Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/12b9cd40-c7d1-36f3-9e21-296be7d43dec.roa
File:                     12b9cd40-c7d1-36f3-9e21-296be7d43dec.roa (raw, json)
Hash identifier:          yoofyqTd/gTZVP3QM7ev4kd5HOM27UxhZ/LgxaH8mqw=
Subject key identifier:   4B:B7:0D:B6:CF:21:9B:94:60:5C:EB:6C:88:42:CD:8D:41:DF:87:56
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6DBC2532F43A2E8F62C70
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/12b9cd40-c7d1-36f3-9e21-296be7d43dec.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        172.111.72.48/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:db:c2:53:2f:43:a2:e8:f6:2c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=386f1dae-6e61-41cc-923c-84f732793a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:16:f3:c7:8a:57:14:8e:37:bc:ea:35:91:
                    9e:31:9c:af:f2:7e:3d:eb:94:d2:b9:97:96:76:76:
                    73:ae:fa:97:60:e0:f0:82:68:61:bc:2f:40:29:e3:
                    20:76:ed:b7:ee:c2:f8:6d:8f:0e:3c:fc:58:97:c9:
                    cf:9d:de:ac:ac:f7:32:8c:6a:6e:d7:43:5c:72:3d:
                    ee:fd:e4:d4:a0:8c:12:6b:ab:4b:1a:02:65:7c:b0:
                    af:44:4d:e1:93:d4:22:2f:63:74:2d:4e:43:ee:f9:
                    18:f9:17:b8:f9:c4:ca:8b:09:f1:31:81:e6:2c:ed:
                    8a:3f:37:17:bd:25:fd:f7:b8:0f:aa:3b:9d:94:ed:
                    72:b8:0f:51:2c:c9:18:5e:d7:71:23:c2:4d:5d:bf:
                    e9:67:0b:a1:03:08:77:71:bd:33:84:91:cb:b3:d3:
                    9c:26:31:26:bc:4a:e9:3f:60:0f:8f:c3:09:2d:09:
                    56:44:de:ba:70:fa:72:ca:1b:24:8c:49:f5:94:c2:
                    c8:ca:99:52:93:d5:3e:48:6c:76:12:f6:5c:fb:6f:
                    a1:15:03:11:bc:6d:b4:49:e8:97:be:ac:14:5f:74:
                    57:9e:3a:8a:a8:58:68:5b:eb:e4:18:bd:2c:bf:99:
                    bf:8a:c9:30:db:15:df:30:af:fd:ee:ad:e6:72:d7:
                    fc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B7:0D:B6:CF:21:9B:94:60:5C:EB:6C:88:42:CD:8D:41:DF:87:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/12b9cd40-c7d1-36f3-9e21-296be7d43dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.72.48/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:6d:c0:a2:a1:27:4b:36:be:d8:f8:32:4e:ba:f7:6e:d3:
         5f:8c:b1:7c:71:b2:2b:18:4e:3a:a9:9f:7d:45:39:8f:cc:b3:
         58:5d:a5:e8:e7:54:4b:bb:f6:90:09:3c:ee:bf:a3:d1:68:2a:
         fb:f9:57:30:fd:bc:9c:5b:ab:4d:27:34:95:db:22:8a:0a:c5:
         ce:35:7d:78:98:e4:ad:ed:51:5e:27:cc:7f:ba:f6:8f:80:4d:
         7d:ce:eb:bb:86:7b:ee:19:60:69:14:f8:e0:95:b6:bb:5a:17:
         4c:13:91:7a:23:34:37:6f:69:9f:0f:19:db:99:fc:9b:f6:9f:
         4e:e6:b3:99:92:eb:db:87:8e:e3:45:4e:41:27:15:c9:33:5c:
         f5:4c:cb:57:d0:25:89:1c:58:1e:c4:e4:05:76:f8:49:6d:b2:
         ec:cc:e2:82:a2:68:8e:f9:8d:53:52:1e:36:bf:83:e7:19:30:
         4f:cd:b8:98:3c:92:d0:0f:11:cd:eb:aa:c4:73:97:97:ca:e1:
         54:f7:f4:bb:3a:09:28:93:b9:20:3b:c6:a6:31:99:c6:5a:fc:
         dd:5c:28:0a:71:81:cf:97:3b:23:83:56:6a:11:ca:46:fa:d6:
         0e:4c:34:95:51:9c:e9:a5:c9:c4:fd:7f:49:b1:d1:34:53:e5:
         38:a7:14:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:09 2025 by rpki-client