Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1d23a43e-d959-3743-84e6-7e59f8fd696d.roa
File:                     1d23a43e-d959-3743-84e6-7e59f8fd696d.roa (raw, json)
Hash identifier:          eRYop3wTQJsPZIXAhMD64+R6Zvg01ZniPQIlrUSHiAY=
Subject key identifier:   A5:41:46:07:16:C8:B2:A1:C9:CA:18:9B:E1:DB:33:49:93:F4:C8:14
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584D3B34E9FA118D908875E8C180
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1d23a43e-d959-3743-84e6-7e59f8fd696d.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     54113
IP address blocks:        140.248.105.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:e9:fa:11:8d:90:88:75:e8:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=a06cb0d8-1c9b-42d6-9124-de00b0f657e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2e:48:7e:11:98:b5:f8:02:12:6a:0d:e2:cd:
                    30:0d:7f:6d:80:b1:c5:f7:db:14:b7:6b:1b:7e:dd:
                    a0:dd:e8:32:86:13:04:eb:bb:3a:a3:f3:e4:00:47:
                    85:73:49:96:73:40:7e:d8:75:b2:a1:61:ef:73:9c:
                    48:b3:c7:ba:77:df:69:c3:5c:33:a3:d6:c9:6c:c1:
                    68:a7:88:8b:95:90:dc:70:b5:d3:8f:35:d9:66:29:
                    9a:9a:fb:00:30:53:6a:41:17:43:b7:9d:f0:f6:c1:
                    5b:18:a6:e7:d6:a5:c4:a9:a1:a3:77:8c:43:75:08:
                    ce:90:ae:0f:db:68:1d:52:77:f0:7a:31:65:96:bb:
                    4d:8a:30:6d:04:80:2b:68:36:dc:1e:d2:37:2c:b6:
                    5c:89:25:c5:dc:10:75:d5:b6:a2:f2:51:a3:b4:07:
                    d3:69:c1:b6:c9:c0:b8:4e:d0:84:78:3e:98:34:4a:
                    ea:59:b7:85:91:23:ef:aa:bb:6e:19:d4:67:6a:46:
                    b5:5c:62:87:56:ce:17:97:e8:97:ce:1d:2d:bf:76:
                    c1:59:50:ff:8f:92:8a:f6:fc:0c:a9:33:fc:7c:d9:
                    7f:e5:f6:67:d0:1d:06:16:b9:f9:42:a5:d6:5a:79:
                    da:a8:bb:73:1f:26:7b:bd:cb:e9:1c:d6:67:4b:9c:
                    f0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:41:46:07:16:C8:B2:A1:C9:CA:18:9B:E1:DB:33:49:93:F4:C8:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1d23a43e-d959-3743-84e6-7e59f8fd696d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.105.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:23:7d:5e:8b:da:13:42:61:ea:8f:bc:e3:c0:77:76:fb:83:
         83:ed:3d:00:f8:83:66:bf:f0:48:45:4d:5d:46:73:15:93:d1:
         b5:ff:21:ec:3d:bd:93:a3:c2:a3:fc:cf:78:87:7a:4f:8f:bb:
         86:fd:a4:d1:b2:cf:fc:88:54:4e:1e:f9:51:44:ba:d2:44:6d:
         df:2b:62:8e:95:61:1d:41:de:4a:3d:97:a9:3c:ba:2e:a3:7c:
         13:77:d0:6a:79:95:48:ab:ef:2a:b5:89:43:7a:64:3e:de:52:
         df:67:80:00:e9:c6:51:40:d8:fe:75:ce:a0:2e:c5:6f:de:78:
         10:6e:c8:24:e0:b5:ca:80:89:eb:b7:a5:ea:fc:92:bf:8d:ab:
         d4:6a:0a:40:8c:f9:9f:7a:02:98:6a:80:fa:6c:65:61:6e:fb:
         e0:49:be:7d:5c:fa:2b:ea:33:ef:31:89:65:01:76:a8:c6:0a:
         05:32:ba:5a:fe:6b:2e:6a:ac:43:18:54:f8:f9:34:be:9d:c9:
         89:d3:52:df:71:57:4f:d0:74:7f:37:25:dd:d3:dd:cb:08:22:
         5b:12:c2:d4:84:a4:ca:1c:22:69:7d:64:d5:cc:1d:24:69:92:
         63:e9:f4:ce:54:63:9e:cb:2d:b1:18:19:17:7e:ed:b5:03:ee:
         de:3a:4a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:20 2026 by rpki-client