Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3ea211d1-41f0-37e5-8336-60c05c6c5eff.roa
File:                     3ea211d1-41f0-37e5-8336-60c05c6c5eff.roa (raw, json)
Hash identifier:          //dbiyWrGYpqg0WsqxnPrxNC9yV15URX1CRhqcZ8d3I=
Subject key identifier:   B4:F4:29:FF:72:6D:F8:E9:27:4F:42:E8:BC:5C:83:75:BC:44:F1:10
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E8ACB94FB45AA1DA24672FD00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3ea211d1-41f0-37e5-8336-60c05c6c5eff.roa
Signing time:             Sat 18 Jul 2026 18:00:15 +0000
ROA not before:           Sat 18 Jul 2026 18:00:15 +0000
ROA not after:            Fri 16 Oct 2026 18:00:15 +0000
asID:                     54113
IP address blocks:        140.248.115.8/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8a:cb:94:fb:45:aa:1d:a2:46:72:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 18 18:00:15 2026 GMT
            Not After : Oct 16 18:00:15 2026 GMT
        Subject: CN=6cfcaa60-415d-4129-a82b-9f826315c13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f7:4a:19:5d:47:9f:6a:4e:70:18:b9:3f:d3:
                    75:8d:54:e9:90:35:e0:67:b2:62:34:15:30:ee:bd:
                    ed:f0:5b:6e:b8:84:99:df:a4:db:89:70:ff:07:b2:
                    39:51:f9:a0:29:cb:52:71:65:d1:2a:0a:fd:ce:61:
                    cb:78:3e:3d:42:86:25:62:d6:86:d1:4f:f5:bb:89:
                    d1:4b:71:78:4e:3e:20:7f:2b:33:ff:0d:66:13:44:
                    ca:f5:e9:9d:45:79:1f:c3:0a:38:cd:89:d6:94:96:
                    bd:ed:51:6a:bd:b9:79:31:24:60:ac:ee:62:74:1c:
                    05:39:43:54:45:9a:2a:a5:b9:06:1b:23:5c:96:fe:
                    92:f7:69:84:66:ba:47:1d:00:6e:fd:d8:1a:27:f5:
                    64:1f:1b:0f:39:b5:b5:98:da:d8:ba:5d:06:f6:67:
                    d4:9a:9e:fd:00:da:9b:87:de:b3:e2:ac:61:5c:f1:
                    99:24:5f:54:21:18:7f:58:d5:57:01:a3:5d:0c:ad:
                    3a:51:f2:db:22:41:f6:1e:44:a5:ff:07:e3:3f:f2:
                    d8:1c:b7:86:49:f6:be:d6:68:4f:bc:80:37:52:f8:
                    b7:72:de:0c:d2:f8:ff:de:c6:55:67:45:b8:6a:cc:
                    7a:fa:f3:f0:16:a1:16:45:df:75:9f:1c:3a:6b:15:
                    e9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F4:29:FF:72:6D:F8:E9:27:4F:42:E8:BC:5C:83:75:BC:44:F1:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3ea211d1-41f0-37e5-8336-60c05c6c5eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.115.8/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:11:99:52:89:4c:5e:b6:75:07:a1:bc:61:bd:57:34:ae:c2:
         28:fa:21:d8:d2:6f:70:c1:55:55:ae:8e:a1:87:fd:df:9d:80:
         08:a2:ac:b1:93:4d:b8:a3:7d:26:c9:40:dc:68:08:7d:9e:af:
         8d:28:0e:f9:4e:99:9d:a1:3f:67:70:d3:ab:c5:ee:b3:45:5a:
         16:f5:fe:b8:c4:15:66:81:5d:6b:c0:69:54:ff:e2:6b:31:16:
         0e:9d:9f:db:82:8f:25:74:ac:0a:9b:83:ab:a8:21:1a:a6:84:
         2a:d3:51:52:05:2e:14:ff:c4:18:35:ee:93:8b:7f:f3:72:91:
         57:5a:66:74:ff:57:e2:bf:c3:7a:47:5b:af:8f:04:5f:62:f6:
         70:bf:ba:dd:dd:b3:e9:cb:07:34:56:65:cb:f2:70:df:c1:3a:
         01:9d:dc:15:55:92:22:cd:db:3f:15:84:49:b7:1b:70:e6:91:
         fd:08:22:0b:f2:6b:b7:b3:eb:3a:51:d7:df:37:98:4a:e8:4a:
         11:cd:3d:4b:36:fc:3b:7b:32:ad:fe:17:2f:d6:18:3c:56:f5:
         c8:3b:b3:df:d4:f0:3e:8c:af:ef:35:7e:44:60:7f:23:8a:de:
         8b:af:a3:20:e8:f6:51:7d:65:b0:40:34:08:de:f6:09:2d:cd:
         9c:e2:ab:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:32:04 2026 by rpki-client