Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/48c36d4f-c289-3fbb-ac9d-1f5a63c19ced.roa
File:                     48c36d4f-c289-3fbb-ac9d-1f5a63c19ced.roa (raw, json)
Hash identifier:          UoIz9eg3/kKJ3w/KeXw27zZqr/W7BNEDWq5O0Qdcn6I=
Subject key identifier:   6C:6E:A5:A0:67:A0:12:68:F8:FF:CA:0B:FE:40:26:FD:46:04:87:7A
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA71410B92DB940C08B400
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/48c36d4f-c289-3fbb-ac9d-1f5a63c19ced.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        140.248.243.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:71:41:0b:92:db:94:0c:08:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=c7036e65-5600-4bcd-ba6d-1947afdb8517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a4:f3:37:f9:8e:ee:d3:c4:44:9e:ca:c4:92:
                    27:80:5a:fd:1a:db:d3:24:ed:85:85:83:aa:51:e3:
                    4b:3c:44:4f:40:f4:24:41:b1:65:52:90:3c:9f:2f:
                    ab:e8:57:32:95:0b:bf:70:e8:8c:c7:13:64:02:30:
                    d5:92:de:d1:75:ca:e5:c6:4d:ad:1b:b8:87:4d:18:
                    3b:99:e4:2d:8d:84:95:9b:d5:66:55:13:fb:5b:ee:
                    ea:71:29:3f:8f:42:b5:c4:d1:5d:97:b6:01:92:8e:
                    61:94:f0:90:1b:19:62:4f:21:d4:9f:f7:cb:0f:84:
                    f1:9e:1b:54:5e:f8:4a:c6:e8:b7:4a:04:52:23:a2:
                    e4:f5:f6:d2:8f:d3:9e:51:b0:3d:f6:57:3d:fd:ee:
                    37:0f:64:73:cf:17:92:18:99:ac:e1:2d:6e:5f:6c:
                    4d:5c:9d:31:67:66:51:e1:d9:58:61:9c:6f:5d:82:
                    d1:49:e7:25:90:7b:63:ee:63:4e:4c:be:b3:ec:81:
                    f4:37:85:92:5a:81:4f:4b:e3:51:f0:e8:bd:1a:ff:
                    1a:97:24:15:89:e4:67:a3:f5:12:38:e1:b1:e4:04:
                    09:dd:16:23:02:11:68:3c:58:b6:ca:b5:2b:62:bf:
                    8a:71:4e:8a:90:40:e0:da:e9:29:32:8f:ef:07:a7:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6E:A5:A0:67:A0:12:68:F8:FF:CA:0B:FE:40:26:FD:46:04:87:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/48c36d4f-c289-3fbb-ac9d-1f5a63c19ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.243.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:f7:40:a8:02:41:41:62:78:65:6d:61:31:2a:eb:7c:b5:80:
         b8:56:56:11:cb:b7:65:51:54:d7:09:bb:48:a1:8c:52:91:82:
         b2:ac:26:2e:57:bb:63:dc:4a:8f:92:9a:c2:54:e6:34:ce:00:
         d6:1f:ca:00:fc:47:15:44:00:6f:92:24:0f:e9:db:7a:be:ae:
         e7:1f:d4:43:af:04:d8:dd:2e:27:5f:3a:59:82:ad:11:46:62:
         fd:d5:8e:0d:75:61:7a:e3:01:58:a1:e7:7b:ce:48:b7:cb:6a:
         cc:e4:15:41:e5:0e:0c:94:fd:00:ad:8e:d2:76:b2:6d:54:89:
         a6:29:a4:90:91:4b:ad:d7:81:2d:84:eb:11:26:d6:2e:f2:8e:
         5d:78:52:25:2e:35:8d:b6:03:61:46:20:a8:6d:fd:de:7b:dc:
         f3:e3:83:8a:96:b0:c5:2b:87:5a:8d:b5:77:63:18:01:59:f1:
         13:36:f2:5d:19:d7:8a:36:d3:c9:35:15:8e:e8:6d:1a:fc:6c:
         8e:37:54:4a:f2:3a:1d:50:3f:cc:ba:79:4c:0f:c1:32:a2:04:
         23:83:86:73:bc:3b:d4:f9:9e:2f:84:f4:4e:84:fd:47:99:19:
         28:87:c9:99:f2:4e:ff:fc:dd:97:11:c7:2e:29:70:ea:34:1f:
         2b:a5:ea:96
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6U6nFBC5LblAwItAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
YzcwMzZlNjUtNTYwMC00YmNkLWJhNmQtMTk0N2FmZGI4NTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaTzN/mO7tPERJ7KxJIngFr9GtvTJO2FhYOq
UeNLPERPQPQkQbFlUpA8ny+r6FcylQu/cOiMxxNkAjDVkt7Rdcrlxk2tG7iHTRg7
meQtjYSVm9VmVRP7W+7qcSk/j0K1xNFdl7YBko5hlPCQGxliTyHUn/fLD4TxnhtU
XvhKxui3SgRSI6Lk9fbSj9OeUbA99lc9/e43D2RzzxeSGJms4S1uX2xNXJ0xZ2ZR
4dlYYZxvXYLRSeclkHtj7mNOTL6z7IH0N4WSWoFPS+NR8Oi9Gv8alyQVieRno/US
OOGx5AQJ3RYjAhFoPFi2yrUrYr+KcU6KkEDg2ukpMo/vB6emcwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGxupaBnoBJo+P/KC/5AJv1GBId6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNDhjMzZkNGYtYzI4OS0z
ZmJiLWFjOWQtMWY1YTYzYzE5Y2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjzgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC490CoAkFBYnhlbWExKut8tYC4VlYRy7dlUVTXCbtIoYxSkYKyrCYu
V7tj3EqPkprCVOY0zgDWH8oA/EcVRABvkiQP6dt6vq7nH9RDrwTY3S4nXzpZgq0R
RmL91Y4NdWF64wFYoed7zki3y2rM5BVB5Q4MlP0ArY7SdrJtVImmKaSQkUut14Et
hOsRJtYu8o5deFIlLjWNtgNhRiCobf3ee9zz44OKlrDFK4dajbV3YxgBWfETNvJd
GdeKNtPJNRWO6G0a/GyON1RK8jodUD/MunlMD8EyogQjg4ZzvDvU+Z4vhPROhP1H
mRkoh8mZ8k7//N2XEccuKXDqNB8rpeqW
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:47:39 2026 by rpki-client