Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bff72f8d-18a6-3d12-b7fc-152051c197d6.roa
File:                     bff72f8d-18a6-3d12-b7fc-152051c197d6.roa (raw, json)
Hash identifier:          wwi8Q4QNxAazK6QEwe62+KEB9E/vYD4zrp2MwTT40Ps=
Subject key identifier:   73:85:54:D6:4F:80:43:72:3F:D0:89:71:20:D0:FD:8F:B8:99:27:BA
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E6B0A0D342FBF09C5790D52C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bff72f8d-18a6-3d12-b7fc-152051c197d6.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     54113
IP address blocks:        140.248.254.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:0d:34:2f:bf:09:c5:79:0d:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=2e7acb19-c965-4005-a2af-e7095bb73590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0c:2b:15:9b:cc:6e:e9:33:37:4e:2a:ea:8a:
                    c6:2b:ce:5f:f1:68:1f:5a:a9:6f:87:05:db:5f:8c:
                    51:db:e2:c0:c9:e7:87:76:71:a4:3d:c8:fa:84:36:
                    a7:71:3d:ce:78:86:08:3c:d2:22:55:c2:ed:72:f8:
                    ec:ac:8a:00:03:88:30:ec:9f:2b:8f:df:8c:f5:4d:
                    15:01:9d:e5:3c:0b:74:d1:9c:c4:44:f0:0c:2e:82:
                    23:6b:83:85:ed:8f:f3:ab:b5:99:6b:1a:d7:0b:65:
                    9d:02:87:20:97:4f:68:7c:00:83:5e:f3:18:a7:09:
                    41:a6:b6:c5:85:23:e9:c8:59:03:10:fd:f0:d6:f5:
                    5d:12:fb:a3:e0:c6:92:dd:8f:22:c0:47:a9:19:b9:
                    71:31:c6:97:93:50:f7:c1:ff:01:2f:1d:e0:8f:d4:
                    8e:16:b8:c6:86:8c:5b:5a:5f:3c:24:49:e7:15:35:
                    6b:56:c9:5d:56:84:0c:1e:18:b0:98:fe:fa:5b:0f:
                    1a:4f:69:f5:e9:e2:fa:11:2a:30:87:bd:30:df:e4:
                    71:12:9d:07:f9:09:a9:ca:aa:36:fc:7e:03:d7:2a:
                    1a:8c:bb:ff:47:03:79:82:9b:37:8c:f8:5b:88:8d:
                    47:a8:5f:af:2b:7a:74:46:12:ab:66:30:f9:40:8d:
                    73:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:85:54:D6:4F:80:43:72:3F:D0:89:71:20:D0:FD:8F:B8:99:27:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bff72f8d-18a6-3d12-b7fc-152051c197d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.254.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8c:91:1d:39:31:c9:1c:28:05:86:5f:4a:19:30:99:64:a6:
         7d:c5:00:44:94:11:9e:63:96:d0:09:7f:10:ca:eb:6b:dc:c6:
         99:6b:84:1c:cb:75:69:ea:b2:3e:d0:5d:1e:f8:5b:66:3d:2b:
         07:c8:e8:88:70:38:2d:3a:9f:ee:a1:41:25:ed:6f:4d:2b:84:
         41:a4:30:54:cc:d5:68:97:15:1b:9e:c8:6a:9b:9e:92:b0:7e:
         98:ec:9d:c1:fc:08:4d:31:5c:11:62:07:ed:3a:62:71:48:18:
         52:97:2b:75:a6:b3:39:b5:44:c4:a0:52:9e:44:62:58:ae:85:
         a1:b6:48:33:01:4e:2f:c7:02:1d:51:2a:e3:0c:a9:94:6f:89:
         69:0e:e5:21:ed:ec:6a:57:9a:5c:5b:86:71:79:d0:ec:d2:82:
         ea:9e:e9:65:30:45:22:e0:c9:25:3f:34:6b:c2:5b:96:82:a5:
         19:c9:be:d8:31:80:cd:31:d8:bb:56:fb:a5:2d:70:f6:68:e3:
         e7:62:d4:f1:4a:f6:c3:7b:e2:d6:c3:27:f6:af:f1:22:da:14:
         32:1c:42:20:38:b8:8e:b6:60:08:f7:e9:23:6f:5c:c8:48:d9:
         19:76:ae:b0:c4:32:26:89:0f:57:d9:fc:5d:44:7d:b7:ac:05:
         70:7e:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:40:18 2026 by rpki-client