Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5395f165-fd80-35e5-b196-16a632e95793.roa
File:                     5395f165-fd80-35e5-b196-16a632e95793.roa (raw, json)
Hash identifier:          zWDYI0w+IlWtwBxfLHdnyCaTzXav0fu33FqH5XHQonM=
Subject key identifier:   41:36:93:33:3B:98:A1:FC:C6:2C:B1:D8:E3:F9:75:2E:2D:B8:70:AD
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6E60194012C4F4287E000
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5395f165-fd80-35e5-b196-16a632e95793.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        172.111.115.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:e6:01:94:01:2c:4f:42:87:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=69f61180-3e71-4a91-ba15-e238459fe876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:9b:b2:8e:e4:f4:e6:09:aa:0b:bb:e5:4e:
                    94:dd:50:22:70:7e:82:a7:ad:c0:42:cf:03:ec:a9:
                    9e:47:16:c5:11:ac:82:0c:07:a2:e4:7d:b7:f6:12:
                    d8:43:21:8f:a7:fd:c2:45:f3:ed:58:18:2f:86:14:
                    01:9b:bf:31:4f:39:f3:78:da:69:eb:54:41:98:74:
                    95:31:08:11:7e:73:0e:6d:f3:92:4c:df:c8:4e:fd:
                    db:2c:c4:36:76:cb:89:02:b6:0e:8f:23:d6:ef:4b:
                    b3:83:bb:9f:fb:9f:f9:bb:35:da:fe:a1:c6:19:5f:
                    ff:bd:72:a3:5a:fe:c0:43:2c:b6:b7:72:64:f5:8a:
                    3e:a8:3c:2d:a2:77:4a:89:0e:aa:9b:f1:60:da:9e:
                    44:6d:09:ad:b1:05:45:23:9f:64:86:1a:b0:b6:da:
                    cd:91:3b:b9:0d:6d:8b:57:e9:e9:2d:f0:79:60:9d:
                    89:cc:cf:5e:38:56:76:78:7a:3e:fd:c1:b2:a5:91:
                    d7:c7:43:d2:23:08:20:69:89:5e:5b:0e:08:cf:1c:
                    b7:0b:d1:31:f4:67:41:9c:f1:df:04:b7:e1:aa:2b:
                    27:9f:2f:14:ec:21:0c:e8:cd:07:d8:ef:0e:0c:e9:
                    d5:74:44:f5:f1:86:15:66:61:2d:83:95:7a:8b:d2:
                    a3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:36:93:33:3B:98:A1:FC:C6:2C:B1:D8:E3:F9:75:2E:2D:B8:70:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5395f165-fd80-35e5-b196-16a632e95793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.115.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2e:26:10:04:2a:dc:9b:66:53:55:7d:02:0e:ab:f9:e9:66:
         1b:cb:80:cf:d9:bd:a1:3d:0a:9c:f6:47:66:5f:26:89:83:8e:
         d4:a3:fe:04:fb:ec:90:3a:6d:a4:37:b2:75:a1:06:75:f0:c3:
         85:7a:13:09:cb:63:50:75:17:20:08:ef:73:44:19:5d:90:2e:
         3e:5c:46:36:53:73:83:2f:2e:67:05:8e:3d:51:b5:86:6c:90:
         0f:ba:8a:af:38:4d:45:1d:71:3f:99:2f:2b:c3:1c:3d:3e:80:
         32:5f:d4:ef:7b:1a:a6:9f:9c:41:e0:69:d3:1c:1f:b1:12:cc:
         98:ec:34:64:34:4f:48:0f:9f:13:97:58:7a:73:ab:6a:d4:aa:
         9b:6f:0d:8e:64:f1:5b:f9:73:6e:67:e9:a4:eb:4e:d1:48:30:
         32:f0:ea:bb:63:40:5c:69:d5:87:f0:97:ac:36:c1:b7:5d:82:
         70:41:91:65:52:ae:54:e9:7d:13:9e:be:78:05:78:5f:67:64:
         c7:c6:7d:c7:3f:8b:9e:dc:d7:dd:19:86:96:60:ee:a6:94:a3:
         6f:af:60:b0:35:8e:78:e3:ea:fa:52:43:bd:dc:2f:a6:7e:3a:
         74:d7:dd:da:bc:ee:9c:ca:8a:11:06:bb:cb:ef:98:00:7d:2c:
         5d:32:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:58 2025 by rpki-client