Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/003a0959-c2a7-3daf-a86d-ff53afbbd0a9.roa
File:                     003a0959-c2a7-3daf-a86d-ff53afbbd0a9.roa (raw, json)
Hash identifier:          fGI123oy8HmAKuReSRCPkpVFyRMHZPKkekwQOj+GwLc=
Subject key identifier:   10:56:7B:6A:FD:5B:58:4D:03:DC:45:7D:EC:93:3B:31:24:56:4B:E8
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6E252D565DA981FB9E5B8
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/003a0959-c2a7-3daf-a86d-ff53afbbd0a9.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        172.111.121.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:e2:52:d5:65:da:98:1f:b9:e5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=eec15189-a266-4742-a90b-50c61f06b73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:8f:cb:d7:63:3d:2b:00:d6:ed:8a:50:58:
                    6d:4b:8a:a6:56:d1:9b:46:1d:c1:f9:0f:2a:c5:51:
                    c8:79:14:00:f1:10:52:1c:32:01:b5:9d:07:e8:b6:
                    71:75:15:87:16:15:8d:b2:fd:1d:c5:ee:86:2f:55:
                    34:1d:d9:0b:35:e1:59:1a:4d:5e:36:04:83:bb:63:
                    f4:c2:a2:ae:3e:01:a6:2c:4d:b0:0a:c9:bd:49:65:
                    9e:61:73:0f:64:d4:70:f1:bd:24:5b:a2:35:c0:7f:
                    72:5f:63:d3:47:bb:f6:ca:48:2b:72:af:64:da:86:
                    8d:46:cf:56:cc:37:9d:89:0c:e4:12:59:6e:87:62:
                    be:1f:de:2c:ce:26:f1:c9:34:23:80:97:1f:3e:78:
                    11:65:da:38:77:f5:cc:7b:98:38:3b:2a:53:90:12:
                    34:9a:be:5b:b1:2f:bd:51:3a:c7:15:39:9f:cc:e0:
                    10:91:42:81:6b:4c:7a:e2:ed:bf:05:64:b3:32:10:
                    57:a2:0f:16:77:2e:dc:ff:1d:7e:6c:1b:58:ee:2c:
                    26:76:ec:59:76:14:39:73:b0:70:3b:62:33:28:65:
                    ed:40:50:45:4a:67:ef:f7:64:a9:a7:6d:9a:59:c7:
                    8e:46:9a:d2:8d:2a:30:02:17:8d:83:7e:b5:f4:bb:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:56:7B:6A:FD:5B:58:4D:03:DC:45:7D:EC:93:3B:31:24:56:4B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/003a0959-c2a7-3daf-a86d-ff53afbbd0a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.121.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:bd:f2:2b:93:e2:86:1b:ed:69:5a:74:1d:96:c0:77:9a:6f:
         24:c0:93:5e:fe:b2:be:f3:07:a3:b1:e9:26:d9:a5:79:bb:0a:
         6e:f7:7e:0f:ff:1a:90:08:d0:19:40:c2:39:68:9e:fa:48:e4:
         b1:fa:7c:e5:32:1c:55:f5:89:e3:df:e4:ac:9f:e3:c7:1d:72:
         f0:39:c1:62:40:5c:3f:24:2e:a8:77:8f:98:0e:3c:d0:44:a7:
         a0:52:1b:1c:86:76:66:bb:a7:fe:19:5d:35:27:c1:9c:72:66:
         c7:e0:0c:c2:0c:32:1f:7a:c3:3c:f4:d9:e2:01:ee:60:3c:ee:
         89:49:5d:28:9c:0a:a7:5d:ef:d7:7e:28:e2:35:c2:f3:07:e8:
         50:94:f3:e0:aa:c5:02:3b:a3:e7:c3:f0:e3:08:5d:7a:6a:68:
         67:f8:fe:e2:68:c0:53:3a:3f:94:64:d8:95:ac:b5:c5:aa:5b:
         ac:a8:6e:7e:0d:ba:71:5d:92:0b:9a:4e:60:e7:30:9b:ee:ee:
         4b:34:d3:f4:45:1e:f5:61:a0:2c:b9:ae:30:bf:83:9c:48:d2:
         2b:72:55:33:98:43:4b:94:85:83:87:73:e3:84:20:0e:61:2d:
         c3:8c:e5:a0:a6:af:80:4a:df:07:c8:69:71:3d:13:fa:d1:89:
         39:f6:48:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:44:23 2025 by rpki-client