Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a4a45bb9-1b1c-3a4e-a86f-02a35d669a38.roa
File:                     a4a45bb9-1b1c-3a4e-a86f-02a35d669a38.roa (raw, json)
Hash identifier:          rzfdgNuutSoXZvDXxwJQ4G8B4CFJ3FcEsEmLuup9lQk=
Subject key identifier:   47:3A:AF:99:9B:E7:CC:41:FF:8B:96:FC:9F:CD:A7:E5:21:78:43:94
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F1CC7A055FD37ECDFE0B48500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a4a45bb9-1b1c-3a4e-a86f-02a35d669a38.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     54113
IP address blocks:        140.248.106.64/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a0:55:fd:37:ec:df:e0:b4:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=e992bd2d-c3da-40e7-b9cb-e11d83859414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:1e:d0:90:fe:e6:0d:58:d1:9c:7a:70:54:
                    a4:88:7c:72:9b:18:e3:76:05:e6:f4:f8:ae:67:56:
                    22:cf:17:be:78:32:8e:8b:c0:dd:bf:56:f9:38:d4:
                    a9:ad:a9:5e:07:a4:34:f5:5f:ad:ff:a4:9d:8a:63:
                    24:30:77:cd:07:af:0b:b6:60:ed:4f:9b:5f:68:f7:
                    fb:c5:29:fc:97:fb:2d:89:41:a5:b9:73:e7:c1:b9:
                    47:94:67:a0:47:f8:56:3b:42:bf:05:ef:56:fa:49:
                    34:1a:c4:9a:1a:ab:84:04:b9:18:9b:f1:9a:96:15:
                    98:2f:d4:c4:60:19:66:d1:36:b2:ed:4a:4b:30:48:
                    53:a4:d2:aa:d0:1d:5f:e6:d1:ed:fc:b8:d4:86:55:
                    b3:f8:59:a5:30:7a:ef:ce:5a:99:c1:09:48:87:2e:
                    9a:e7:79:1c:f2:db:32:6b:c1:28:5a:2a:bf:c5:3c:
                    9d:c2:d3:a6:66:0f:5e:6b:0c:bb:89:f2:75:a5:77:
                    6c:dc:f6:7e:01:92:74:ba:1e:60:1b:52:25:3d:59:
                    1b:01:6c:b8:83:ec:e1:a1:25:b1:6b:52:6b:30:8d:
                    97:55:7a:40:e1:36:a8:ef:9f:fc:90:9a:de:b2:ba:
                    55:5f:9f:9e:fb:17:fa:42:33:68:4c:74:56:22:88:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3A:AF:99:9B:E7:CC:41:FF:8B:96:FC:9F:CD:A7:E5:21:78:43:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a4a45bb9-1b1c-3a4e-a86f-02a35d669a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.106.64/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:37:03:62:4b:8a:47:fe:af:d4:85:1d:f2:1e:0d:53:2b:00:
         88:cd:9e:c4:a9:35:0c:a6:e6:1e:ca:9b:03:1c:6d:56:28:92:
         58:a2:a2:38:73:c6:a1:05:20:0c:bc:7c:70:88:82:06:5b:96:
         14:85:eb:40:aa:45:fb:41:6c:58:bb:3a:02:b5:03:a0:bf:ba:
         2c:27:2a:fd:1b:65:cf:39:75:12:2f:54:e3:ca:c7:5e:6a:c6:
         a1:bf:34:6c:6a:d0:77:1d:2a:5d:fa:e6:07:24:f5:48:0d:7e:
         81:49:69:5f:da:9a:b3:ba:ac:1e:ca:6e:df:10:e6:fe:98:6c:
         31:36:c2:7a:2c:c5:6b:2d:86:bc:51:00:5b:e5:16:41:6b:25:
         ad:81:70:61:b6:0b:bb:08:3b:ae:cf:c3:68:9e:ed:f6:81:82:
         4e:02:84:4b:69:a7:e2:04:d3:09:2b:2d:50:33:f9:80:8a:7d:
         29:8a:8a:39:16:c6:07:d9:97:e0:46:f7:5d:06:72:b2:03:6d:
         c7:69:da:d1:2c:3c:b3:d6:98:d8:5b:d4:f1:29:ee:0f:a6:d2:
         c0:1b:aa:80:2c:63:93:67:77:e9:e5:41:5c:8c:89:39:f8:8a:
         a3:f9:0e:bc:80:0e:59:8c:ed:97:e2:02:ca:d5:4e:5d:c8:b4:
         91:a8:c4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:38:59 2026 by rpki-client