Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc6e1a35-d122-3f4a-9988-37e26a985133.roa
File:                     cc6e1a35-d122-3f4a-9988-37e26a985133.roa (raw, json)
Hash identifier:          ZFI2NqU1ZxOSTA4qRMcnWI1j7A6QG40PcY3u4S2FIBo=
Subject key identifier:   EE:89:C7:9B:17:D8:3B:C0:AA:81:AB:37:63:4D:3E:B8:83:2F:91:87
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584D8C2AAFB90DDB03FF61FB5500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc6e1a35-d122-3f4a-9988-37e26a985133.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     54113
IP address blocks:        140.248.104.64/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:af:b9:0d:db:03:ff:61:fb:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=d3141c48-6cc1-4252-a399-4b0bded22949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:99:33:f7:dd:73:93:57:47:65:20:a6:26:5c:
                    de:52:8a:68:1f:bf:f2:20:bb:de:3d:84:bc:93:1f:
                    7e:e4:54:ee:d8:f5:7d:f6:19:58:a4:51:60:1b:9e:
                    7e:3c:b5:28:8e:32:10:b1:42:32:73:a1:19:d9:ec:
                    e8:65:25:0e:e1:37:0b:c2:a5:b3:3d:d9:9c:35:68:
                    2f:71:b3:0c:a3:1b:fa:eb:73:fc:5f:8c:0a:51:8c:
                    f8:f5:8b:37:d1:ab:49:c1:d6:cb:61:98:b5:20:9e:
                    eb:58:be:3c:42:a9:b0:7b:b1:62:69:63:b3:e1:ff:
                    83:72:a8:ec:ce:52:ff:ef:3f:24:5a:4d:76:51:5a:
                    51:44:6b:28:3f:0e:9a:a4:78:b4:16:8c:97:af:bd:
                    5c:a9:41:46:61:87:3a:e6:5b:bf:07:d2:83:47:b1:
                    b8:34:0f:69:31:eb:47:7d:54:fe:ad:ba:a7:82:09:
                    1f:05:1a:7f:da:74:74:76:5d:50:66:a0:ce:7a:85:
                    a2:4f:88:b1:d7:02:58:20:d1:e9:ba:e3:61:65:a9:
                    18:28:51:82:9a:18:97:4a:99:ff:aa:aa:f3:37:d6:
                    97:79:01:76:9b:25:be:b1:c9:17:76:0f:a1:d2:61:
                    0f:d7:b6:d1:2b:eb:f0:46:ef:23:0c:57:93:fc:79:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:89:C7:9B:17:D8:3B:C0:AA:81:AB:37:63:4D:3E:B8:83:2F:91:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cc6e1a35-d122-3f4a-9988-37e26a985133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.104.64/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:1e:4a:13:81:8a:71:19:16:6d:89:05:7e:94:92:1b:fe:2a:
         83:a7:6d:f3:1a:44:c2:8e:de:2c:89:8f:9f:d0:c2:a5:81:3d:
         d9:ec:3c:5a:67:4c:e0:5a:be:b1:f1:e6:fb:c8:20:c3:a9:f3:
         39:28:3a:b7:12:95:8d:e6:58:91:92:30:9a:34:03:7d:92:a7:
         08:96:36:ce:ee:32:f8:4d:5c:d4:bc:b1:c9:df:f2:d9:db:1a:
         46:c9:31:9b:78:1e:38:1d:43:d9:8a:8d:27:bd:bb:5d:31:af:
         6f:9a:af:bc:32:34:45:09:d7:da:46:56:7b:36:ff:c1:34:c1:
         2e:18:dc:36:6f:b0:ae:43:3a:36:92:2a:87:1e:4f:58:73:ec:
         ba:6f:ff:fb:08:53:08:da:26:d2:e9:ef:fc:71:81:d5:a5:74:
         4f:e4:4f:f2:3a:fc:22:4d:50:46:81:bf:8b:3f:92:44:c4:d7:
         2c:31:82:65:2f:a7:8d:72:19:a7:6f:6f:b2:fa:b3:91:79:2f:
         d7:a6:52:c2:d8:8c:6b:0c:b0:84:b8:a5:a1:80:01:1d:7b:00:
         ee:ac:be:e5:5b:d2:5d:8b:0b:c0:a9:26:5f:33:39:aa:83:a7:
         4d:96:12:bc:ef:77:ed:56:a5:57:2a:82:4c:fd:c1:d6:fd:ac:
         55:c9:96:1d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2MKq+5DdsD/2H7VQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk
ZDMxNDFjNDgtNmNjMS00MjUyLWEzOTktNGIwYmRlZDIyOTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5kz991zk1dHZSCmJlzeUopoH7/yILvePYS8
kx9+5FTu2PV99hlYpFFgG55+PLUojjIQsUIyc6EZ2ezoZSUO4TcLwqWzPdmcNWgv
cbMMoxv663P8X4wKUYz49Ys30atJwdbLYZi1IJ7rWL48Qqmwe7FiaWOz4f+Dcqjs
zlL/7z8kWk12UVpRRGsoPw6apHi0FoyXr71cqUFGYYc65lu/B9KDR7G4NA9pMetH
fVT+rbqnggkfBRp/2nR0dl1QZqDOeoWiT4ix1wJYINHpuuNhZakYKFGCmhiXSpn/
qqrzN9aXeQF2myW+sckXdg+h0mEP17bRK+vwRu8jDFeT/HmS2QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFO6Jx5sX2DvAqoGrN2NNPriDL5GHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvY2M2ZTFhMzUtZDEyMi0z
ZjRhLTk5ODgtMzdlMjZhOTg1MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPhoQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDKHkoTgYpxGRZtiQV+lJIb/iqDp23zGkTCjt4siY+f0MKlgT3Z7Dxa
Z0zgWr6x8eb7yCDDqfM5KDq3EpWN5liRkjCaNAN9kqcIljbO7jL4TVzUvLHJ3/LZ
2xpGyTGbeB44HUPZio0nvbtdMa9vmq+8MjRFCdfaRlZ7Nv/BNMEuGNw2b7CuQzo2
kiqHHk9Yc+y6b//7CFMI2ibS6e/8cYHVpXRP5E/yOvwiTVBGgb+LP5JExNcsMYJl
L6eNchmnb2+y+rOReS/XplLC2IxrDLCEuKWhgAEdewDurL7lW9JdiwvAqSZfMzmq
g6dNlhK873ftVqVXKoJM/cHW/axVyZYd
-----END CERTIFICATE-----
Generated at Sun May 3 17:55:52 2026 by rpki-client