Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/98c25ee8-246b-3b15-bdc8-29c673658cbf.roa
File:                     98c25ee8-246b-3b15-bdc8-29c673658cbf.roa (raw, json)
Hash identifier:          0tbYrez5y83Dm0K9Th4bs79KGRMgs/kGD9+lulILpY8=
Subject key identifier:   88:55:B7:B7:D4:8D:92:3D:9F:3F:E1:6F:69:9A:90:F9:F4:38:CC:56
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A599F3C19AE3D93D806780
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/98c25ee8-246b-3b15-bdc8-29c673658cbf.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        140.248.253.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:99:f3:c1:9a:e3:d9:3d:80:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=92c36314-9f3d-4189-a3b9-9c499eb1d153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:6f:64:66:44:50:c2:db:68:5b:15:b2:4f:
                    89:cb:4f:70:30:3a:01:ef:7a:db:17:fe:fb:13:94:
                    d8:91:2a:f9:9b:be:38:c3:0f:be:6f:78:a3:a4:dc:
                    05:0a:c5:06:4c:99:50:c0:76:39:3a:02:a7:50:c6:
                    e8:1b:30:7f:b8:57:09:e6:fe:c8:95:69:6e:c1:ec:
                    18:05:e7:fe:54:8d:4d:89:b2:82:b2:de:e6:72:38:
                    f5:d2:c9:75:79:b1:8e:87:69:8b:bb:0e:92:df:fe:
                    f4:70:a0:15:79:cb:4a:26:c1:96:82:b4:25:bd:63:
                    8b:fd:2d:3f:98:59:49:ba:c2:d8:1b:31:95:58:d4:
                    cf:30:35:33:2b:95:dc:b5:ef:09:dd:60:74:4a:b3:
                    ad:10:e2:93:a2:37:1b:9c:22:54:00:bd:46:70:da:
                    cb:02:bf:66:7e:ef:a6:12:fe:57:92:2c:05:70:1d:
                    f9:c9:d5:31:79:f7:e1:00:bb:0b:43:90:6b:81:38:
                    47:e4:d1:98:b4:ef:01:3d:b2:9e:10:dd:68:e3:2d:
                    6b:87:97:4b:b7:c1:ee:c0:1c:9b:23:45:ae:3e:d4:
                    0f:53:94:33:b2:cb:8c:78:22:ba:72:67:83:97:6d:
                    9b:96:85:64:16:d1:69:11:9e:74:0b:86:7e:ea:40:
                    89:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:55:B7:B7:D4:8D:92:3D:9F:3F:E1:6F:69:9A:90:F9:F4:38:CC:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/98c25ee8-246b-3b15-bdc8-29c673658cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.253.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:a1:d4:63:96:49:a8:d0:79:fc:2c:eb:18:66:82:b5:57:
         20:b9:84:aa:24:c1:3b:f7:b2:4c:49:e5:17:f9:88:fc:73:85:
         81:b7:5a:b0:d4:ef:e4:3b:e1:e6:16:da:2d:98:93:bc:be:ea:
         52:e9:16:1f:7e:94:b6:43:0f:6f:39:9d:fc:68:cc:72:1b:3f:
         e7:a4:24:0a:81:74:48:f1:67:d5:81:b5:79:d7:df:99:41:98:
         53:e2:1f:57:dc:e5:11:f2:46:45:84:2b:17:bc:f9:b8:29:f1:
         6f:be:84:f8:57:14:6e:6c:db:19:e6:85:7c:bb:a1:90:30:1f:
         9c:2f:38:0c:71:50:4d:ea:7b:05:96:23:3f:e5:aa:d1:dd:ab:
         89:19:b3:c8:70:1b:28:49:2b:a0:aa:94:96:e8:2a:c5:95:fc:
         ff:b0:7f:db:f4:47:f4:0a:96:56:e9:60:75:1d:00:ab:3a:76:
         5c:71:0d:2a:5a:09:b6:45:d6:0e:35:37:58:d7:cf:73:8b:96:
         f7:50:8b:a7:3b:b6:3c:c9:47:ae:88:5e:24:e0:f0:57:bb:97:
         ef:0d:b8:a6:7b:a1:90:03:5a:3c:c0:f1:4e:af:ea:40:f0:5e:
         43:51:22:c6:82:e9:97:27:1b:af:06:d3:a4:63:b6:c4:6f:0e:
         b7:0c:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:55:34 2026 by rpki-client