Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8691cdac-e5eb-3a35-b4da-d20381435fea.roa
File:                     8691cdac-e5eb-3a35-b4da-d20381435fea.roa (raw, json)
Hash identifier:          XZs6c3qJ4o9NiDqZxIoGxzVAKN+CGtOy/MultlIzyMQ=
Subject key identifier:   25:7B:B2:DC:5E:7F:4D:56:6B:D7:0D:6C:39:C9:A9:11:25:27:4E:E6
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E709F750937B54EC87C814AA0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8691cdac-e5eb-3a35-b4da-d20381435fea.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        172.111.84.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:75:09:37:b5:4e:c8:7c:81:4a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=c4635d27-541b-433f-a435-f864ced348ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b7:7c:43:81:41:a8:74:03:84:19:f9:82:42:
                    f8:16:c5:d1:34:c0:0b:1e:f1:1f:36:1f:47:20:91:
                    55:5a:e5:e4:c0:4f:c6:27:a0:2c:d6:27:3c:bb:67:
                    d7:f9:0f:82:01:e2:3f:fd:46:b7:4c:9c:95:f0:85:
                    63:fa:34:c2:d5:82:21:3d:6e:61:52:96:d5:6e:e3:
                    9a:c7:cc:17:21:16:d1:01:3c:23:04:69:7a:af:ba:
                    d1:ee:17:03:7d:8f:e9:d1:7a:32:33:1c:f1:0f:98:
                    2b:6e:c4:96:8f:30:99:ee:44:8c:98:dd:c0:08:fb:
                    85:08:71:85:60:d1:bb:88:87:f9:7d:94:43:44:b2:
                    9a:cd:f1:87:d1:5f:50:00:8b:58:e7:8d:a4:f5:1f:
                    9d:79:7b:45:8c:29:b3:e5:99:34:92:49:e3:66:4d:
                    48:82:18:42:14:ff:ca:db:bc:2d:d4:b2:0a:06:40:
                    70:ab:31:76:1e:56:a6:e2:74:b0:19:ff:56:a6:72:
                    45:26:35:71:d0:e2:7c:22:aa:b9:f0:35:8f:e1:5c:
                    fe:ae:87:03:ee:63:3b:58:8b:2a:04:63:6b:46:f3:
                    25:fa:2c:00:1e:fc:16:d2:b4:43:92:41:27:1a:2b:
                    b4:35:28:4d:37:21:fb:c1:d2:40:f7:8e:c1:75:dc:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7B:B2:DC:5E:7F:4D:56:6B:D7:0D:6C:39:C9:A9:11:25:27:4E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8691cdac-e5eb-3a35-b4da-d20381435fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.84.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:8f:5d:b0:7b:66:d1:2c:2b:ed:f8:39:7a:a3:7e:15:74:c8:
         3a:38:cd:8d:eb:42:4c:cc:8b:12:ad:8c:8a:37:2c:77:04:8c:
         46:3c:03:3c:2f:5c:92:b6:af:a0:2b:63:2c:e6:5c:bf:de:71:
         f3:78:9f:ee:91:3e:f1:a4:95:09:ab:5d:2d:46:1e:71:7b:da:
         e0:05:5f:9f:11:06:32:b0:fb:46:2c:96:1a:71:56:56:81:e3:
         72:93:ad:94:b4:0d:89:11:3b:ea:80:4f:07:12:30:fb:ab:83:
         fc:ac:ca:5d:2f:84:54:84:3e:cd:d5:7e:91:ca:29:ba:7a:be:
         06:88:48:98:fd:14:35:4c:6e:19:da:6e:0d:2a:9c:a3:cb:70:
         cc:06:38:b4:ba:78:b7:92:5b:c0:42:65:db:cf:dc:aa:a3:42:
         d6:70:b7:a6:85:14:59:af:09:24:22:73:e5:c1:ba:2f:c6:13:
         ae:64:7c:ac:1d:11:98:8b:13:73:d0:8c:cf:d3:56:3b:b1:c6:
         e3:47:99:13:05:4d:e0:af:a3:05:f5:36:f1:ca:0f:f7:03:80:
         53:fd:76:39:51:89:48:6f:2f:af:19:66:b1:46:29:b6:c4:b4:
         f8:8f:fa:9e:07:41:96:b0:4d:95:02:42:e9:5b:e7:1b:0c:da:
         dc:cc:21:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:46:04 2026 by rpki-client