Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9b17599e-319d-378d-87df-d8d5b95101ef.roa
File:                     9b17599e-319d-378d-87df-d8d5b95101ef.roa (raw, json)
Hash identifier:          Ur5Isiu+mzEnSHrf0UjlgR3ucN0oH8CnxkQj6ehY53g=
Subject key identifier:   51:53:99:E5:A6:90:F4:63:1B:20:6C:7A:C9:82:2E:E7:6B:B1:3C:B9
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E7ABE2C32A670FE88787FA000
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9b17599e-319d-378d-87df-d8d5b95101ef.roa
Signing time:             Mon 13 Jul 2026 00:00:18 +0000
ROA not before:           Mon 13 Jul 2026 00:00:18 +0000
ROA not after:            Sun 11 Oct 2026 00:00:18 +0000
asID:                     54113
IP address blocks:        140.248.121.5/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:be:2c:32:a6:70:fe:88:78:7f:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 13 00:00:18 2026 GMT
            Not After : Oct 11 00:00:18 2026 GMT
        Subject: CN=16209a7d-6048-49bd-8c66-8ffcd220606f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:cd:36:19:c6:92:31:02:e3:86:b8:2e:80:
                    4e:20:30:f9:45:bc:c9:1d:4f:08:5d:9b:a5:8c:e0:
                    4f:b8:83:e1:48:73:a1:eb:64:01:b0:b3:ab:13:b4:
                    aa:6b:78:60:1b:95:af:54:1f:23:db:0b:74:2e:c4:
                    4e:f2:d3:39:07:4c:4a:7f:ea:cf:f0:ae:0b:6e:00:
                    c8:64:ca:7a:21:8b:1c:74:92:8b:53:9d:92:ed:55:
                    b6:70:3d:21:c4:26:2f:ed:79:7f:29:a0:a9:af:22:
                    eb:f8:3b:30:3e:93:35:75:5f:60:3a:42:d6:c9:88:
                    c2:78:82:a4:09:cb:92:eb:29:30:9e:cb:bd:81:d2:
                    9a:50:ea:30:3c:c2:a1:d0:f3:86:64:54:ef:7e:d6:
                    aa:38:84:bf:46:ec:01:7e:c1:cd:35:f9:fd:b8:72:
                    c9:2b:c4:2a:d8:7c:9b:42:5a:d3:3e:5a:67:75:cb:
                    7e:c2:68:05:e7:06:98:b0:a3:d2:03:3f:0f:5a:09:
                    61:b6:8b:b0:99:08:64:50:f3:60:aa:41:8d:62:f2:
                    e5:43:c1:aa:ca:67:fe:c1:a5:b3:56:23:e5:50:2f:
                    c9:a9:68:4b:93:9c:b0:8f:38:61:84:9d:02:ae:d1:
                    84:6d:8c:16:50:ce:76:5a:69:b6:a4:b5:1a:b5:fa:
                    60:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:53:99:E5:A6:90:F4:63:1B:20:6C:7A:C9:82:2E:E7:6B:B1:3C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9b17599e-319d-378d-87df-d8d5b95101ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.121.5/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ff:cd:42:4e:48:c3:1b:00:c5:4d:7b:11:03:63:d8:8a:93:
         d9:dc:f6:0d:e1:3c:3b:72:5b:99:91:69:3b:5e:1b:58:ae:39:
         ad:26:0e:f0:0c:9d:5e:d7:49:0e:b1:f4:f3:19:9d:c2:d4:df:
         ec:f7:5f:93:65:18:20:2b:0d:47:f4:6c:16:92:bf:8c:2d:cb:
         16:65:06:b6:0d:73:c7:60:92:5e:f6:70:b6:3f:71:f6:f3:1f:
         12:05:22:df:76:b5:38:9a:31:57:e0:5f:aa:fa:02:b4:cd:b1:
         04:82:58:2c:72:95:36:3d:9a:3c:dd:29:25:d4:09:30:6e:2b:
         39:58:1c:94:67:8a:9a:a2:8c:49:fb:c9:06:92:00:95:cf:df:
         58:27:74:62:13:41:12:f3:ab:b3:c5:c0:96:de:58:8f:1a:e5:
         25:81:aa:b9:64:b7:7d:90:a6:76:e0:08:11:82:99:8a:80:b7:
         08:d6:8c:13:d9:c3:ed:9f:d1:74:0c:5b:fb:f5:87:77:53:53:
         88:e2:d8:c1:e1:d3:d1:dc:b2:a1:47:e9:ba:f6:6e:ee:50:35:
         8e:2c:19:06:1c:7b:5a:96:be:ad:25:af:14:2a:ec:11:2c:40:
         31:fa:65:0c:d7:dc:77:21:b4:ec:1c:f4:4f:c8:81:80:20:ef:
         f1:82:2b:26
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE56viwypnD+iHh/oAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDcxMzAwMDAxOFoXDTI2MTAxMTAwMDAxOFowLzEtMCsGA1UEAxMk
MTYyMDlhN2QtNjA0OC00OWJkLThjNjYtOGZmY2QyMjA2MDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP7NNhnGkjEC44a4LoBOIDD5RbzJHU8IXZul
jOBPuIPhSHOh62QBsLOrE7Sqa3hgG5WvVB8j2wt0LsRO8tM5B0xKf+rP8K4LbgDI
ZMp6IYscdJKLU52S7VW2cD0hxCYv7Xl/KaCpryLr+DswPpM1dV9gOkLWyYjCeIKk
CcuS6ykwnsu9gdKaUOowPMKh0POGZFTvftaqOIS/RuwBfsHNNfn9uHLJK8Qq2Hyb
QlrTPlpndct+wmgF5waYsKPSAz8PWglhtouwmQhkUPNgqkGNYvLlQ8Gqymf+waWz
ViPlUC/JqWhLk5ywjzhhhJ0CrtGEbYwWUM52Wmm2pLUatfpgZQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFFTmeWmkPRjGyBsesmCLudrsTy5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvOWIxNzU5OWUtMzE5ZC0z
NzhkLTg3ZGYtZDhkNWI5NTEwMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAjPh5BTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAU/81CTkjDGwDFTXsRA2PYipPZ3PYN4Tw7cluZkWk7XhtYrjmtJg7w
DJ1e10kOsfTzGZ3C1N/s91+TZRggKw1H9GwWkr+MLcsWZQa2DXPHYJJe9nC2P3H2
8x8SBSLfdrU4mjFX4F+q+gK0zbEEglgscpU2PZo83Skl1Akwbis5WByUZ4qaooxJ
+8kGkgCVz99YJ3RiE0ES86uzxcCW3liPGuUlgaq5ZLd9kKZ24AgRgpmKgLcI1owT
2cPtn9F0DFv79Yd3U1OI4tjB4dPR3LKhR+m69m7uUDWOLBkGHHtalr6tJa8UKuwR
LEAx+mUM19x3IbTsHPRPyIGAIO/xgism
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:55:14 2026 by rpki-client