Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/27696e81-5b54-32f4-b2f8-7949a99a2057.roa
File:                     27696e81-5b54-32f4-b2f8-7949a99a2057.roa (raw, json)
Hash identifier:          /pwKtBB2RCIb+7jz96GLrHB/mP0sRuIIaOdlrDnTV8M=
Subject key identifier:   D5:4E:1D:12:8D:3A:F1:43:AE:A4:1E:85:82:A0:E2:97:74:7F:3B:D3
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA6C1E75A37E6F3EB4B500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/27696e81-5b54-32f4-b2f8-7949a99a2057.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        172.111.120.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:6c:1e:75:a3:7e:6f:3e:b4:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=13f38c25-4aaf-4bba-b1b1-bb1748ff9588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:21:b2:36:65:90:32:fc:bc:92:35:f6:c9:1b:
                    9c:2a:57:7e:a4:23:eb:1b:ac:52:26:2a:ea:54:4e:
                    22:24:10:96:e7:51:28:8a:6a:fd:9d:88:fd:4a:e6:
                    39:8c:a9:7e:9b:5e:d4:d2:3c:ba:4d:87:fd:ec:60:
                    69:c1:f8:17:82:10:3d:0c:27:0b:cb:88:e2:b4:40:
                    b6:02:b2:b8:29:d6:1c:7f:78:46:87:86:90:45:3f:
                    a4:a8:4a:e8:0c:14:19:69:58:3f:59:c1:cd:af:d8:
                    a7:9e:8c:b0:8e:3b:7f:9b:2e:2d:bd:a6:0d:ed:75:
                    9e:6c:b6:ae:f5:cd:be:1e:82:8d:ae:83:61:20:50:
                    71:03:d2:3f:49:94:ba:1a:c1:7b:72:25:cf:3c:04:
                    76:dc:0a:c7:02:2b:e7:f3:60:c5:1e:88:1a:ef:9d:
                    65:a1:08:4b:0b:64:74:03:9a:28:8b:bd:6c:77:ad:
                    43:8f:74:41:4c:e8:53:a3:82:d7:f9:01:eb:79:ff:
                    8c:d8:eb:bb:13:4a:ec:5f:10:73:99:83:a9:10:d2:
                    fe:ce:d2:d8:d7:a1:d7:fd:b0:72:a8:a9:99:f1:0b:
                    0d:73:dd:8a:2a:a8:77:0c:28:ca:92:50:29:f5:26:
                    14:df:65:1a:ed:e0:05:2a:71:13:07:a1:4c:0e:71:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4E:1D:12:8D:3A:F1:43:AE:A4:1E:85:82:A0:E2:97:74:7F:3B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/27696e81-5b54-32f4-b2f8-7949a99a2057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.120.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:56:ba:15:d4:fc:22:33:94:96:44:e2:18:c4:1d:d8:35:05:
         e3:b4:59:d9:83:d7:e5:b2:2e:29:0e:85:a4:36:a1:9e:6b:a4:
         c4:f7:b8:3f:74:e4:b1:07:19:23:87:14:c6:31:71:da:e7:76:
         dd:25:5d:e6:c7:a2:20:46:73:bb:47:b5:5c:7b:71:2c:79:58:
         e0:c8:a7:f2:8d:83:a0:43:93:10:3d:47:51:13:16:f1:55:56:
         cd:a4:64:e0:8c:c7:8f:c4:80:50:d4:14:fe:3e:30:5f:be:76:
         83:53:8a:b4:23:bf:57:10:77:84:6a:d7:30:75:fe:95:e8:4a:
         10:69:e8:79:fb:e0:15:1f:b2:3f:26:75:43:5b:06:77:76:81:
         83:39:77:d7:de:1d:fd:f0:c7:32:44:cd:14:f4:24:d3:97:c4:
         a3:08:da:82:cc:c2:22:36:77:5d:2e:22:e2:73:83:6d:74:4c:
         b8:15:d7:89:2f:8b:15:86:01:4c:89:b5:d9:93:3e:56:47:41:
         04:9a:df:1c:4d:6f:8b:f7:c6:b0:7d:36:96:24:5b:ec:dd:94:
         5d:b2:da:e3:80:23:3c:b9:e1:70:b1:31:bd:8e:9d:85:98:73:
         31:75:44:91:a0:66:ec:ec:84:a8:a6:34:82:c9:e1:ac:64:bc:
         8b:2f:96:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:36 2026 by rpki-client