Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf59d5e6-7998-3142-aa78-10b04a99a776.roa
File:                     bf59d5e6-7998-3142-aa78-10b04a99a776.roa (raw, json)
Hash identifier:          x7PZQZyIo7j7MKwRzG1JacZTxjiUVZlVkqFFZKNuzhY=
Subject key identifier:   58:20:3A:C9:79:E5:34:0E:DD:C4:3A:E4:3B:59:20:08:9E:5C:4C:5E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E69A4B292AEAAE3235742DD00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf59d5e6-7998-3142-aa78-10b04a99a776.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     54113
IP address blocks:        140.248.104.80/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b2:92:ae:aa:e3:23:57:42:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=00fe5e18-3162-4443-bc7e-0bc41ab5b975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:cc:5a:7b:94:82:2c:e4:a9:33:50:86:72:
                    78:65:a2:c1:dc:a5:2e:1c:5e:59:2e:dd:ec:27:86:
                    a6:c5:34:86:52:ce:ea:ce:1c:1a:de:51:56:21:e2:
                    f8:54:d1:20:7a:22:e1:1f:bf:97:22:cc:9c:58:b1:
                    61:c4:24:5b:66:d3:9c:7c:8b:1c:5c:0a:73:d5:3e:
                    67:7e:2a:11:9b:87:72:d1:04:cf:ae:d7:55:4d:0b:
                    e4:a2:e4:95:cf:d9:11:ba:76:1d:eb:89:ab:df:5e:
                    e6:8c:73:95:99:de:ea:79:23:89:8c:8c:89:b1:ca:
                    5a:d4:f1:fe:0f:27:c5:dc:23:96:b4:1d:29:d6:1b:
                    8b:6b:28:f2:43:2b:19:be:3b:99:dc:a2:d4:6a:17:
                    f9:0d:36:2a:99:38:8f:18:8e:7a:e1:43:5a:b6:fe:
                    c1:56:62:41:7a:52:02:51:02:6e:b6:9e:93:ec:85:
                    90:9e:2f:57:44:cc:fe:64:04:a8:86:56:f5:ce:6f:
                    20:82:19:72:3b:23:b3:f7:78:f3:70:98:09:c5:84:
                    74:b3:69:8f:90:41:7a:5d:6e:98:7b:b6:12:00:45:
                    9b:12:3f:7c:3a:d2:75:2c:e7:aa:99:a4:17:c6:74:
                    aa:77:86:27:0b:c6:33:52:98:c4:ee:a7:b1:0f:db:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:20:3A:C9:79:E5:34:0E:DD:C4:3A:E4:3B:59:20:08:9E:5C:4C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf59d5e6-7998-3142-aa78-10b04a99a776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.104.80/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ac:94:1d:8c:b2:04:24:3d:57:85:4b:8e:5f:6d:c7:e5:ba:
         1c:f3:bb:76:a7:05:08:21:19:91:74:de:17:db:88:2d:65:f4:
         4c:da:51:ba:f6:be:58:40:67:d3:d7:e8:aa:5c:ea:c9:4a:dc:
         02:23:4c:e9:0a:78:1d:2e:79:53:1d:ab:28:67:e2:2d:d8:88:
         c8:15:f1:67:09:6e:56:b1:55:3a:d3:fb:07:9b:34:58:34:0e:
         e5:41:2e:09:ce:6e:0c:b2:af:30:b8:f1:95:0c:78:49:88:cb:
         aa:69:00:0d:fd:35:e7:0b:65:5e:cd:83:ae:26:37:a3:3e:65:
         7f:7b:5f:05:ca:d7:a9:c0:ad:15:9f:34:8f:d8:50:57:d2:f4:
         dc:d2:b8:49:2e:0b:de:bb:81:66:de:95:e0:49:6b:67:d0:5f:
         fc:60:1a:61:83:be:f6:3c:34:be:86:42:64:d6:97:71:23:c1:
         e9:73:3d:f5:2d:68:b6:30:3d:4b:44:d2:30:34:cd:d9:54:b2:
         1a:a8:de:fa:ee:19:f7:8e:88:aa:0e:62:6c:69:62:b9:6b:52:
         d5:05:74:cb:a3:5c:28:33:f5:ab:c6:00:b8:b5:27:dd:ac:6b:
         56:3a:ae:13:5f:4a:32:1e:a2:d1:b7:49:67:59:aa:f5:39:6f:
         19:bf:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:25:48 2026 by rpki-client