Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dc2881d5-2ec9-3385-9704-176aed49ee8e.roa
File:                     dc2881d5-2ec9-3385-9704-176aed49ee8e.roa (raw, json)
Hash identifier:          bS7HrRVeSQdTynYowu7lWMDYqKIPHlXlFGurU0QoFjo=
Subject key identifier:   4E:6E:1D:A4:1D:CA:36:48:7C:47:AF:CC:57:F5:23:C1:D1:32:E0:31
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E5F85FBE676E4FF8AF08CC540
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dc2881d5-2ec9-3385-9704-176aed49ee8e.roa
Signing time:             Fri 03 Jul 2026 06:00:16 +0000
ROA not before:           Fri 03 Jul 2026 06:00:16 +0000
ROA not after:            Thu 01 Oct 2026 06:00:16 +0000
asID:                     54113
IP address blocks:        140.248.112.5/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:85:fb:e6:76:e4:ff:8a:f0:8c:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul  3 06:00:16 2026 GMT
            Not After : Oct  1 06:00:16 2026 GMT
        Subject: CN=6d67372a-4c8c-488e-8c09-4d4d4cfdd240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c3:9e:8b:18:5f:85:85:d7:3a:71:bf:3a:0b:
                    e5:c2:f5:a2:70:4b:69:49:4b:0c:8e:5f:f4:64:b5:
                    23:e1:b0:7f:dd:65:88:5e:dd:11:d1:9f:ed:cf:35:
                    9b:48:d7:b2:a7:11:25:93:21:4e:5b:88:57:b1:a3:
                    9d:b9:0c:6f:be:00:10:35:f5:0c:77:8d:6a:02:06:
                    ea:08:66:41:92:f6:7a:9e:b1:11:b9:3a:85:6d:e8:
                    29:18:b1:e9:9c:68:c2:54:56:27:e3:df:37:9c:4d:
                    56:20:fd:01:1e:35:9d:32:82:7c:d1:87:32:5b:34:
                    76:c7:d8:76:38:a8:f7:80:d9:da:54:68:1e:46:85:
                    8c:dd:75:b6:70:55:21:f9:23:e7:13:c9:9e:f9:22:
                    0e:54:c4:e6:c6:ff:3c:a0:6b:e7:6e:91:fa:56:bd:
                    56:29:83:99:88:71:6d:d7:df:c4:98:22:22:98:9d:
                    b7:93:ab:df:c5:4e:06:11:18:ee:40:90:1b:90:4c:
                    35:e4:a1:80:f3:48:99:6d:1b:57:05:a9:1d:a4:a0:
                    db:8e:fa:0f:c4:8f:af:36:0e:c2:39:f5:aa:d1:73:
                    a3:04:dd:82:a1:08:28:29:46:09:b4:5c:a0:af:42:
                    a6:05:a0:d0:9e:21:6b:29:50:c3:19:07:f4:e1:83:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6E:1D:A4:1D:CA:36:48:7C:47:AF:CC:57:F5:23:C1:D1:32:E0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dc2881d5-2ec9-3385-9704-176aed49ee8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.112.5/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c3:24:ee:3e:9a:6d:df:94:ad:ca:bc:07:fb:2e:ca:e0:0f:
         2a:c6:da:48:b7:51:b8:83:df:9f:00:f3:b1:a8:2f:6d:6c:77:
         6e:ed:5f:6d:a1:a6:67:ac:58:76:df:2e:7d:6b:6b:e4:dc:14:
         86:f3:06:35:fa:08:f4:74:d3:3e:02:f8:6c:fb:83:98:c3:ea:
         96:a4:28:12:21:38:cc:e8:e2:d7:ab:5b:d9:89:67:a1:01:47:
         ef:70:fb:bb:13:6a:dd:3e:d4:dc:f3:dd:b1:6b:7c:8a:7d:67:
         70:e7:22:01:21:90:5b:eb:35:26:38:26:aa:a2:c0:7b:e2:bb:
         45:4d:80:40:ae:e2:54:30:0a:12:3a:52:b8:d0:c8:e4:70:05:
         8f:5c:c7:f6:82:a1:c0:6f:ab:98:3a:10:bf:9b:7b:b8:5e:41:
         65:f6:3b:b2:ad:80:7c:56:53:ff:f8:61:3b:63:81:38:14:f3:
         f3:51:73:e0:97:08:20:d8:9d:2c:04:bc:ba:a0:f1:4d:19:28:
         ae:0e:41:60:24:35:01:8f:55:d7:c0:ae:fc:24:71:cd:65:c1:
         da:b4:9f:81:f7:dc:9b:f9:14:a8:fd:9a:10:52:93:39:51:30:
         77:a4:d7:4f:03:07:29:89:0d:f1:ca:6c:03:25:cc:fe:d7:de:
         56:7a:4d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:55:08 2026 by rpki-client