Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/658f1080-8cef-3f11-a77c-0f755df24da2.roa
File:                     658f1080-8cef-3f11-a77c-0f755df24da2.roa (raw, json)
Hash identifier:          Oue0fbaLG7O461YI+Ejv332oa4kUzgiFPnfPyJSGBKo=
Subject key identifier:   1C:29:04:5C:23:4C:91:0E:28:0D:F2:E5:4A:55:CC:67:15:8B:D3:31
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA759EDB28D41A6FF3A500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/658f1080-8cef-3f11-a77c-0f755df24da2.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        140.248.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:75:9e:db:28:d4:1a:6f:f3:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=05a0fe4f-34d4-4bf8-bbe6-78af2a25e9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2b:91:3b:00:8c:ee:c5:81:39:f7:09:61:f7:
                    4d:5b:8c:8a:9e:7f:59:65:d9:ee:dc:b7:88:20:17:
                    7c:e6:c1:d2:b2:94:18:6f:f0:d0:ab:29:a7:4f:0a:
                    dd:3f:74:1f:74:95:3a:2c:d3:18:3c:63:af:20:08:
                    2e:44:ab:b9:80:c3:3e:3c:a6:ef:c8:0d:fe:08:56:
                    36:44:5e:22:24:44:74:de:b7:e1:94:b0:0f:b1:06:
                    db:a8:28:ea:dd:34:9e:ad:84:c6:63:b1:88:19:2c:
                    10:ab:8c:5a:59:56:73:2b:fc:68:26:44:1a:a3:47:
                    05:bc:51:6c:06:c2:5b:71:5a:0b:73:23:19:16:a2:
                    95:2d:f6:47:ee:13:fa:f7:84:45:23:90:70:39:6b:
                    dd:e0:2c:2a:b4:fc:e4:a0:dc:aa:60:0d:f1:00:35:
                    62:c2:8a:20:e3:1d:6d:bc:cc:a6:e6:c3:ef:43:a5:
                    97:b2:7b:e4:6f:8a:07:bf:5d:82:87:08:ae:b1:9c:
                    8f:b7:17:58:5c:01:3b:c7:20:f1:13:00:22:82:40:
                    ec:97:cd:7d:0b:56:9f:c8:4b:69:a5:9e:ef:bc:31:
                    16:10:ae:2d:17:7e:26:0c:90:30:63:b2:ac:fb:88:
                    e2:31:44:32:a8:af:72:f3:45:21:54:8a:53:bf:83:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:29:04:5C:23:4C:91:0E:28:0D:F2:E5:4A:55:CC:67:15:8B:D3:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/658f1080-8cef-3f11-a77c-0f755df24da2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:5a:d4:b5:5d:d0:27:2c:22:5b:29:72:d3:05:f2:54:9e:34:
         9e:d5:b1:06:a4:bb:f3:8a:d1:3f:1d:42:fd:f6:d1:68:3d:2c:
         7a:cc:08:f3:88:cf:4f:39:17:f2:4e:aa:95:f5:00:99:fc:3b:
         05:b5:ac:8d:0c:84:fa:ff:06:04:28:42:b2:67:26:cd:5d:82:
         98:9d:36:ce:a0:50:80:1c:37:3a:61:d0:ec:25:2d:96:95:74:
         5d:74:22:b8:c2:51:bb:be:4c:9d:fd:e6:39:62:7c:83:57:06:
         0b:b3:6d:c3:2b:34:c9:1f:b9:b0:8c:19:d6:b0:e3:45:c9:c5:
         42:20:bd:d0:e1:59:42:55:85:81:29:b1:56:09:ba:fc:ae:eb:
         92:ef:25:57:4c:8d:ab:05:8d:74:2c:d7:c6:62:c8:19:12:e4:
         b7:d3:7e:5d:14:47:36:17:f0:63:6d:e3:2b:29:fc:7c:f7:06:
         37:1f:74:89:fd:6d:fd:98:cd:02:54:6d:75:ee:a4:f7:c6:d5:
         3a:b0:02:7f:b9:28:1a:3e:c0:02:a6:f3:66:43:3d:62:62:b6:
         9f:4c:2d:74:b0:36:d7:18:8a:18:7b:ab:8e:f2:77:ac:0a:41:
         b5:9e:10:31:d2:ce:36:5e:e2:ed:35:3d:3f:28:d7:c3:1d:55:
         dc:ba:a0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:06 2026 by rpki-client