Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8c4b65fb-eb70-3028-9f58-de8f80565386.roa
File:                     8c4b65fb-eb70-3028-9f58-de8f80565386.roa (raw, json)
Hash identifier:          7ayAcrd5w+tBU0qWdJ7MhQNH5+FMJFkj/Lahh9RsvO8=
Subject key identifier:   42:A9:B2:E3:C8:D8:6A:95:91:B7:FE:59:51:46:51:CD:84:79:C3:DA
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA6CF5AACF5B27D1E13800
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8c4b65fb-eb70-3028-9f58-de8f80565386.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        172.111.121.32/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:6c:f5:aa:cf:5b:27:d1:e1:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=7f0ba384-b9b2-40f4-85ea-bd73f57749b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:f2:66:3e:12:f3:c6:0b:75:ba:ca:bd:f1:
                    bb:7c:49:7f:78:30:7e:0c:c8:82:fb:9e:56:c6:03:
                    09:cd:60:e2:48:78:51:a7:7a:10:b4:a9:fb:0b:1f:
                    0e:ce:c0:a7:08:c9:52:51:16:d9:f3:69:b9:6e:5d:
                    35:eb:21:29:43:a9:a0:b1:5c:96:1c:a1:42:06:3b:
                    c4:04:37:e8:3d:4a:da:f7:07:74:b0:c6:7f:1e:af:
                    b9:9d:ea:35:75:d5:ef:44:89:75:aa:7c:39:4e:94:
                    4a:bc:76:a6:b9:cd:f8:92:58:f7:45:c3:1f:11:7f:
                    9d:1c:ba:12:0a:04:d0:8a:ad:57:80:ee:b3:bc:b0:
                    7c:1e:5a:35:0b:f3:19:a9:e4:a0:12:ff:0c:6f:c2:
                    e5:1e:8f:37:03:60:f6:27:c9:66:3f:ed:58:2c:a9:
                    76:ee:11:6e:42:3b:56:c1:ec:09:8b:9e:10:e0:2e:
                    32:ff:48:5c:fc:f4:86:db:65:df:2c:72:1f:e1:57:
                    15:20:dc:7e:05:29:40:0c:b9:50:1f:d4:d5:e9:ca:
                    71:b6:e9:5b:38:d5:48:1d:37:49:ce:e1:50:ef:15:
                    b7:b9:47:98:7c:3c:7d:c7:b4:6d:e1:06:ef:97:7d:
                    10:6f:42:f6:9f:ce:4d:07:ce:68:2a:53:d8:41:04:
                    4f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A9:B2:E3:C8:D8:6A:95:91:B7:FE:59:51:46:51:CD:84:79:C3:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8c4b65fb-eb70-3028-9f58-de8f80565386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.121.32/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:00:13:bb:f1:37:4b:40:70:9a:1a:6a:38:0e:37:4a:35:68:
         4d:90:6e:4c:e9:ff:f9:3a:b5:e0:15:71:fb:af:31:ac:f5:96:
         52:bd:34:5a:d6:af:8e:7c:8d:b6:0e:54:91:61:84:4f:ec:7a:
         8f:6a:12:b3:4c:f3:08:05:29:44:7a:46:09:d1:fa:fd:5a:94:
         b1:52:40:ee:2b:be:9e:97:ce:76:bc:1e:c4:7c:9a:f5:49:63:
         bf:8f:28:3a:e7:29:ae:3f:67:2d:0a:02:a4:92:93:ef:49:6c:
         6e:f4:01:59:28:f0:9a:12:48:e8:3f:3d:b5:1c:f0:c8:54:cd:
         50:4f:db:95:05:37:8f:2b:e8:cd:73:4c:a9:29:5b:36:7f:1e:
         fe:d1:95:c2:18:39:1e:1c:c6:2b:6f:df:d7:e2:86:c1:94:b6:
         2f:d6:78:f5:c3:ef:52:a8:2d:b4:40:c1:4c:4b:a1:e4:47:9a:
         3b:f5:47:25:be:ef:d5:c3:13:d5:7c:e9:0c:f2:1d:1e:75:e1:
         9c:3e:12:3f:cc:1b:64:b2:61:14:3e:a5:eb:2c:4b:12:4f:97:
         85:30:1a:3a:cb:01:cf:a0:08:2e:5d:ff:c4:7d:cc:3e:28:a7:
         41:75:4e:71:08:aa:7c:d2:e5:4b:66:d1:aa:e1:fb:53:be:1d:
         6b:40:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:01:00 2026 by rpki-client