Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c9187feb-6389-3c01-9fd9-3ac2c014de54.roa
File:                     c9187feb-6389-3c01-9fd9-3ac2c014de54.roa (raw, json)
Hash identifier:          K8wyeNKA4K0ldAC4kTNucMAEhH7oFXJvqGrsG8ZHEE8=
Subject key identifier:   C2:D2:3D:69:B8:2C:52:92:AB:C6:C5:EE:21:06:C4:DB:FB:A0:30:5A
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A59F23E9DBF9A104925E80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c9187feb-6389-3c01-9fd9-3ac2c014de54.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        140.248.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:9f:23:e9:db:f9:a1:04:92:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=c8c62283-91a6-4140-9368-417b6972a49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:d5:d4:55:53:43:91:49:96:ca:39:d1:11:
                    ce:3e:64:a8:8c:2d:9a:24:4f:0f:9a:0c:31:cc:1a:
                    11:56:72:a3:60:d9:7c:bb:6d:72:48:84:42:32:65:
                    70:71:9e:d3:fa:6e:95:81:ca:53:f1:20:29:25:33:
                    2b:bc:5d:36:82:b9:dc:46:29:33:22:10:63:43:62:
                    5b:b7:c7:ab:5c:24:11:3b:ba:5b:b9:d7:09:42:50:
                    c2:74:ab:cd:df:fa:7c:75:8a:40:c8:da:ca:b6:f3:
                    6e:c5:21:6c:c6:71:63:56:d9:60:8f:88:d4:19:86:
                    a0:1c:dc:39:64:91:8c:a6:b0:1a:0f:f9:35:81:48:
                    5f:c7:34:48:d9:38:2f:be:f7:2f:ae:80:57:c9:7f:
                    3b:5d:24:26:07:5e:55:e4:c9:dd:4f:63:3c:4a:63:
                    85:9f:4c:33:fa:39:0a:e9:07:cd:9a:4a:54:ac:56:
                    36:d1:02:ac:54:be:d4:f1:26:0f:3e:ec:c8:c8:a4:
                    6d:f6:ff:c6:ed:88:e6:ae:bf:79:37:29:4d:96:40:
                    30:da:3f:ee:4d:3d:08:6a:a6:3f:7e:88:62:9a:6d:
                    1e:f3:38:2d:6d:9b:37:e5:8a:49:26:d6:b2:29:0c:
                    bc:b8:bd:42:5e:45:57:b3:ab:cd:c3:b0:35:71:e1:
                    20:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D2:3D:69:B8:2C:52:92:AB:C6:C5:EE:21:06:C4:DB:FB:A0:30:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c9187feb-6389-3c01-9fd9-3ac2c014de54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f9:d2:2a:15:94:2b:ec:8b:b0:09:b5:b4:1c:d8:0d:5c:ba:
         6b:9c:8a:c6:a0:ce:42:39:5a:a1:ce:a6:da:1b:f7:ae:01:42:
         2d:6f:2a:7c:6b:f6:cb:bd:ff:d2:82:87:17:13:e0:59:6a:8b:
         af:2d:cd:40:3c:1c:75:1f:b5:97:4b:05:2b:65:4c:f8:94:86:
         ae:8c:b7:d5:67:0c:a0:f0:90:fa:4f:60:ea:6b:fd:16:02:b7:
         8c:e1:3c:32:ea:3f:6e:b8:c4:f1:28:14:ef:bf:2f:44:c5:90:
         8c:55:54:e7:de:de:72:65:3d:2f:ca:8f:4e:80:89:8b:cb:9c:
         35:dd:68:3c:a9:61:f8:ba:b9:9c:95:e3:17:6e:3c:e4:cd:c7:
         7b:5d:4e:90:8f:13:11:df:f6:5a:ef:ef:14:fb:69:18:7a:70:
         b2:9a:48:8e:0b:58:d9:73:94:4e:a9:60:f6:c5:4d:45:17:6c:
         c5:14:95:d6:8f:39:31:52:57:89:78:b8:33:24:f5:29:e5:6e:
         0f:16:85:bd:e7:40:d3:c8:e9:bf:01:43:ba:b2:7a:b9:73:95:
         36:70:ce:69:7b:b1:71:de:03:b2:b0:74:05:03:93:a5:45:5c:
         01:41:46:cd:75:1e:27:e4:a3:3f:23:27:06:cf:4a:20:c0:d2:
         9b:bd:fe:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:55:04 2026 by rpki-client