Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4979e479-7819-35cc-be0a-f5040ae439a8.roa
File:                     4979e479-7819-35cc-be0a-f5040ae439a8.roa (raw, json)
Hash identifier:          laSMJYEwxBKzHbTaKtsuXus6RV2lUMAnrf1JGUvMQyk=
Subject key identifier:   02:47:37:9C:6B:0B:6D:9F:3E:DE:C6:4C:8B:A6:EA:DF:59:12:53:C5
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E7ABE2C7670E59FDE8129BC00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4979e479-7819-35cc-be0a-f5040ae439a8.roa
Signing time:             Mon 13 Jul 2026 00:00:18 +0000
ROA not before:           Mon 13 Jul 2026 00:00:18 +0000
ROA not after:            Sun 11 Oct 2026 00:00:18 +0000
asID:                     54113
IP address blocks:        140.248.122.2/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:be:2c:76:70:e5:9f:de:81:29:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 13 00:00:18 2026 GMT
            Not After : Oct 11 00:00:18 2026 GMT
        Subject: CN=68294522-ad84-4884-8eab-ecbe65c23392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:44:7d:40:f2:16:f9:c5:2b:2b:cf:27:5c:df:
                    42:0c:48:bc:76:3d:f5:37:3a:64:b5:f5:90:f8:00:
                    42:22:7b:5c:b5:cb:a7:ed:fa:cc:26:0f:64:06:84:
                    2a:9a:e6:66:6f:82:7a:78:b0:4a:4c:72:61:3d:d4:
                    ca:7e:2f:e8:d4:cf:45:8f:34:f8:0b:0a:3b:a2:13:
                    ab:3c:e4:01:09:12:76:03:3a:0b:73:ca:90:37:1e:
                    fc:c4:5e:71:bd:2e:14:7c:15:2a:d1:68:65:98:71:
                    b6:85:85:b7:f3:b0:54:20:be:fa:e2:8a:be:e4:d5:
                    b6:6c:5f:8d:a0:ad:c5:8e:9b:06:69:b1:f8:5d:82:
                    4e:26:d4:2d:b6:dc:f7:85:b9:93:09:93:3c:d2:4b:
                    66:ce:43:df:0b:62:8c:09:51:d4:cd:2d:88:01:fd:
                    0e:a0:cb:8d:44:05:f0:9f:89:97:e4:d8:01:3a:85:
                    b8:f9:c7:b4:92:f6:5e:2f:ae:0a:16:ca:bd:e7:38:
                    38:5e:d7:9a:d5:02:06:e8:61:42:9c:4d:3c:88:19:
                    73:de:f0:e6:79:7f:0e:e2:22:c4:61:62:11:20:ff:
                    6f:89:ad:3f:c9:34:1b:a5:6e:e1:71:38:48:92:f5:
                    e4:77:ab:c1:da:02:35:9a:a2:94:3b:4b:f7:c5:c4:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:47:37:9C:6B:0B:6D:9F:3E:DE:C6:4C:8B:A6:EA:DF:59:12:53:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4979e479-7819-35cc-be0a-f5040ae439a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.122.2/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:36:4a:0d:23:eb:3e:2f:f4:58:53:a2:8a:09:0e:34:51:da:
         b4:94:25:23:2c:da:9e:94:65:a1:48:bb:81:1f:4d:a5:05:01:
         d7:bf:70:ee:9d:b3:49:d5:be:b4:22:71:e8:f5:66:cb:d6:78:
         c6:5f:ae:2b:92:a5:91:5c:7e:24:6d:ae:bb:4d:9b:84:cc:91:
         41:a0:47:1e:e9:7b:a4:5b:ab:00:ff:2e:40:a6:c5:35:e7:eb:
         7e:a0:86:b0:8a:df:6c:9c:13:3d:48:c8:2f:27:c4:93:69:01:
         be:8a:01:95:45:6a:9e:94:17:f3:d8:36:3b:37:b0:eb:ed:e0:
         43:34:eb:b0:af:c4:c5:7c:39:e2:63:46:48:56:0e:ba:51:62:
         62:49:87:1c:16:df:49:e1:11:ab:5b:4d:59:cd:19:76:9a:f9:
         f1:9b:a1:52:de:c7:b0:5c:1e:c2:3b:5c:18:e3:ec:f7:1a:6a:
         4b:f3:63:e7:11:88:7d:1f:95:ad:75:a7:34:d1:2c:eb:5b:ae:
         4a:03:0f:34:6e:85:fe:ff:53:e6:8c:45:c6:a0:57:c5:38:71:
         ac:70:f5:37:6c:26:ab:8d:6d:b7:41:6e:22:7b:b3:aa:43:96:
         d0:ef:70:03:f9:aa:3a:77:2f:0b:25:e6:87:30:0f:ca:50:e2:
         d5:37:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:58:53 2026 by rpki-client