Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b230cbb5-c6b9-393e-b0e6-083f8554eb2c.roa
File:                     b230cbb5-c6b9-393e-b0e6-083f8554eb2c.roa (raw, json)
Hash identifier:          sJocAhuKHu0v9AJm4ELnp7gmQu//hqs5PSQiWN6idzc=
Subject key identifier:   93:AF:6D:26:F4:17:9D:97:0F:33:62:9A:C0:5A:58:70:0B:CA:19:F1
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F00DCD58F536FC2F640B18B40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b230cbb5-c6b9-393e-b0e6-083f8554eb2c.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     54113
IP address blocks:        140.248.112.2/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:d5:8f:53:6f:c2:f6:40:b1:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=683766fe-17aa-4049-93e3-205082a52f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:92:1a:9e:34:97:40:5e:45:e0:a6:b1:6b:65:
                    68:81:8e:e4:34:0e:c7:f6:93:7a:6c:ef:09:c9:67:
                    8b:54:6e:5d:a4:85:a0:89:ed:98:46:c4:8b:8f:c6:
                    d5:f6:3b:14:ea:35:0f:dd:58:d2:0a:a0:28:3a:7b:
                    19:d8:02:d9:e7:e2:b8:a8:69:77:eb:b8:dd:ed:a1:
                    75:a4:ad:db:e4:38:60:a0:18:4d:ba:91:77:12:aa:
                    a7:b1:d9:67:aa:c4:9b:ac:94:60:41:d1:97:24:ee:
                    b6:d6:dd:a4:99:df:9e:e2:b3:69:6e:29:b4:9a:d6:
                    66:12:8e:7a:4c:2a:07:99:b3:96:e8:7d:b4:20:48:
                    e9:7d:4f:04:73:d4:8c:a7:d7:8c:4a:03:b0:35:51:
                    e6:12:ca:55:60:e8:84:98:06:05:06:de:61:17:63:
                    f6:db:02:3f:bb:27:bd:6f:ad:41:9b:a7:ac:d8:bd:
                    ea:09:23:b0:ec:5c:39:49:1c:a4:05:b4:e3:ef:47:
                    3c:30:70:44:74:49:8f:82:aa:01:85:d8:56:d0:68:
                    1f:8e:f7:32:00:e4:bf:5a:5c:84:f3:59:f4:cd:04:
                    8f:62:2f:3c:89:9b:f7:7f:b5:a2:41:03:1e:c6:5c:
                    a8:7e:fc:fa:4a:83:fb:db:31:47:05:6d:89:6b:91:
                    50:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AF:6D:26:F4:17:9D:97:0F:33:62:9A:C0:5A:58:70:0B:CA:19:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b230cbb5-c6b9-393e-b0e6-083f8554eb2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.112.2/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:42:b6:58:e9:55:6a:54:ab:90:87:23:27:ab:a9:12:bb:2a:
         5b:d0:5d:bf:9a:a0:b4:36:4b:8d:ec:86:8a:18:d9:85:74:7b:
         6c:3f:06:fb:8e:7e:c6:c7:b9:55:e7:f2:41:b8:6c:d3:4d:42:
         25:e8:c1:35:51:5b:ba:87:62:64:17:c0:0d:48:25:b5:60:81:
         9d:45:11:72:ee:47:2a:7f:43:88:9c:19:db:7d:56:3c:13:ba:
         0e:0d:f4:44:38:94:4f:ad:cb:b8:18:73:11:a8:52:b1:f9:48:
         cd:e5:6a:ad:bf:4e:3e:b0:1d:f1:db:49:32:3e:86:35:a7:92:
         5a:ba:82:9e:e7:43:0d:7e:8e:ba:eb:e6:c3:9f:31:4e:63:30:
         ed:e5:89:8f:4a:7b:91:68:69:ce:8b:14:07:97:e0:07:6e:d1:
         35:8d:9e:d5:f8:f9:52:bb:ff:15:ae:87:e1:58:bc:db:03:26:
         75:f4:29:b7:a1:11:da:72:ce:ac:88:b7:dd:d6:3a:71:f4:f2:
         cf:03:9a:92:3d:f5:81:55:7a:02:12:39:b7:4c:af:a5:e4:fc:
         1a:d7:a0:02:18:5e:9c:38:b9:c0:37:2c:a3:57:28:65:de:d1:
         cb:8d:6a:a9:73:51:b2:c0:0b:ce:7e:8e:9a:c8:12:8b:37:c3:
         e9:9e:75:69
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8A3NWPU2/C9kCxi0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
NjgzNzY2ZmUtMTdhYS00MDQ5LTkzZTMtMjA1MDgyYTUyZjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5IanjSXQF5F4Kaxa2VogY7kNA7H9pN6bO8J
yWeLVG5dpIWgie2YRsSLj8bV9jsU6jUP3VjSCqAoOnsZ2ALZ5+K4qGl367jd7aF1
pK3b5DhgoBhNupF3EqqnsdlnqsSbrJRgQdGXJO621t2kmd+e4rNpbim0mtZmEo56
TCoHmbOW6H20IEjpfU8Ec9SMp9eMSgOwNVHmEspVYOiEmAYFBt5hF2P22wI/uye9
b61Bm6es2L3qCSOw7Fw5SRykBbTj70c8MHBEdEmPgqoBhdhW0GgfjvcyAOS/WlyE
81n0zQSPYi88iZv3f7WiQQMexlyofvz6SoP72zFHBW2Ja5FQxwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJOvbSb0F52XDzNimsBaWHALyhnxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYjIzMGNiYjUtYzZiOS0z
OTNlLWIwZTYtMDgzZjg1NTRlYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAjPhwAjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBBQrZY6VVqVKuQhyMnq6kSuypb0F2/mqC0NkuN7IaKGNmFdHtsPwb7
jn7Gx7lV5/JBuGzTTUIl6ME1UVu6h2JkF8ANSCW1YIGdRRFy7kcqf0OInBnbfVY8
E7oODfREOJRPrcu4GHMRqFKx+UjN5Wqtv04+sB3x20kyPoY1p5JauoKe50MNfo66
6+bDnzFOYzDt5YmPSnuRaGnOixQHl+AHbtE1jZ7V+PlSu/8VrofhWLzbAyZ19Cm3
oRHacs6siLfd1jpx9PLPA5qSPfWBVXoCEjm3TK+l5Pwa16ACGF6cOLnANyyjVyhl
3tHLjWqpc1GywAvOfo6ayBKLN8PpnnVp
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:07:05 2026 by rpki-client