Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3cc9d7f-ebe4-3d59-97f6-ff66d6703411.roa
File:                     a3cc9d7f-ebe4-3d59-97f6-ff66d6703411.roa (raw, json)
Hash identifier:          gSsWRM5ZhYlP+tILGL0bxu65UBkDdliuHNb2wGwP+cE=
Subject key identifier:   A9:5F:C5:99:15:57:0C:52:36:0A:0D:48:67:5C:E4:78:E6:92:3E:43
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E3175AE9DB10772705838F680
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3cc9d7f-ebe4-3d59-97f6-ff66d6703411.roa
Signing time:             Tue 16 Jun 2026 18:00:14 +0000
ROA not before:           Tue 16 Jun 2026 18:00:14 +0000
ROA not after:            Mon 14 Sep 2026 18:00:14 +0000
asID:                     54113
IP address blocks:        140.248.115.3/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:75:ae:9d:b1:07:72:70:58:38:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 16 18:00:14 2026 GMT
            Not After : Sep 14 18:00:14 2026 GMT
        Subject: CN=b4667395-f12c-42fc-8f0d-a32a048a8630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:50:43:cb:d3:86:df:65:94:cd:b7:a7:70:6d:
                    76:c7:c1:67:7f:4d:eb:ae:07:9b:dd:74:86:2f:33:
                    66:de:2d:5d:20:34:ee:58:d7:d8:0f:8a:9c:9b:a5:
                    fd:95:3e:75:e7:b8:3c:d0:7c:cd:d3:07:33:8b:10:
                    9c:96:59:03:6d:71:ee:db:7c:93:3b:09:3b:ba:08:
                    d1:94:bf:3d:e9:b2:66:d4:37:c4:8e:9d:ae:f8:a7:
                    6a:66:e7:61:ea:81:98:cd:c3:48:4f:7c:c6:45:ca:
                    c2:af:2e:7d:d5:1c:ce:16:2b:de:7e:bb:0d:13:ab:
                    4e:f3:9c:60:21:8e:65:2e:15:73:1d:80:f1:59:e9:
                    7e:ed:98:43:bc:3b:d3:21:a0:d1:4e:02:ae:49:c4:
                    ca:fd:a7:ee:6d:6c:4a:c4:a9:80:2b:5a:3a:36:1f:
                    70:4f:43:c6:9e:5d:28:13:c4:fc:40:9b:da:4b:1f:
                    f5:c9:e1:56:4b:2a:54:58:00:33:c7:a9:89:74:64:
                    98:cb:ff:ed:d3:f0:ea:28:03:90:f3:01:d3:87:99:
                    04:22:c5:57:35:f9:94:cd:59:39:a6:9f:fc:37:b7:
                    e1:32:ef:f6:e3:cc:ef:61:f8:0f:ca:f7:82:09:e1:
                    5b:00:7b:64:ce:13:cb:56:6a:6c:34:37:2d:4b:39:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5F:C5:99:15:57:0C:52:36:0A:0D:48:67:5C:E4:78:E6:92:3E:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3cc9d7f-ebe4-3d59-97f6-ff66d6703411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.115.3/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ce:96:e2:4b:c6:5a:82:03:9d:55:f6:e2:6e:28:cd:84:d9:
         cb:87:df:2b:ca:93:66:ba:bf:56:1a:25:09:79:49:e2:1d:aa:
         53:19:35:e4:72:0c:75:fd:df:0f:30:1d:b0:4b:e2:bf:30:5f:
         6f:e1:36:f2:bc:eb:81:4e:4d:e6:6f:96:22:74:2a:ac:a6:a6:
         7f:74:ff:d5:e4:3f:f2:4d:c6:37:18:2f:28:a1:50:c3:53:ef:
         6c:8b:f6:c6:0c:82:15:1b:33:20:92:3e:e5:02:d6:66:82:d3:
         e2:ee:c4:cb:ce:ed:d6:6b:2c:74:0f:df:59:2a:f8:4d:ae:7a:
         1c:3d:a8:a2:40:b4:36:d1:38:f8:40:8a:1e:da:41:49:98:c8:
         75:6a:d6:c1:ef:f1:1f:a6:9a:dc:13:2e:6f:57:cd:1c:92:66:
         32:0c:1a:61:c1:25:28:c1:af:e0:d0:fe:36:e0:7c:fb:27:99:
         40:e2:25:ec:ad:13:07:12:f6:15:0d:27:d8:1c:81:d3:fb:34:
         82:30:85:f8:24:0a:3d:df:dc:ff:a9:7b:d6:18:f1:6a:9f:5a:
         73:6a:48:a9:32:12:79:d7:80:ad:92:b1:5d:ec:2d:bf:85:4a:
         fe:e3:64:68:5c:3c:9a:99:99:c4:ef:8b:1b:20:43:68:1b:03:
         90:47:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 06:59:07 2026 by rpki-client