Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/990b6005-f47a-389e-bb09-263ee4b5d148.roa
File:                     990b6005-f47a-389e-bb09-263ee4b5d148.roa (raw, json)
Hash identifier:          bIcO4RsHomM8tJ793qJdI1WX79AUAfVdy1cjzRANsEs=
Subject key identifier:   9D:68:7E:BC:3D:6D:DF:7D:8D:88:9D:4E:7B:B0:B1:0E:84:D0:2D:54
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E370B10BA7DB534A00352B760
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/990b6005-f47a-389e-bb09-263ee4b5d148.roa
Signing time:             Thu 18 Jun 2026 18:00:16 +0000
ROA not before:           Thu 18 Jun 2026 18:00:16 +0000
ROA not after:            Wed 16 Sep 2026 18:00:16 +0000
asID:                     54113
IP address blocks:        140.248.114.0/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:0b:10:ba:7d:b5:34:a0:03:52:b7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 18 18:00:16 2026 GMT
            Not After : Sep 16 18:00:16 2026 GMT
        Subject: CN=f97a4d12-e6af-43f8-979a-52dfc82e71b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ee:f5:27:8f:42:b6:5b:a5:13:e1:1c:ea:80:
                    9a:e4:3d:84:35:03:10:56:e4:33:b2:f6:39:c8:6c:
                    81:f1:63:d3:51:60:8d:8f:e3:87:62:ab:cc:87:ee:
                    83:ef:31:46:8a:bd:56:0c:45:3f:d1:72:ef:50:74:
                    8f:20:6b:07:79:3f:5e:e0:79:98:ad:16:b1:fe:3b:
                    c0:29:c4:61:1d:00:8f:74:be:66:31:39:4b:20:df:
                    4e:8b:bb:1d:0f:5d:d4:5b:ab:10:8b:72:9f:78:57:
                    9f:af:f4:57:14:0a:eb:c9:37:71:46:64:af:87:38:
                    1e:c6:21:3e:76:64:eb:48:b0:a4:26:de:06:6c:7d:
                    c5:21:b6:ef:c0:67:60:27:20:94:57:b7:41:48:0e:
                    ff:f5:29:c8:5f:04:bf:c5:57:6c:8f:f8:e2:12:4c:
                    4c:e6:97:60:16:e9:5f:63:e2:e0:27:5f:0b:b5:0e:
                    e6:9b:24:fe:bd:6a:4c:09:89:40:d1:d2:70:e3:6e:
                    27:74:7a:b9:60:ce:06:2d:56:be:ab:17:b4:32:62:
                    5c:cc:69:36:13:62:a8:7f:64:63:c7:24:10:89:9b:
                    08:b6:79:5d:ac:24:8e:49:09:ae:4c:1a:85:64:3c:
                    d1:a1:52:da:e3:ed:7e:cc:74:4b:7c:4f:3d:bf:47:
                    f4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:68:7E:BC:3D:6D:DF:7D:8D:88:9D:4E:7B:B0:B1:0E:84:D0:2D:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/990b6005-f47a-389e-bb09-263ee4b5d148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.114.0/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:22:5b:96:c6:42:58:d9:64:e4:ff:38:0c:5b:13:4e:69:f6:
         5e:0d:ef:e1:fc:0a:6d:c2:d8:ff:89:61:25:d6:cb:26:c9:c9:
         46:23:27:eb:3e:5e:6a:48:b1:e0:5e:ad:1c:6a:9c:86:4b:01:
         fd:a1:3d:26:9b:b0:de:43:4a:80:2a:38:97:99:5e:b3:db:d0:
         2f:ab:71:3e:75:eb:c9:20:36:0f:f8:f1:58:69:98:0f:fd:1d:
         bb:b0:f4:20:d6:ad:41:1a:e4:f9:99:15:89:3a:f8:4c:6d:a7:
         31:a6:dd:9f:05:9c:48:d3:04:dc:2e:fe:9c:80:cf:58:97:6e:
         ef:38:90:be:4d:f7:13:67:50:0d:d3:1d:f1:ab:19:8e:c5:44:
         d6:c8:5c:4f:86:f7:2e:aa:4a:52:1b:4b:ad:2e:26:f9:f9:f4:
         e4:af:4d:2b:f9:cd:95:bc:72:be:bd:62:75:91:6b:0a:d1:53:
         85:43:d5:2a:de:c6:dd:4c:0d:f1:1f:0c:ce:54:d2:51:b9:31:
         03:d0:11:41:30:ae:bd:27:16:62:cd:74:cb:a9:04:49:58:90:
         ec:f7:e8:67:6a:9a:c1:d8:e6:c1:a5:31:59:fe:3c:c8:5b:06:
         ef:63:3d:d6:72:a3:85:f4:5a:8a:5c:8c:91:3a:c4:23:55:cf:
         9d:ab:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 06:58:58 2026 by rpki-client