Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9c2704b-e044-383e-b1fb-2cf640b1d6c6.roa
File:                     a9c2704b-e044-383e-b1fb-2cf640b1d6c6.roa (raw, json)
Hash identifier:          KayC4gzR1he5g5jIeklmbtMB7CY+chZcizGZZABXL0o=
Subject key identifier:   12:FB:12:63:7E:D2:AB:C4:B5:04:A4:03:8D:80:82:BF:1D:10:6C:E3
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA6C40086D1C38B1A27660
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9c2704b-e044-383e-b1fb-2cf640b1d6c6.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        172.111.122.16/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:6c:40:08:6d:1c:38:b1:a2:76:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=e09011f9-a1d4-4fde-a240-9048ceaa3ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:79:b3:dc:84:ce:be:0b:82:ba:de:09:62:
                    d3:39:61:f8:79:77:53:72:5e:32:57:fb:03:8b:71:
                    c5:9c:af:b1:5c:19:f6:34:78:0d:d4:12:02:42:8d:
                    1a:f4:bd:f3:2c:a6:1b:37:28:c0:32:42:7f:db:a8:
                    a5:a4:88:8e:ff:d6:02:f7:0d:ee:85:a8:32:8f:c4:
                    90:68:3c:cf:d9:ba:c1:be:56:e5:bd:a7:34:4a:33:
                    19:bb:06:90:f1:5e:67:83:b6:a6:49:82:b6:8c:1d:
                    29:7e:02:cb:d7:56:ea:66:e7:a5:f4:a1:b7:de:a6:
                    42:a9:b5:60:7f:ab:63:61:0a:57:c0:e6:9e:0f:3e:
                    c5:92:4d:13:6b:c9:35:6a:7c:d3:99:c3:05:3e:25:
                    de:ff:27:6e:70:1c:2d:69:62:d5:17:12:b5:f3:13:
                    89:8b:c0:6f:f9:3e:93:02:8a:df:15:cd:a0:69:ac:
                    bd:36:a9:d6:79:db:9f:b0:77:ed:4c:c4:ea:be:ec:
                    a2:79:3a:5e:8c:ff:16:ae:10:21:8b:ac:cc:d0:a8:
                    16:68:7f:60:36:37:dc:60:ba:e1:f0:4d:67:6b:44:
                    d1:72:79:69:c3:62:80:66:42:ab:09:5f:2a:81:79:
                    b8:0b:9a:4a:59:eb:dd:07:fa:a6:5e:cd:4b:52:d3:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FB:12:63:7E:D2:AB:C4:B5:04:A4:03:8D:80:82:BF:1D:10:6C:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9c2704b-e044-383e-b1fb-2cf640b1d6c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.122.16/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6e:e1:65:20:ab:df:cf:66:0a:03:da:ab:5e:0c:b6:0e:ca:
         09:35:12:18:9e:20:88:6f:94:e7:56:ea:e0:16:a7:73:6b:29:
         ca:b3:9a:82:4c:7a:d9:f2:c0:ab:49:3e:2b:90:44:c2:38:32:
         4f:7e:f6:19:35:9f:9b:0d:b7:4b:7c:97:84:f1:91:14:1c:70:
         85:10:3b:7a:00:93:f4:27:15:1a:20:80:16:31:86:54:02:d0:
         f1:9d:fb:a4:0e:34:d0:0d:3b:16:0a:e6:57:73:bd:02:0a:97:
         12:9b:1e:76:c4:e6:75:15:f7:06:16:3e:4b:67:45:4a:13:8b:
         64:d8:0b:d3:52:82:4c:20:b1:28:fa:c8:ef:37:b4:5d:b3:f6:
         18:1d:8e:c0:53:7a:a1:56:a3:e0:94:a4:4a:2b:e6:f7:c3:c9:
         20:62:f0:f0:21:08:0d:a6:07:70:f9:92:b2:60:50:9e:f5:dc:
         fa:4d:3a:6d:52:2a:57:d4:db:2e:52:e1:1b:dc:a5:ae:e6:10:
         00:e4:f0:7c:8b:6f:99:6a:3a:23:9d:7e:35:a1:c4:bb:0c:48:
         13:c5:bf:5b:a8:0b:68:59:4e:e5:89:66:6c:14:39:4c:3a:fe:
         35:2d:29:a4:5d:ce:69:21:47:18:36:33:a6:3c:24:83:1d:53:
         8b:0b:8f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:45:54 2026 by rpki-client