Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ea6a170a-fe22-3bfc-af75-15461e55a83e.roa
File:                     ea6a170a-fe22-3bfc-af75-15461e55a83e.roa (raw, json)
Hash identifier:          WwFMbhR89ktGCZodmwF0wJz3ulckih6druWIehnczuM=
Subject key identifier:   AE:21:CA:27:8F:EB:C4:6F:25:E1:C2:42:3A:96:1E:45:CF:25:B5:22
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584D44FA64D22D96FAC554315F60
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ea6a170a-fe22-3bfc-af75-15461e55a83e.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     54113
IP address blocks:        140.248.105.80/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:64:d2:2d:96:fa:c5:54:31:5f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=f84a2254-9b32-4cc2-b5db-6c0ce5fb1d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:04:96:8c:c2:ae:ed:b5:ec:22:53:20:51:
                    8d:93:d7:26:b4:ee:c1:b2:0b:31:9d:dc:7e:a9:59:
                    6b:26:3a:9e:1a:53:ae:13:f7:70:77:1d:a0:97:a4:
                    6b:cd:56:38:07:80:3d:fb:a7:93:22:0e:60:62:f8:
                    ec:d8:39:a6:48:37:05:01:96:17:f2:70:7d:f9:91:
                    43:40:a6:ab:52:48:75:ef:d9:61:5c:d2:ad:3f:80:
                    93:2d:4d:f3:47:f6:bc:96:b2:99:3e:c8:36:43:1b:
                    98:f7:b5:0c:24:1a:ce:af:e1:16:51:b8:75:49:65:
                    ec:ec:84:8c:6b:1d:4d:1c:e3:03:48:0e:9c:ac:80:
                    dd:ae:bc:97:4b:c2:23:db:48:0b:e7:2c:6a:49:1b:
                    cb:87:36:c7:1b:9b:be:e6:cd:53:52:8b:93:73:95:
                    d4:a2:13:2f:69:5c:6d:db:18:17:6f:17:45:4b:eb:
                    70:f7:1d:27:c1:cc:96:28:da:ed:e2:3d:fb:0b:f5:
                    b6:f2:c8:a4:1e:e9:8e:d6:14:71:f6:d0:f7:14:bb:
                    f9:5a:d7:66:32:fd:b3:4c:18:2d:d0:c6:77:8e:c6:
                    30:fb:5a:79:c8:45:52:ee:4a:8b:c4:b1:a9:36:b1:
                    11:76:4f:66:9b:8c:33:8e:c7:eb:67:59:6d:e0:bc:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:21:CA:27:8F:EB:C4:6F:25:E1:C2:42:3A:96:1E:45:CF:25:B5:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ea6a170a-fe22-3bfc-af75-15461e55a83e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.105.80/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2c:da:f7:4a:c4:fd:57:eb:fb:b5:78:8e:b9:6c:be:64:0d:
         ee:73:b3:36:c1:e9:2e:28:ca:40:54:a7:3d:d3:2b:83:93:99:
         54:05:9f:1a:b3:3b:41:f7:04:92:52:ad:89:b5:bd:52:d4:d5:
         34:40:77:fe:4d:7c:f0:42:dc:fb:43:99:32:54:0c:5b:57:57:
         04:cf:4c:b6:12:72:92:70:65:37:34:69:3d:68:d2:7b:51:95:
         9e:7f:8a:aa:2a:b8:01:20:de:2f:ee:23:19:2c:6d:51:71:22:
         a7:66:16:40:fa:3c:d5:7c:cb:88:78:27:75:6e:c6:76:ad:0a:
         ed:19:7f:c2:fd:54:44:27:0b:46:55:e5:df:87:ee:be:a4:70:
         43:82:be:a1:88:46:ce:1c:70:9e:1d:00:32:23:51:c8:d1:a0:
         36:32:13:d3:14:2b:48:78:07:9f:05:6a:60:7e:46:2c:3d:2c:
         7a:ac:90:fd:7a:ee:38:4b:fb:7d:68:53:46:9e:34:ff:74:50:
         b1:ab:e4:70:55:54:a1:6f:dd:fc:2e:a8:e0:7b:71:62:79:0f:
         51:59:03:1a:76:3f:4b:89:8e:08:f6:51:04:57:06:de:59:0e:
         96:98:b3:1f:ff:c9:e4:b6:e0:b9:ac:86:89:92:ff:ed:ff:f8:
         38:c1:50:3b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1E+mTSLZb6xVQxX2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
Zjg0YTIyNTQtOWIzMi00Y2MyLWI1ZGItNmMwY2U1ZmIxZDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OoElozCru217CJTIFGNk9cmtO7Bsgsxndx+
qVlrJjqeGlOuE/dwdx2gl6RrzVY4B4A9+6eTIg5gYvjs2DmmSDcFAZYX8nB9+ZFD
QKarUkh179lhXNKtP4CTLU3zR/a8lrKZPsg2QxuY97UMJBrOr+EWUbh1SWXs7ISM
ax1NHOMDSA6crIDdrryXS8Ij20gL5yxqSRvLhzbHG5u+5s1TUouTc5XUohMvaVxt
2xgXbxdFS+tw9x0nwcyWKNrt4j37C/W28sikHumO1hRx9tD3FLv5WtdmMv2zTBgt
0MZ3jsYw+1p5yEVS7kqLxLGpNrERdk9mm4wzjsfrZ1lt4LwOQwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK4hyieP68RvJeHCQjqWHkXPJbUiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZWE2YTE3MGEtZmUyMi0z
YmZjLWFmNzUtMTU0NjFlNTVhODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPhpUDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCqLNr3SsT9V+v7tXiOuWy+ZA3uc7M2wekuKMpAVKc90yuDk5lUBZ8a
sztB9wSSUq2Jtb1S1NU0QHf+TXzwQtz7Q5kyVAxbV1cEz0y2EnKScGU3NGk9aNJ7
UZWef4qqKrgBIN4v7iMZLG1RcSKnZhZA+jzVfMuIeCd1bsZ2rQrtGX/C/VREJwtG
VeXfh+6+pHBDgr6hiEbOHHCeHQAyI1HI0aA2MhPTFCtIeAefBWpgfkYsPSx6rJD9
eu44S/t9aFNGnjT/dFCxq+RwVVShb938Lqjge3FieQ9RWQMadj9LiY4I9lEEVwbe
WQ6WmLMf/8nktuC5rIaJkv/t//g4wVA7
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:09:27 2026 by rpki-client