Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/80833e70-61ee-3e51-93b1-3912c4e7edf3.roa
File:                     80833e70-61ee-3e51-93b1-3912c4e7edf3.roa (raw, json)
Hash identifier:          +k3RRps7bitCqlsZtTdR/nP1nE6SLZQjYyU+nU0FAcQ=
Subject key identifier:   C5:2D:B7:39:E1:D6:94:58:51:DE:F2:23:67:F1:F2:D2:8B:9A:09:D0
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E619DFA4266018BA548A25780
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/80833e70-61ee-3e51-93b1-3912c4e7edf3.roa
Signing time:             Sat 04 Jul 2026 00:00:14 +0000
ROA not before:           Sat 04 Jul 2026 00:00:14 +0000
ROA not after:            Fri 02 Oct 2026 00:00:14 +0000
asID:                     54113
IP address blocks:        140.248.120.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:9d:fa:42:66:01:8b:a5:48:a2:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul  4 00:00:14 2026 GMT
            Not After : Oct  2 00:00:14 2026 GMT
        Subject: CN=b1bb06ae-005b-4e22-8fe8-010ad074b105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:ed:50:c2:81:d1:b8:0f:8d:7e:89:a2:5e:
                    dd:2e:d1:ba:fc:e5:b2:ed:d5:cf:26:c4:2a:84:07:
                    d4:c9:cc:05:cc:d2:0d:24:d0:33:ad:eb:39:e2:f5:
                    a0:79:8d:0a:ce:1f:6c:80:ed:22:17:c5:ed:0e:4f:
                    e5:a4:36:14:f4:44:a9:74:e0:33:09:1f:79:a9:80:
                    c6:64:6b:91:7d:e2:32:83:58:b1:aa:dc:ba:b9:4d:
                    51:ac:16:9c:55:97:35:97:de:53:7b:76:d9:78:8c:
                    a6:4b:9f:b4:8e:03:1e:7e:9e:f9:a5:1e:7e:01:40:
                    2a:49:79:b0:7f:78:ea:1c:c9:3d:d3:fb:9c:a0:75:
                    9c:19:44:11:81:0d:49:99:20:fe:6c:79:13:ae:cc:
                    f0:00:71:81:ab:82:2a:77:d2:05:e0:d3:e3:dc:45:
                    4b:c8:64:1f:9f:ec:d3:da:f1:b8:b9:38:75:85:39:
                    88:5c:1d:8d:d5:b1:fd:5f:0c:b5:72:ab:23:5c:0b:
                    12:a2:60:82:0e:a0:17:ee:8d:f3:d8:2d:06:fa:0e:
                    d8:83:71:3b:b5:4f:d9:54:b1:0e:03:8e:5a:94:ff:
                    fc:95:cd:38:f4:67:3e:22:78:b0:90:cf:5b:0f:06:
                    c8:9e:fe:63:d1:c1:8b:ee:d7:3b:2c:14:05:e7:9e:
                    97:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2D:B7:39:E1:D6:94:58:51:DE:F2:23:67:F1:F2:D2:8B:9A:09:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/80833e70-61ee-3e51-93b1-3912c4e7edf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.120.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:09:b9:c3:fb:35:72:05:a0:be:1c:9c:f0:7d:8a:44:ba:5a:
         e7:ac:1d:42:5f:66:af:2a:4d:17:7b:b2:87:42:ec:4a:1d:e8:
         47:8f:7d:f1:eb:3c:a9:e8:dd:5f:a2:7a:4e:33:66:0f:a1:df:
         02:be:1c:ab:52:79:84:5d:1d:53:88:54:c1:6b:1f:35:f9:d5:
         d1:ac:45:6e:ea:97:9b:de:7e:bc:9b:f2:34:6a:4a:59:7c:09:
         9c:9e:f6:9a:ac:42:0f:ae:31:3b:7b:d8:65:ed:64:ed:a4:e5:
         8a:26:8a:64:ab:e5:94:f6:a7:ea:0a:0a:df:de:c5:6e:6e:68:
         fd:82:ca:4d:91:19:cd:00:3e:6e:ad:f7:13:65:2d:09:4c:fe:
         93:2d:a3:ed:5c:dd:9d:9e:c2:57:f8:a8:39:61:bb:fc:60:68:
         65:ba:46:3c:1f:c6:af:a9:6d:19:d7:6f:2c:7d:7c:e5:1f:01:
         fc:42:7d:eb:67:85:1b:66:88:de:bd:db:51:c7:bf:fb:6e:a9:
         08:c0:5c:c7:12:0d:f6:cd:60:45:24:83:76:ce:25:73:a2:9d:
         70:c8:d8:c8:1a:20:b8:42:b5:39:a1:88:57:db:6c:90:12:d6:
         dd:5c:ec:ec:9d:f9:c3:79:f9:68:80:1d:6d:3e:14:95:e0:61:
         dc:46:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:20 2026 by rpki-client