Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9aab875f-034d-3d17-b14a-b7836794e260.roa
File:                     9aab875f-034d-3d17-b14a-b7836794e260.roa (raw, json)
Hash identifier:          93hcur3rFMpHCk0LWLDg87FXhoAChLn8U/z2xw7qbIk=
Subject key identifier:   77:7D:B1:1A:5C:3F:74:FF:53:B7:EB:AE:E6:28:3F:70:D2:A6:8C:23
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA6CBD40BEBBAA00FCF920
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9aab875f-034d-3d17-b14a-b7836794e260.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        172.111.112.0/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:6c:bd:40:be:bb:aa:00:fc:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=18e0e210-1ef3-44c8-b023-0ca030d7fa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:96:16:e9:cc:fc:47:99:17:4a:ee:58:cf:
                    a7:dd:e4:c3:4b:d7:b7:a6:8e:90:f2:5a:20:44:d1:
                    60:59:59:de:b7:ff:ec:6a:0e:ce:b3:25:e4:f0:44:
                    db:39:d6:6b:fd:19:e6:51:b2:21:38:47:eb:83:f8:
                    f0:62:54:49:0d:68:bd:fa:0b:15:2c:e8:ff:0e:73:
                    4f:0c:bd:0b:97:87:4e:23:01:5c:4f:ce:a9:1d:11:
                    6e:30:ef:c2:1f:a8:2e:ce:14:b4:7e:41:42:d6:ac:
                    95:79:41:01:53:0d:f4:60:75:2b:c1:60:d0:7b:95:
                    c3:92:c8:f7:6c:fd:5a:42:d7:0f:2c:0a:74:a5:99:
                    23:36:84:4c:2c:fe:bc:1d:41:ce:28:92:6d:7f:9f:
                    47:50:6a:26:81:e2:71:fe:80:3b:c5:c5:4c:18:4a:
                    d8:50:e7:ba:76:89:71:d3:bf:2f:53:77:c5:44:b8:
                    49:ee:37:4e:59:c3:cb:32:bd:1f:e0:a9:cd:09:32:
                    d1:6e:37:91:fc:f2:6f:b3:13:f7:23:0b:d7:0d:1a:
                    b0:67:2f:b1:4a:d9:9c:7d:e7:e9:32:d0:30:86:3e:
                    de:8a:93:e6:81:9c:51:e9:51:d1:fd:4c:ae:bf:c3:
                    a4:cb:df:74:82:3f:0d:07:95:27:5e:b9:cc:72:92:
                    b9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7D:B1:1A:5C:3F:74:FF:53:B7:EB:AE:E6:28:3F:70:D2:A6:8C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9aab875f-034d-3d17-b14a-b7836794e260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.112.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:52:c8:8b:ee:4d:30:38:a5:7b:51:c0:76:98:ef:97:38:7b:
         34:94:b0:12:c6:d6:4f:54:77:da:20:fa:6b:09:79:a4:1d:ab:
         94:71:fd:d8:46:f8:af:7b:e3:ac:8d:61:d5:6d:93:6f:a5:5e:
         d6:36:b8:91:f4:28:ca:dc:20:c1:2f:8f:3d:23:c5:0a:cf:f6:
         db:95:7a:ee:90:4f:fe:a2:a7:d5:3f:19:10:04:65:c4:06:88:
         22:a6:5f:27:85:54:d7:12:30:08:c3:3a:c4:53:ec:f8:c6:61:
         6e:94:f3:ed:c2:a8:3c:18:db:9c:3c:8a:7f:9d:89:3c:3d:55:
         ef:9a:d3:a9:72:f2:86:c9:07:34:69:fc:bb:ba:e3:e3:b5:74:
         0a:e1:1b:35:37:c2:92:09:6c:d8:e6:ad:cf:19:35:99:72:dc:
         53:01:0d:e4:4a:6d:30:77:42:1f:47:86:8d:dd:69:93:72:23:
         4f:bc:c6:b9:ea:2f:d1:0e:55:19:e3:3d:f8:9f:9f:9c:9a:9b:
         54:a2:92:03:36:61:72:7b:35:16:8f:38:d5:46:bd:01:b3:e1:
         be:6b:c3:ce:95:9e:81:eb:6c:32:83:82:74:46:d6:2c:d5:d8:
         10:d6:6a:9b:d7:93:47:62:fd:7d:19:93:e0:5c:9d:1b:06:db:
         93:d6:da:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:20:59 2026 by rpki-client