Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4a92224d-5bab-3ca0-b36a-a35f767d0520.roa
File:                     4a92224d-5bab-3ca0-b36a-a35f767d0520.roa (raw, json)
Hash identifier:          ARI8HkW5zP93iKrugiFb+gq1cmEIP9dWOhKhkB8+Q8g=
Subject key identifier:   DA:F7:1F:46:5C:5A:AC:ED:AB:4F:39:05:31:7C:15:25:E3:27:69:5E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F1CC7C91B1999B5E898D47180
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4a92224d-5bab-3ca0-b36a-a35f767d0520.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     54113
IP address blocks:        140.248.121.6/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:c9:1b:19:99:b5:e8:98:d4:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=a4c6dfbc-887f-438d-a455-c56a16ef68fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:2b:83:24:dd:51:0a:6a:48:d1:f4:a8:66:
                    6d:b4:6a:e6:fe:ec:f2:eb:83:c7:b3:c7:cb:b8:6d:
                    bd:92:b7:64:7f:b7:5f:8f:66:4c:d1:ff:2a:c4:91:
                    cf:54:bc:f3:73:2e:42:d1:6f:96:07:ef:86:52:f0:
                    6d:f4:d6:f1:80:e9:64:f8:e6:0d:8a:6f:7f:41:0d:
                    82:3b:24:99:c5:1b:06:ba:54:24:d6:46:d1:09:16:
                    c2:76:1b:89:47:03:e5:3c:48:6f:e4:3e:89:1c:2b:
                    29:61:dd:a0:6c:39:ea:44:c9:a2:2d:01:ed:08:1b:
                    00:ce:a4:b1:72:a0:b0:10:0f:de:f2:3e:40:97:0e:
                    af:18:45:cd:92:9e:b9:43:e8:4d:ba:61:42:91:14:
                    52:e8:b3:d4:4e:17:3f:61:c4:38:d4:fd:16:8b:5e:
                    e5:c4:27:99:c7:0b:25:99:2c:6a:80:77:15:73:92:
                    a5:54:c6:df:8b:b7:5a:83:4c:9b:2f:7f:33:01:46:
                    c0:8d:32:ce:0f:59:2a:46:f8:3e:0f:f5:fe:40:31:
                    0d:00:e9:aa:dc:98:bc:15:f6:99:9c:f0:e7:8a:68:
                    0e:2d:da:72:d7:e7:59:c5:38:69:cf:3a:16:32:c7:
                    70:31:9b:d6:47:5c:4a:58:52:f8:94:d4:b4:ea:0c:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F7:1F:46:5C:5A:AC:ED:AB:4F:39:05:31:7C:15:25:E3:27:69:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4a92224d-5bab-3ca0-b36a-a35f767d0520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.121.6/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:87:af:ba:8a:a3:35:ea:96:65:6d:25:89:3a:c2:c4:89:05:
         ae:c8:7d:4a:9f:db:d8:51:e2:e8:db:97:09:11:67:a1:b8:aa:
         dd:af:52:57:c2:90:5e:ad:14:99:a2:1b:f7:17:fe:35:3d:2d:
         ac:3f:da:db:a9:b6:33:72:bc:1e:3d:d3:3a:15:5f:03:8d:de:
         97:31:a5:c5:69:a1:bc:bf:18:5c:08:bc:9b:c9:b7:d2:7a:b1:
         cc:78:32:0f:e3:48:39:e5:eb:ef:74:c8:2e:19:40:31:cb:9c:
         0c:25:7a:e1:ae:d8:8c:35:2b:5e:12:05:91:9a:ca:6c:86:9a:
         2b:e6:5a:b7:24:22:ab:b9:88:c0:17:9b:5a:fb:f6:8d:81:e5:
         a2:47:21:1e:d9:cc:05:a9:1a:1f:46:ac:70:fd:94:be:69:54:
         17:e7:2b:61:7e:62:c8:e6:ec:89:a3:3d:a7:e0:0d:d1:fe:77:
         1a:31:25:85:86:57:bd:e8:c1:dc:e7:d6:2c:a5:bf:ca:d9:39:
         1b:36:14:49:b7:9a:91:6d:8e:75:91:9a:17:e7:f4:36:1b:d7:
         f4:b6:e9:46:8a:3c:e5:0a:c6:38:05:65:1c:93:5d:fe:70:3e:
         42:cc:27:4b:2d:15:28:29:f9:ba:ac:14:44:17:92:3d:ad:f1:
         17:03:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:44:21 2026 by rpki-client