Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6eda57f5-d112-3e76-be94-fdec2cb29551.roa
File:                     6eda57f5-d112-3e76-be94-fdec2cb29551.roa (raw, json)
Hash identifier:          818bFenaxpaF8nR58GpN3VaA6AfwiPLGbbZpGWh1PiE=
Subject key identifier:   B7:12:7C:C0:CE:46:26:CA:26:FB:94:E6:07:D7:55:A8:60:9C:08:BD
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584D1FDED53350CCCBDED4F9B980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6eda57f5-d112-3e76-be94-fdec2cb29551.roa
Signing time:             Tue 10 Mar 2026 18:00:37 +0000
ROA not before:           Tue 10 Mar 2026 18:00:37 +0000
ROA not after:            Mon 08 Jun 2026 18:00:37 +0000
asID:                     54113
IP address blocks:        172.111.85.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:de:d5:33:50:cc:cb:de:d4:f9:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 10 18:00:37 2026 GMT
            Not After : Jun  8 18:00:37 2026 GMT
        Subject: CN=1df0a87c-76f0-422c-a29d-5f345f647313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:5a:42:b0:54:fe:0e:ca:ca:76:1c:3e:94:
                    9a:9b:40:76:ae:65:7b:dd:98:55:76:69:fc:fe:0b:
                    8d:4e:5b:8a:9b:62:a9:b0:cc:e2:3b:ef:85:75:b7:
                    02:87:3a:ae:51:b2:1c:80:93:47:5e:7b:66:9e:5f:
                    60:67:62:65:7b:bd:70:33:4e:9d:0e:e6:77:21:22:
                    c9:dc:82:90:eb:aa:3b:7a:7f:f1:51:23:62:7c:26:
                    a1:0f:42:f6:6f:db:f5:de:12:09:b2:a4:0e:04:26:
                    55:d6:5b:6f:ed:fc:ba:18:33:cb:27:d8:82:12:5d:
                    b8:5c:f2:72:60:f4:95:74:5a:53:b5:b5:c4:87:1b:
                    bf:21:aa:e9:97:80:76:08:e3:d4:ec:2d:9d:77:7f:
                    43:f2:0e:fa:1c:61:f6:db:da:63:7c:01:7e:3e:b1:
                    3d:08:48:89:5b:e3:0a:f1:13:d9:5e:44:78:bf:2e:
                    7e:fb:f3:c8:de:53:f0:37:b4:32:f8:49:14:43:db:
                    6d:1a:1f:0d:85:e9:7e:46:fa:58:55:ae:2f:5c:ed:
                    bb:7e:01:d2:30:0c:8c:9f:41:87:84:3c:ac:34:98:
                    59:cc:f7:41:e1:0a:5e:6a:82:6e:a1:33:6b:28:99:
                    56:ea:10:c2:ac:c9:54:0f:9c:12:fe:69:2b:51:a3:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:12:7C:C0:CE:46:26:CA:26:FB:94:E6:07:D7:55:A8:60:9C:08:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6eda57f5-d112-3e76-be94-fdec2cb29551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.85.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:4c:cb:33:31:82:06:de:8a:d5:4d:21:3a:43:b5:1b:7d:4a:
         55:6b:47:d3:15:ce:59:c9:41:6f:d6:35:01:af:22:40:57:06:
         07:55:34:05:3b:10:78:46:c5:94:9f:6b:b1:07:dc:48:e6:12:
         2b:2f:a7:96:5a:a9:26:36:db:d1:71:4e:f8:99:03:87:7c:76:
         61:43:d1:a6:90:df:4d:03:4b:d0:fd:7b:59:79:e1:52:67:2e:
         82:7c:b6:61:2d:9e:e9:3f:53:c0:5a:94:9b:5d:1d:de:64:65:
         b7:5b:46:3d:fe:e1:84:9e:a2:3d:0b:06:9a:43:d8:6a:ba:c1:
         07:9d:e7:70:66:c4:35:23:05:c6:df:35:3e:b7:6c:20:88:d1:
         21:49:09:9a:75:67:2d:b0:af:d6:2e:8a:97:fc:a2:51:28:fd:
         49:6d:e1:ea:86:79:7d:76:e1:5b:b2:1c:d7:e6:a1:d7:4b:b5:
         0a:bf:71:46:db:a9:f5:60:0a:fd:0f:cc:2e:dc:ff:7c:40:10:
         88:2d:7a:3d:9c:ff:a0:63:7a:66:6f:cf:35:69:73:42:15:ce:
         71:7b:53:65:3a:c3:a0:66:3b:ce:91:4a:d1:18:c6:9a:6b:fc:
         71:e4:de:92:bd:ed:fc:4e:8f:b0:3a:85:48:29:a5:06:3a:2d:
         99:3a:74:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 17:53:49 2026 by rpki-client