Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4786d814-74ab-3a09-8133-125127a28b60.roa
File:                     4786d814-74ab-3a09-8133-125127a28b60.roa (raw, json)
Hash identifier:          z5YDcEpUp7M31WJOzh2JVBlRS08SzP8+wI2v2tMKrOU=
Subject key identifier:   A1:A9:5F:7F:C4:1D:D0:86:20:DD:0A:C9:21:7C:2E:97:9C:06:19:5E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584D9A20035A1014DBB4D4C95180
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4786d814-74ab-3a09-8133-125127a28b60.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     54113
IP address blocks:        140.248.108.32/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:03:5a:10:14:db:b4:d4:c9:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=06b7159a-01ab-4b97-ac05-a564ebc1a160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:e4:fc:ce:9a:31:53:57:8f:5a:f6:d1:fd:
                    72:97:a1:74:21:82:01:d9:ce:81:ea:78:4d:60:f1:
                    58:9d:89:9d:e6:8d:98:9e:51:24:f8:18:d0:9e:5d:
                    81:59:63:80:58:7f:fe:c7:f2:10:fb:e6:ab:31:ae:
                    a1:45:e0:11:00:af:ff:4c:61:a7:59:96:09:fd:59:
                    68:1f:32:8b:34:bd:61:de:f6:66:e7:47:80:6c:67:
                    87:4c:2b:f2:c2:3a:ce:31:46:a3:d2:b7:cd:95:b2:
                    57:25:11:2d:83:a9:1f:ca:c7:fe:f2:4c:2a:6e:73:
                    d8:64:50:f0:b2:d5:be:14:3b:fa:30:a2:8a:7b:65:
                    d7:96:cd:92:57:61:ce:cf:92:12:a6:9a:bd:ae:44:
                    e5:ba:41:aa:d1:25:7c:aa:91:7b:d6:2b:1e:7d:9e:
                    be:20:4f:29:3c:c3:1c:e7:52:22:ec:36:e0:1d:fe:
                    f3:ff:eb:02:56:d0:d4:8c:96:8d:77:95:5e:63:63:
                    67:86:f5:37:26:1f:31:6f:5f:f9:5c:6f:fa:d4:7e:
                    fa:b2:5a:f9:f5:a7:b9:81:c3:27:4f:fb:0e:da:70:
                    eb:1d:3f:98:ac:4c:9a:b4:27:63:5a:9c:cd:f3:80:
                    da:3f:58:95:3e:6f:34:fc:62:d7:62:cb:67:03:94:
                    a4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A9:5F:7F:C4:1D:D0:86:20:DD:0A:C9:21:7C:2E:97:9C:06:19:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4786d814-74ab-3a09-8133-125127a28b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.108.32/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:21:77:54:2f:c2:d2:e3:7e:f7:e1:a2:42:1a:c1:33:84:bc:
         8c:89:aa:8e:91:ee:f6:28:88:b6:50:db:60:8b:d4:10:99:0c:
         dd:61:4d:f1:58:23:d0:dd:5b:fd:be:27:ea:d7:18:93:c1:87:
         2c:7f:97:03:0d:ff:d3:84:12:6b:54:f4:34:89:19:6f:b7:8d:
         e8:4c:8f:f2:b3:ca:fb:41:55:2c:20:99:05:1e:9d:e5:d5:bd:
         4d:8b:7e:21:e5:3a:67:37:23:dc:70:b1:81:80:43:b6:3e:9f:
         f5:c3:bf:0a:6a:52:54:a7:02:12:60:cd:be:67:03:c7:52:f3:
         10:2f:2a:51:b0:a1:4a:7d:33:a4:2d:e2:6c:67:ae:5f:c2:3c:
         e8:a4:f8:bc:f2:96:39:c2:51:9c:21:13:dd:71:07:52:24:f7:
         56:eb:57:3c:dc:9c:dc:2b:5e:98:29:6c:aa:d7:e4:a0:6c:ec:
         74:be:11:c8:92:22:7d:bb:2b:30:11:99:da:a4:4f:51:64:4f:
         1f:fb:ee:2a:9f:f3:91:6f:f5:b4:00:33:59:8b:e7:2a:3c:ff:
         0d:1a:2a:53:67:d6:5f:5a:c6:9c:fe:35:63:2e:d1:d5:54:d3:
         5d:a0:62:fd:e5:74:fa:17:a7:7f:43:af:cc:5f:24:5e:bb:d7:
         fe:a8:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:56:22 2026 by rpki-client