Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2758c6c2-1173-38ee-a05c-b00bb9a66beb.roa
File:                     2758c6c2-1173-38ee-a05c-b00bb9a66beb.roa (raw, json)
Hash identifier:          3N+DucSGDfpcj8MzwJqGXEJFfzo9JWFKXWZF99XARTc=
Subject key identifier:   0E:E5:33:B2:85:47:36:CA:2C:4F:F4:79:D1:FC:83:AC:1B:3E:A2:DE
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6DDAE07DEDF90A04432C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2758c6c2-1173-38ee-a05c-b00bb9a66beb.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        172.111.121.0/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:dd:ae:07:de:df:90:a0:44:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=9b651071-7d21-48d3-8dce-0684adca9e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:20:40:a7:ae:ab:82:80:7e:e6:84:fa:c8:aa:
                    1f:3b:cf:ba:c3:57:ec:d5:f5:c0:b9:8b:83:23:75:
                    0b:de:6e:4a:e1:6f:f4:82:8f:54:3a:f3:76:b1:a9:
                    2f:bd:68:31:2b:21:76:7c:b5:b9:6f:09:7a:94:19:
                    53:b7:48:fc:fa:0e:2b:3c:da:17:01:05:40:27:12:
                    d3:5f:78:02:13:03:97:e4:43:f2:5c:aa:0f:d2:2f:
                    02:0a:98:e7:b2:97:17:5c:5b:1b:ef:4c:a3:88:3c:
                    a4:ed:cc:e8:05:6d:e4:34:57:98:41:98:3c:7c:9b:
                    09:43:73:16:34:13:18:33:8d:6a:58:26:20:8d:10:
                    ce:17:22:61:d1:66:38:ca:3c:e4:c8:d7:f2:6a:33:
                    84:1a:6c:0c:e1:22:ef:6c:79:63:c7:15:72:d5:9e:
                    d8:3f:e4:01:5c:70:e7:14:ac:0a:0c:c0:b1:e1:8a:
                    85:95:62:d3:7e:f9:b5:cc:12:31:cc:5b:b0:74:c6:
                    26:a6:7d:a9:11:bb:52:0e:3f:31:ad:6f:62:3d:f7:
                    14:32:56:ee:ce:56:36:7a:d1:4c:bb:a9:d8:8e:38:
                    88:60:3c:4f:5f:c8:6c:95:31:24:3a:2a:be:7b:da:
                    e1:03:b7:98:2c:0a:69:37:8e:13:b6:61:d2:98:5d:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E5:33:B2:85:47:36:CA:2C:4F:F4:79:D1:FC:83:AC:1B:3E:A2:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2758c6c2-1173-38ee-a05c-b00bb9a66beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.121.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:32:20:0d:90:8a:10:35:bc:68:f6:58:0b:2b:90:21:d3:10:
         69:30:1b:ad:85:64:4a:42:0a:ab:3b:73:3d:04:a8:35:e3:df:
         a9:2e:11:c4:8f:b5:dc:98:a3:92:42:b0:2e:e9:5e:bf:e0:72:
         8e:8c:16:8d:ea:c6:61:1f:b4:c5:9d:c7:0f:25:3e:47:8f:12:
         8d:61:4f:a8:cd:19:04:6f:e1:43:b0:d4:e5:ab:8b:f9:ef:77:
         66:96:9e:96:8b:dd:f7:fe:8d:c3:6e:f6:2d:a6:ea:9e:c9:d1:
         ba:95:72:ce:69:17:d0:86:59:8f:b3:46:f2:00:b2:58:a4:8b:
         96:73:c6:51:0c:f8:34:d6:ef:40:38:4c:06:21:f8:62:8f:63:
         0a:d9:a4:05:93:b3:13:df:79:76:42:72:26:95:0c:d5:6b:d7:
         b8:64:ee:b7:5d:e4:a0:e2:eb:9d:6c:ea:6d:80:3c:59:7d:79:
         7a:57:db:a1:59:c8:76:49:1d:96:97:26:21:8f:b7:10:52:2d:
         6b:38:e9:00:e1:47:c4:d7:ae:ee:6c:74:a4:83:1e:17:58:24:
         87:4c:85:d7:b6:52:07:7a:12:ce:a4:8e:72:40:79:53:71:49:
         6e:9c:7f:b5:95:ec:59:6c:98:03:01:52:25:c8:0e:8d:0c:ff:
         9c:29:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:06 2025 by rpki-client