Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac62f026-1588-32b6-9174-126749ed8355.roa
File:                     ac62f026-1588-32b6-9174-126749ed8355.roa (raw, json)
Hash identifier:          pQu2XQ/Q+AVFdatWQpJHGCWwkTFEG8qyZ451afohr5w=
Subject key identifier:   73:3E:31:2C:55:7E:7A:2B:B3:3C:05:F9:43:6E:B7:C4:20:7D:E5:B4
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A59CEF934B40C798756F80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac62f026-1588-32b6-9174-126749ed8355.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        140.248.249.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:9c:ef:93:4b:40:c7:98:75:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=d03bfeb9-0444-45d1-90cb-bc3f69d442ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:be:ae:bd:b7:fb:62:ee:cd:41:5d:32:9e:
                    b1:3e:ca:fc:77:14:81:aa:82:92:f6:da:30:cd:54:
                    7e:f5:1d:4b:03:11:2c:68:ca:38:29:ba:62:10:95:
                    e0:c2:da:61:7b:d4:60:41:19:e8:4a:41:20:03:39:
                    ab:44:3f:84:b6:93:2f:86:96:31:cf:90:e4:59:d1:
                    0e:9a:6c:c6:f3:e2:30:82:4c:ab:a8:6d:7c:5c:9c:
                    55:d4:15:e0:7e:c7:e6:9e:5a:d4:20:13:8c:2b:bd:
                    a9:fd:61:ed:b7:f9:3b:4a:a7:50:cf:13:95:bb:68:
                    e6:d3:59:c9:cc:d3:d5:a0:b2:0b:a5:d8:04:80:0c:
                    8f:9f:f6:22:0a:3f:1e:6e:11:92:90:4a:38:73:c5:
                    19:94:7e:98:ba:08:a5:00:ee:58:49:e4:15:ea:77:
                    2e:1b:1f:e8:9f:ff:9a:a7:f1:9a:9a:b2:ba:45:83:
                    04:f0:41:71:ab:50:c0:51:2d:1a:55:64:5b:4d:cd:
                    19:fd:85:ac:1e:c1:b2:b4:0b:4d:eb:c8:77:ab:22:
                    af:f3:8e:8c:62:2d:98:a3:f6:1b:89:2e:eb:f0:1d:
                    f6:28:1b:08:70:1f:a7:96:dc:04:d6:18:c3:46:33:
                    1c:31:a6:ea:bc:6a:04:98:3f:15:56:75:4e:89:48:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3E:31:2C:55:7E:7A:2B:B3:3C:05:F9:43:6E:B7:C4:20:7D:E5:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac62f026-1588-32b6-9174-126749ed8355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.249.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e5:6a:6e:69:ad:89:8f:09:50:c1:6a:7f:ce:9e:3b:3f:1a:
         c2:8d:23:ac:ca:2a:a0:81:29:4a:d2:d5:4c:8b:22:b6:f2:db:
         95:76:46:1d:f8:33:5b:62:8b:ae:1e:d7:6d:61:06:08:63:37:
         c8:fd:f5:be:d7:b7:e3:1f:0e:a5:fc:60:5d:b2:f0:23:65:81:
         b7:49:69:24:6c:47:69:57:e2:99:53:40:f3:ba:fc:19:00:d2:
         79:72:7f:69:b8:01:d6:bb:b4:dc:f0:2d:b7:af:09:4b:12:77:
         32:b7:81:f5:e0:06:13:9b:4c:06:fd:dc:38:73:e7:04:10:01:
         7d:23:ba:c1:d6:ea:11:81:9b:9d:0c:f5:1e:bd:cb:a8:0e:a5:
         3f:62:d4:86:f8:45:ab:1a:91:23:29:c6:03:bd:7b:43:a7:2a:
         df:d0:f9:e8:0d:e2:89:1f:03:58:13:1a:d9:f4:e8:1f:9d:62:
         f2:90:65:d7:bd:04:ed:14:e8:48:25:50:32:ac:c8:68:c7:b0:
         33:3c:fc:93:3d:69:da:a8:10:58:10:77:da:22:e0:3c:cb:5d:
         f8:a4:28:cc:c8:8f:01:c6:06:76:9b:b1:b5:34:36:b6:33:4f:
         30:a1:42:f3:4f:f0:96:01:bb:3e:ff:20:0f:45:f4:15:02:24:
         4c:3d:f6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:56:21 2026 by rpki-client