Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4a88eca9-f613-3814-8c96-386dc7c326e3.roa
File:                     4a88eca9-f613-3814-8c96-386dc7c326e3.roa (raw, json)
Hash identifier:          crjWG+pRH9ceOYyY5SX2IyF92MRa/CUJHf2UFzGUsbQ=
Subject key identifier:   DA:63:CC:F7:2C:D2:51:1A:05:78:B7:01:C4:D1:CD:A1:48:88:62:8D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E428F2542E5C3C34D0AAF5280
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4a88eca9-f613-3814-8c96-386dc7c326e3.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     54113
IP address blocks:        140.248.238.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:25:42:e5:c3:c3:4d:0a:af:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=7ba9d3d5-db33-4ded-b0c2-971b66d738c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:83:89:ff:1b:45:2f:0b:9c:57:49:2c:c9:
                    08:ca:48:9b:57:01:b9:c9:9a:d5:d8:be:5f:54:73:
                    ed:47:67:52:9f:d1:95:ba:db:53:be:09:8b:ad:b5:
                    aa:f2:12:77:8c:eb:c8:f4:da:ea:5c:b8:b3:e7:6c:
                    ad:cf:ba:37:09:d4:12:6b:53:6c:7e:8e:02:af:7c:
                    90:b4:8e:52:57:c6:24:3b:93:43:44:19:36:de:df:
                    0c:28:97:68:bb:01:0e:3c:5f:27:93:1f:cd:42:3c:
                    1b:04:5c:f2:a7:20:a2:8e:13:36:7f:4f:2c:4c:6a:
                    1b:e5:0b:6f:fc:8d:8a:a2:3e:16:a0:67:6c:a1:a6:
                    60:4c:b3:5e:42:87:6f:84:82:53:30:53:1a:9e:60:
                    1a:fb:e4:64:00:b6:9d:c4:3d:d7:aa:9e:85:59:a3:
                    17:33:52:ea:9f:55:e1:34:19:17:e2:02:3f:18:0c:
                    05:62:d7:f8:6f:57:76:e6:80:7a:bb:6c:1d:a8:58:
                    f2:0b:db:5f:04:25:a9:ab:01:a6:4e:62:d5:64:de:
                    94:42:e2:7f:95:ba:ff:39:ed:2b:bf:ce:c3:79:f9:
                    a6:89:ea:8c:70:aa:34:11:80:63:83:31:56:ad:2a:
                    ce:29:28:66:d5:c6:cb:79:5f:6b:b5:41:06:54:cc:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:63:CC:F7:2C:D2:51:1A:05:78:B7:01:C4:D1:CD:A1:48:88:62:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4a88eca9-f613-3814-8c96-386dc7c326e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.238.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:20:10:34:f7:5e:4b:3a:f0:e5:be:78:62:28:f5:5a:cc:ec:
         4a:26:d8:dc:10:48:1f:28:14:84:ab:ea:ed:d0:db:38:6e:22:
         eb:8e:9d:08:5a:a3:4d:51:e2:0f:88:5a:64:f5:b9:7c:45:f7:
         d2:77:63:fb:19:95:d5:b6:b1:d5:41:74:67:a3:4e:35:0e:2f:
         3e:27:a2:36:f7:6c:2f:f6:38:6d:09:40:e4:60:3b:b9:8d:da:
         21:ff:6a:ec:0a:e2:a7:ba:8e:2b:4c:a3:81:f5:cd:b6:92:49:
         e8:a7:53:ab:86:86:b6:e2:23:23:83:d0:da:63:f5:e6:c4:7b:
         85:23:87:75:7c:96:cb:f2:a6:ef:dd:58:54:11:8e:f3:c5:ca:
         43:0f:44:c5:d5:6a:77:e2:0f:80:f5:c4:88:99:eb:f9:40:88:
         b0:f9:42:ea:91:3d:dd:87:58:99:85:1d:9e:06:cd:fe:25:f6:
         97:22:15:1a:ae:08:27:04:ca:ca:79:d3:ff:20:ac:8c:77:6a:
         37:00:c0:1e:93:12:41:8c:bf:8b:9f:08:b0:b8:87:e9:80:24:
         bd:9b:b6:b2:da:50:06:5f:7f:90:de:94:20:1d:6f:72:f3:75:
         32:ea:2d:f3:ce:f5:9b:1d:d7:92:de:c2:b0:35:a1:2c:78:fd:
         a1:f4:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:56:31 2026 by rpki-client