Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9cb432c7-d0e9-3d30-afa0-a3923ad87f74.roa
File:                     9cb432c7-d0e9-3d30-afa0-a3923ad87f74.roa (raw, json)
Hash identifier:          NC8PuJJ4tUvtVX2FIUvLbRFh1RCiBDWsjgjnaMuXoQc=
Subject key identifier:   7A:BB:45:E7:AE:E9:0A:9A:AC:C6:18:25:70:F7:8B:5A:A0:74:81:34
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F497ED47D08615B32714BD180
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9cb432c7-d0e9-3d30-afa0-a3923ad87f74.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54113
IP address blocks:        140.248.237.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:d4:7d:08:61:5b:32:71:4b:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=39a1bce7-dd59-4a56-9cca-acb91dee2931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:01:6f:f3:81:cd:43:53:be:e3:1b:46:b1:07:
                    85:6b:13:e0:bb:3d:31:c8:42:18:3d:4e:89:96:f6:
                    41:d1:75:3e:fa:dd:c8:22:bc:e2:ba:23:58:a8:e2:
                    1a:0c:bb:6a:76:02:92:ab:c9:b1:82:1b:4e:5d:6c:
                    d0:ac:cf:c2:a2:5e:45:80:a0:ac:89:cf:dd:b8:75:
                    1f:24:b4:65:23:1e:e4:53:c5:bf:ae:47:5b:93:79:
                    c0:a8:17:18:f7:fa:8f:ef:6d:2c:9c:a6:a2:e2:52:
                    48:ca:fc:7b:15:b3:25:26:c0:fc:eb:72:3c:e3:4f:
                    5a:ba:f7:55:fb:70:d1:d2:da:43:85:e9:c1:7f:1d:
                    91:95:30:c7:d0:bd:b2:c0:43:67:95:8e:ed:ea:c4:
                    e0:40:c3:37:d7:ce:b7:0d:bb:5a:82:35:f2:4d:6e:
                    4e:d5:db:1f:20:5d:a7:5a:02:ec:fd:25:52:c7:a4:
                    3e:aa:70:0c:08:9a:be:5e:67:bb:b4:0d:18:b0:7b:
                    bc:c1:08:cb:69:11:d9:c2:91:e1:67:58:aa:70:65:
                    68:d9:f9:3e:be:1f:e2:02:46:a4:42:bd:8c:63:bc:
                    cc:ed:40:41:bf:d7:c5:db:e1:1a:4c:92:68:e9:ac:
                    cd:42:b9:69:d7:3a:fd:73:8b:95:0b:6d:0f:d7:df:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BB:45:E7:AE:E9:0A:9A:AC:C6:18:25:70:F7:8B:5A:A0:74:81:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9cb432c7-d0e9-3d30-afa0-a3923ad87f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.237.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:36:04:30:8e:66:7a:db:cb:6b:9e:4d:1e:dd:0f:24:b8:c0:
         50:ca:1f:69:31:1b:2d:56:d8:66:ed:4f:df:a1:ea:18:a5:67:
         cb:df:0a:af:fd:4e:af:b7:c3:1e:02:1c:9c:c3:63:bd:d8:e8:
         e4:4a:9f:c8:17:ab:fc:d3:59:f2:fa:80:39:e9:f5:73:4d:16:
         48:30:64:8c:cf:d7:8b:59:a3:19:82:2d:2c:a8:d2:45:bc:be:
         88:4f:75:97:85:55:55:9f:c0:d0:44:3d:10:d4:b0:d5:89:00:
         a7:21:91:db:9d:91:0c:71:13:84:a4:3c:c2:c0:2f:1a:44:5c:
         91:eb:0b:c7:ea:48:55:0a:f9:09:64:9e:69:ca:15:11:fa:c0:
         19:7d:f6:17:12:e6:2a:fb:49:90:07:74:c6:3a:9a:42:d7:10:
         e5:a0:bd:6d:79:8b:4d:cd:e2:d6:f3:8a:44:f9:5c:54:1f:d7:
         ca:e9:38:16:b3:cb:53:1f:8f:97:69:01:7b:22:f1:50:5b:78:
         bd:f1:7a:8e:35:48:ee:9e:3a:8b:a7:34:8f:90:94:5f:8d:84:
         c9:53:77:86:90:49:29:16:e2:7f:7f:18:c8:1a:b4:4f:ca:9b:
         64:d3:16:35:af:0f:36:dd:85:e0:8b:b1:6b:95:1c:9c:40:80:
         bc:a4:e9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:47:23 2026 by rpki-client