Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ad8b3a33-5d11-3a8d-930d-dba5952c65a7.roa
File:                     ad8b3a33-5d11-3a8d-930d-dba5952c65a7.roa (raw, json)
Hash identifier:          sDtTHNQsEM+jJkiS4kNzOakMdE9cUWG8RY7M8kLmw54=
Subject key identifier:   14:14:E5:D0:68:7C:C5:63:92:07:64:D9:6E:98:5A:6B:80:76:35:22
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F4985C4C837F553170AED9440
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ad8b3a33-5d11-3a8d-930d-dba5952c65a7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54113
IP address blocks:        140.248.86.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:c4:c8:37:f5:53:17:0a:ed:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a514dfa0-f411-4c43-8672-a49e7d67e56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fe:46:03:15:44:48:4d:0d:fa:0a:66:2e:03:
                    0e:76:1d:22:36:a1:60:75:c6:97:eb:eb:30:14:f6:
                    e3:3b:8f:d8:38:43:fd:56:33:20:02:c9:d0:7d:47:
                    c5:cb:2b:69:0a:f0:cf:97:40:b5:38:4d:ba:2d:68:
                    63:5f:3f:df:f2:99:e8:36:ad:d1:42:60:ba:71:81:
                    b3:36:94:b4:52:41:d7:4b:6b:1e:ec:6e:1b:ae:a6:
                    dc:c6:3a:4c:ee:3a:08:85:94:a0:06:13:3a:12:b4:
                    f4:92:f5:2c:12:d9:ba:74:f1:fd:a3:6a:60:c1:3f:
                    0b:aa:e1:fd:89:3b:3b:1c:e3:8f:45:30:61:32:d0:
                    d8:50:21:fa:b5:cf:45:3c:5b:14:45:7d:f1:fa:99:
                    d6:36:cd:59:26:5d:e1:78:b5:0a:b7:76:91:4b:08:
                    1d:66:e2:2d:cf:88:b7:74:af:26:9b:f2:1f:e0:2c:
                    14:f3:e4:40:a4:da:30:40:05:cc:de:66:c4:a5:6d:
                    f0:cf:31:03:16:f2:0c:2b:e1:75:42:2f:0a:aa:fb:
                    20:8a:6e:3d:54:c1:21:3c:ca:59:95:c9:af:27:96:
                    42:66:52:13:12:6b:10:55:bd:c4:64:30:96:68:89:
                    04:fb:bd:7d:28:4d:1a:9f:87:8c:1b:b8:98:aa:47:
                    73:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:14:E5:D0:68:7C:C5:63:92:07:64:D9:6E:98:5A:6B:80:76:35:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ad8b3a33-5d11-3a8d-930d-dba5952c65a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.86.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:bc:e4:2c:ea:4c:d3:d2:7c:62:2e:22:37:a5:a4:50:37:9a:
         1b:5f:f1:9c:da:0e:ed:71:8f:3f:33:83:c7:4a:19:5c:4c:b5:
         1d:5f:30:1a:91:fe:27:01:d8:6a:6a:ad:94:91:a2:09:1f:03:
         83:42:32:b4:07:3a:82:68:46:4d:89:b5:c5:62:a6:41:55:32:
         75:d8:49:6f:9f:28:3b:2b:1b:1b:71:ed:34:7f:bd:8f:4e:6b:
         d7:ad:a8:ef:ef:03:36:cc:88:20:b7:98:fd:89:72:1b:88:07:
         b5:ee:19:1f:de:5f:b5:fb:55:5b:a8:cb:9d:7d:82:15:fa:f8:
         64:58:1a:84:12:9c:7a:41:5e:be:91:c8:85:af:c9:22:00:ac:
         30:fb:7e:67:68:30:e3:ba:7a:0a:71:5b:02:3e:ca:28:db:87:
         da:40:ab:02:4c:2c:15:44:8c:15:cc:46:30:43:3b:19:cf:f2:
         08:f6:c9:7e:04:53:d8:dc:83:3f:be:53:e6:df:e4:32:df:51:
         13:b7:a7:52:07:e9:90:4e:4b:6d:3d:ce:d3:a9:d0:8f:3f:8f:
         0d:42:6a:05:b3:9b:86:95:d3:ba:05:30:b6:42:e7:5f:b0:28:
         0e:28:ec:5e:00:c1:a4:90:98:d8:de:9a:7f:53:b8:69:16:20:
         3b:f2:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:23:34 2026 by rpki-client