Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4be0ca6d-cc20-3716-8d69-d08700b16f51.roa
File:                     4be0ca6d-cc20-3716-8d69-d08700b16f51.roa (raw, json)
Hash identifier:          UAcOa0tsXKJQf3JOIwZQPssz+kBd7+GIUOaaGpsKaMA=
Subject key identifier:   A6:50:BB:C8:76:7A:42:79:EF:8A:0E:DF:1F:A4:EF:C7:E0:D3:DA:09
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584EB417039C4EE372528FD28C80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4be0ca6d-cc20-3716-8d69-d08700b16f51.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     54113
IP address blocks:        140.248.108.56/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:17:03:9c:4e:e3:72:52:8f:d2:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=9c24a58a-460c-4bff-9dcb-5b3286eac144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:b7:33:d0:7a:bd:12:e8:01:94:fa:77:7d:
                    9e:7e:63:03:8a:0e:a3:b7:06:e2:76:f5:66:f4:65:
                    de:38:0d:b7:42:4b:f7:58:28:55:90:0a:d8:12:27:
                    93:3c:9d:96:57:0b:6b:a4:4d:0c:04:9b:52:f3:aa:
                    03:eb:0f:9d:30:5f:be:df:a5:45:75:ca:d2:eb:1d:
                    dc:3f:62:72:a2:d8:7c:95:ef:4e:fa:fd:13:a6:9e:
                    b5:f0:39:29:35:e3:f9:18:a2:1d:4f:ce:7d:02:f3:
                    c9:e5:b8:91:b2:88:f4:97:f5:eb:38:83:a9:e0:35:
                    97:ad:bb:9e:13:b1:70:28:39:26:82:b9:43:4b:36:
                    3c:5e:33:f0:fd:94:04:62:38:8c:d8:21:b5:2b:de:
                    6b:d7:76:4a:ff:69:d9:88:ef:ca:7c:84:6b:a6:64:
                    2f:48:b6:ea:d6:e7:32:56:3f:09:6a:cb:e8:8d:ea:
                    6b:fe:a0:ed:78:c1:df:0a:b2:3e:86:f8:54:2d:a9:
                    23:0f:5f:9f:e6:de:87:84:cd:13:8d:0e:f6:59:66:
                    fa:fa:6a:36:c1:f2:f7:11:c8:c9:8f:21:8c:0e:ed:
                    d9:a0:da:f0:d3:cf:ae:60:5f:40:94:c6:6c:68:30:
                    05:7b:c4:4a:2e:8e:81:0e:99:52:25:d6:68:0e:c9:
                    4a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:50:BB:C8:76:7A:42:79:EF:8A:0E:DF:1F:A4:EF:C7:E0:D3:DA:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4be0ca6d-cc20-3716-8d69-d08700b16f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.108.56/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:51:e1:94:98:3e:5a:c9:eb:b2:ee:93:af:41:10:69:5d:76:
         bf:e5:a2:d4:e8:32:30:25:65:da:e0:d1:01:7a:e1:58:1f:06:
         6d:7d:42:c3:ce:90:b3:48:c2:3c:da:a4:a9:5f:c9:11:56:48:
         e8:bb:20:a1:73:2b:54:08:4b:e8:93:8c:06:3d:f2:f8:50:b3:
         c8:87:a9:a0:29:17:fc:83:ee:11:f7:e9:08:2a:0d:9c:86:29:
         a0:f9:35:b5:e1:dc:ef:ec:5a:57:22:1c:b6:9d:6f:6c:66:81:
         67:5b:f1:2c:0d:12:e6:52:56:9a:55:23:e4:9c:e9:66:ac:b8:
         28:89:be:65:bd:2a:ba:f9:9a:66:4c:e8:86:2c:8c:42:d7:8a:
         cd:15:43:25:aa:5e:04:2b:3a:44:ad:36:51:31:e9:40:c5:29:
         08:05:cc:a4:63:5b:34:ca:47:18:be:94:c6:63:1c:9d:97:eb:
         a9:d3:3c:26:4c:9b:ad:1c:40:5c:57:b3:99:cf:0d:6d:58:00:
         3e:ef:23:98:2f:22:e6:2d:8c:51:9a:2d:ba:3f:e7:63:90:13:
         49:90:df:5f:e9:f3:79:ec:61:76:0a:24:67:46:1b:4b:32:e4:
         c8:ca:b2:86:56:06:c9:f2:87:3c:9c:c5:82:7c:20:d7:65:03:
         4f:cb:cc:26
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE60FwOcTuNyUo/SjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDgwMjEzMDAxMloXDTI2MTAzMTEzMDAxMlowLzEtMCsGA1UEAxMk
OWMyNGE1OGEtNDYwYy00YmZmLTlkY2ItNWIzMjg2ZWFjMTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVS3M9B6vRLoAZT6d32efmMDig6jtwbidvVm
9GXeOA23Qkv3WChVkArYEieTPJ2WVwtrpE0MBJtS86oD6w+dMF++36VFdcrS6x3c
P2Jyoth8le9O+v0Tpp618DkpNeP5GKIdT859AvPJ5biRsoj0l/XrOIOp4DWXrbue
E7FwKDkmgrlDSzY8XjPw/ZQEYjiM2CG1K95r13ZK/2nZiO/KfIRrpmQvSLbq1ucy
Vj8Jasvojepr/qDteMHfCrI+hvhULakjD1+f5t6HhM0TjQ72WWb6+mo2wfL3EcjJ
jyGMDu3ZoNrw08+uYF9AlMZsaDAFe8RKLo6BDplSJdZoDslKAQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKZQu8h2ekJ574oO3x+k78fg09oJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNGJlMGNhNmQtY2MyMC0z
NzE2LThkNjktZDA4NzAwYjE2ZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDjPhsODBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCUUeGUmD5ayeuy7pOvQRBpXXa/5aLU6DIwJWXa4NEBeuFYHwZtfULD
zpCzSMI82qSpX8kRVkjouyChcytUCEvok4wGPfL4ULPIh6mgKRf8g+4R9+kIKg2c
himg+TW14dzv7FpXIhy2nW9sZoFnW/EsDRLmUlaaVSPknOlmrLgoib5lvSq6+Zpm
TOiGLIxC14rNFUMlql4EKzpErTZRMelAxSkIBcykY1s0ykcYvpTGYxydl+up0zwm
TJutHEBcV7OZzw1tWAA+7yOYLyLmLYxRmi26P+djkBNJkN9f6fN57GF2CiRnRhtL
MuTIyrKGVgbJ8oc8nMWCfCDXZQNPy8wm
-----END CERTIFICATE-----
Generated at Sat Aug 8 00:03:49 2026 by rpki-client