Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c23901d7-63c5-3efe-bb37-843df17671e0.roa
File:                     c23901d7-63c5-3efe-bb37-843df17671e0.roa (raw, json)
Hash identifier:          1auFmvmppR/ZHYiv2CWrQ+soJB9ZDSMpSJv0ELVcxkY=
Subject key identifier:   11:7E:7C:2B:86:7F:21:FC:49:5D:FD:1B:E3:9E:FF:C1:AF:AA:C3:C5
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A59D4170B3E89AABE27E80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c23901d7-63c5-3efe-bb37-843df17671e0.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        140.248.255.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:9d:41:70:b3:e8:9a:ab:e2:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=2315c717-90b7-4922-a5a2-7820912eb10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ae:eb:7e:a8:08:21:4d:23:9d:54:be:17:d3:
                    ed:b2:bf:ae:d9:ca:b3:a6:bf:4e:1c:54:f7:ae:4a:
                    03:38:2e:7e:87:6e:a7:94:c6:ba:20:9a:e1:5d:89:
                    8e:62:01:91:f4:8a:6f:ec:27:7d:98:f6:71:df:29:
                    79:94:7e:0e:9c:64:70:c2:80:e8:da:2c:64:e5:8e:
                    02:ba:88:58:e8:f1:c0:86:f9:cf:c3:35:77:b7:43:
                    dd:7d:44:eb:a9:97:b5:cd:ab:b4:55:c0:51:bf:a4:
                    eb:4b:4a:73:8a:a7:78:a3:f2:86:d3:f6:be:b9:55:
                    ee:91:f9:1a:93:d1:26:18:1f:1f:3e:61:0e:5d:e2:
                    fa:bb:b7:cd:f4:3e:0c:97:7e:fd:22:16:fd:4b:fe:
                    c8:7b:17:fb:eb:93:8d:a4:6e:1f:9e:5d:c5:10:f5:
                    0b:d1:49:c2:1b:ba:d9:15:d8:4d:96:73:52:b7:0b:
                    54:e3:88:11:b7:12:f0:d5:87:c0:89:af:68:64:15:
                    99:87:9a:e2:e7:b2:49:8d:b0:c8:0f:7a:d6:71:01:
                    95:75:72:e5:d1:8f:bc:4d:22:be:57:af:ef:1b:9b:
                    c8:72:0d:6f:23:f0:9f:a5:2d:41:f2:f9:3a:74:7a:
                    02:6d:d1:40:d4:49:35:5d:cc:03:ee:01:f6:06:70:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7E:7C:2B:86:7F:21:FC:49:5D:FD:1B:E3:9E:FF:C1:AF:AA:C3:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c23901d7-63c5-3efe-bb37-843df17671e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.255.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b2:dc:0f:51:ce:29:59:b9:e9:86:3f:43:ae:96:6a:7d:f4:
         ed:98:c6:de:ac:f6:de:fc:4e:10:45:73:10:f4:1c:46:b9:97:
         1f:16:01:6f:09:6f:6d:be:c7:12:de:da:d9:c4:0e:27:67:4c:
         27:40:df:4a:54:b9:cb:06:32:59:db:ab:24:a1:48:39:fc:74:
         84:be:1c:05:92:8f:8e:e0:cd:1a:e6:31:17:d0:f8:22:62:dd:
         22:6b:3d:80:a4:7f:07:9b:f8:60:bb:57:a2:9c:79:77:30:60:
         9c:09:b9:0d:56:ab:9c:59:c8:9e:7e:bc:cd:fb:6b:04:d5:e1:
         7d:b4:b9:d0:ce:37:1c:a1:7c:02:ec:ef:ab:e4:69:ee:75:d1:
         37:d0:9d:93:97:e7:ae:52:b6:0c:7c:cd:5e:c0:23:3e:8d:3e:
         74:87:20:dd:33:bb:c0:87:84:79:d2:fa:e1:bb:c1:0e:ad:38:
         53:e7:44:a4:44:c4:3d:77:75:38:95:a5:d2:e0:30:74:61:e5:
         21:e8:a7:8e:20:ed:03:c6:7f:fa:55:85:3d:17:fc:5e:51:5a:
         07:af:7d:a1:7f:48:1c:7a:7e:fe:f3:59:5a:25:26:fb:fb:76:
         a4:8f:d8:ec:23:98:25:2a:2b:97:2f:dd:9c:1f:a9:88:9b:ca:
         bc:6a:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:55:43 2026 by rpki-client