgjdRaZ3oKREKsVZykHO/sR0MzWzILLcNhjbt2CXHf
72firH4vZdnQ8wvzv/CfOHPIs0+N/pr6XThcRtgWMfODF+8yZlxGn+Tu4X8qj/iZ
7TIm3+N/tnN7wVQ94WKPGHonP86rzMPeJgUb6gHJp9PTI80kmb1ZzKV4pLbYzX7r
u/BkrnXV+j2i7jpcko9nxfeFDZJYBQh28G9huyn5/iHCw0Vl3wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMG0q/oSZKFcv/4v8QMoSiGg0pBhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMmY3YzA4OTctNjMwZS0z
MDZkLWIwOTEtNGRlMmJjNTdhYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPj6gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDEjWlGigcRtPFp026eyeOIr9hMZaEPdrGZ/kvz2Qdg/M9pqLPwmRKw
dDFkEi/K1WBefyQyR3KVhluQOqSCnQ/8bBlQOztmNMDGmsIsZZszHGQTfenMs9gX
1cJE9rZmRnUBi2uVEG3Iu18UiG3rV7mwV4WyVjdplfywbAoT5Ie31euNUmMCuKNA
XZ4OyrR+/oWG9ATWPJb8NCbYFGlVH1L3Yf9VDwMIY0id3DWp46AQOD3MiXbSqxnF
yYAN77wYks5y25XGWtyYiU0QJb/WZQlmy5F/wjkZhZeY+M2q13Nq6F1yqiWqwqZo
c82TjwF8Lg4IDqQsDEul+qqev8cZn8Cp
-----END CERTIFICATE-----
Generated at Sun May 3 17:53:57 2026 by rpki-client