Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4be0ca6d-cc20-3716-8d69-d08700b16f51.roa
File:                     4be0ca6d-cc20-3716-8d69-d08700b16f51.roa (raw, json)
Hash identifier:          akj9N1d844KwRm46MjSdHwrtQBE8UwCtSnY7I9nuNu8=
Subject key identifier:   FE:2A:E2:B7:D3:42:91:D0:62:FA:69:12:C6:A3:2D:94:A3:A4:F2:29
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F57680AC1CFC9F664D8217080
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4be0ca6d-cc20-3716-8d69-d08700b16f51.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     54113
IP address blocks:        140.248.108.56/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:0a:c1:cf:c9:f6:64:d8:21:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=bb8f722a-c595-46ed-9599-5cd691e72196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:92:08:e0:34:68:96:f5:17:3d:df:d1:46:
                    38:7b:94:f2:bb:f4:de:9c:d3:17:c3:62:fd:fa:a0:
                    66:78:50:3b:48:34:86:c4:cd:cf:b0:84:40:55:16:
                    85:af:88:d5:f5:f3:9f:d1:70:e7:b9:0d:3f:c0:60:
                    b0:9a:7b:bf:68:a0:8b:7f:c0:53:65:a0:0f:1b:ab:
                    aa:87:37:eb:19:dd:67:46:62:dc:30:da:3c:67:73:
                    08:0c:c9:8b:70:9e:90:8c:1e:58:c9:cb:f0:8b:1f:
                    6a:d7:de:3b:64:40:ab:1c:39:e8:46:f2:c3:8d:ef:
                    a0:4a:4b:21:75:bc:56:87:b7:30:d6:40:27:ba:d0:
                    a0:81:c1:64:46:29:ba:5b:4c:2c:b8:da:92:ae:2e:
                    78:81:04:eb:fe:45:16:96:4f:18:4e:a5:e1:db:03:
                    fb:9f:90:1c:b1:57:c2:aa:1f:86:05:c5:b2:99:86:
                    5a:fc:cb:e1:b0:31:06:b3:35:67:29:db:91:01:d2:
                    05:7e:3b:80:3e:3b:f3:ec:0d:0f:f2:7e:76:8e:9d:
                    9d:e8:a7:15:cc:1b:8d:2d:98:6e:34:30:6b:7c:cb:
                    db:47:7a:3a:eb:7f:ea:b3:6a:3c:4f:86:d5:59:ec:
                    03:3d:e5:20:4c:2e:75:38:36:4a:f9:ea:36:81:ba:
                    b0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2A:E2:B7:D3:42:91:D0:62:FA:69:12:C6:A3:2D:94:A3:A4:F2:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4be0ca6d-cc20-3716-8d69-d08700b16f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.108.56/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:28:5a:b2:90:2e:99:36:4b:13:54:fc:53:cb:d2:11:b3:
         5c:1a:58:66:31:23:e1:94:10:9b:c2:75:b5:fc:2a:ba:e7:f5:
         e5:14:7a:5f:d3:37:9b:99:af:c4:9b:e5:4e:e0:de:45:95:ac:
         d6:99:ff:e4:5d:f5:0f:96:e5:a7:e0:d6:cb:cb:31:21:f5:b5:
         a5:6a:20:37:e7:70:41:79:3a:19:83:36:e2:6a:ef:43:77:e0:
         92:e4:7d:71:57:bc:f4:6a:7e:bd:9c:a4:d9:ed:f5:e4:5f:87:
         09:e2:5d:61:44:ac:28:4b:7c:ab:ad:eb:06:72:80:d8:f7:04:
         e5:d9:64:fa:1b:2d:e8:36:2c:c3:fa:50:a3:1f:ab:ec:b8:1c:
         22:35:9d:3d:09:5d:cd:b5:96:5b:f6:66:2c:1c:02:bb:b5:b1:
         eb:93:7d:b3:a7:e4:dc:8b:e3:1b:c7:f6:26:46:80:99:37:27:
         64:ba:7a:aa:c1:56:cd:c4:ce:27:ad:6b:c5:1f:d0:8a:dd:ca:
         1e:73:63:b0:15:0b:f6:45:d8:9f:91:ea:f7:01:04:e8:52:ea:
         98:6e:d2:b0:e7:fa:8b:8c:06:a1:e4:51:60:9f:51:8f:00:de:
         29:d0:46:8d:0f:76:ba:01:04:20:77:c6:be:84:8c:8e:e3:9f:
         ca:ef:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:41:00 2026 by rpki-client