Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9487ccb-1f17-30c5-9e67-7b8da6bf2cd5.roa
File:                     a9487ccb-1f17-30c5-9e67-7b8da6bf2cd5.roa (raw, json)
Hash identifier:          RoJQVGxdrjr/khklXvSzHH0JofBACqcA6eW5Z3lX1Os=
Subject key identifier:   AD:7F:17:BF:94:93:44:82:99:18:BE:3C:D3:39:5E:79:6E:AF:52:92
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A59F6B74621912843F2660
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9487ccb-1f17-30c5-9e67-7b8da6bf2cd5.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        140.248.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:9f:6b:74:62:19:12:84:3f:26:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=09232072-d009-480c-9610-dd4bc3e875c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:f2:e7:29:24:b2:db:44:29:1c:5b:29:71:
                    a6:81:f4:ed:93:6d:36:f9:43:64:cf:bf:dd:7c:74:
                    2a:b3:46:6c:c7:49:bd:da:a6:2d:df:27:a5:ea:0e:
                    6e:56:d9:fc:e1:b2:b1:02:f7:ae:38:be:34:86:e5:
                    ae:01:fd:5b:28:36:2e:c5:8f:32:52:5f:a5:cf:87:
                    a8:c8:25:76:08:73:ce:9e:d8:12:99:bf:a0:84:95:
                    4a:8f:29:dc:e0:a3:9d:0a:8b:d1:a7:5b:c0:b1:57:
                    54:4c:cd:8e:15:42:9f:d2:db:cf:e8:d9:c6:3c:88:
                    89:01:5d:8d:20:84:bf:51:f3:fb:cb:48:c9:3e:83:
                    be:82:bf:93:a0:b0:0a:2c:ff:56:c8:a6:cd:6b:10:
                    71:0c:23:7e:fa:52:6f:a4:5e:71:ef:3a:0c:e0:e0:
                    5c:78:2f:3b:61:1c:a1:f5:0f:6e:4c:8d:80:80:42:
                    32:b5:a8:24:d2:5a:58:0d:b8:15:ab:30:74:9b:b1:
                    bf:0e:28:5f:70:53:fd:c2:2b:72:84:9d:9d:c4:a1:
                    b1:28:80:6b:b2:0a:f5:05:0a:31:58:3e:c0:e4:88:
                    08:d6:30:d5:ed:f5:5b:ba:d2:6b:6e:95:18:62:72:
                    93:ef:a9:42:5a:22:3d:97:b0:99:80:ce:17:ed:d3:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7F:17:BF:94:93:44:82:99:18:BE:3C:D3:39:5E:79:6E:AF:52:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9487ccb-1f17-30c5-9e67-7b8da6bf2cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:9b:b3:21:a4:5c:5a:66:7e:0f:07:1b:7a:76:2b:fa:10:30:
         a6:ee:c7:86:b8:20:80:16:81:01:8d:c2:db:da:96:8f:cb:3e:
         d6:de:02:73:85:30:bd:3d:a6:1a:bb:27:b8:fc:69:93:41:69:
         aa:06:dd:4a:4d:6e:44:3c:ce:79:54:ba:26:89:f4:c3:f3:a8:
         78:a6:b9:02:70:43:3d:fd:76:a3:cb:49:6d:91:97:e0:37:01:
         e9:5c:3a:fc:9f:b7:98:ba:11:bb:98:98:15:1f:45:e1:1a:6f:
         66:96:c0:98:7b:d7:e2:4c:ba:6e:63:83:ae:fe:92:9a:0f:9b:
         06:12:43:ae:ef:94:e3:c6:a6:2c:9b:71:aa:f5:b3:05:99:36:
         1c:d6:8d:ee:91:e5:ce:1a:dd:85:92:42:8e:7e:21:db:24:3e:
         0d:00:e1:38:54:12:7c:db:a0:f3:89:3a:d6:c9:fe:a4:12:9b:
         19:41:9d:c1:14:b9:74:bf:4b:36:8a:49:c8:2b:f7:de:70:54:
         06:94:38:66:2e:a2:6b:52:d1:a6:68:67:80:43:62:1e:a2:51:
         d0:46:6f:56:f8:aa:41:44:52:50:a7:f1:db:7d:b5:f4:3b:0d:
         01:d3:9d:f4:3f:09:88:e8:8f:31:bf:80:c8:4e:dc:3e:04:4a:
         13:da:bd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:53:47 2026 by rpki-client