Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89707528-a4b0-3570-9d8a-88acb7809bc6.roa
File:                     89707528-a4b0-3570-9d8a-88acb7809bc6.roa (raw, json)
Hash identifier:          nk/p8YHPWUXOMrK4KwpECksI+2LTncRfsxSYvtp1Kv0=
Subject key identifier:   DE:7C:41:5F:D2:60:9C:01:28:B1:C9:5A:3D:06:99:B8:9F:20:2B:D0
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B5DD1F78BEBD196A6830BB340
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89707528-a4b0-3570-9d8a-88acb7809bc6.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     54113
IP address blocks:        172.111.66.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:f7:8b:eb:d1:96:a6:83:0b:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=5d33664f-763e-4cbe-873e-8a3b1dcd4af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:0d:08:d3:64:7a:c3:5e:1e:7f:00:fe:47:
                    21:28:62:3e:15:01:fe:95:63:de:a0:56:6e:83:6c:
                    2a:be:0f:22:b5:9d:b6:9b:51:9d:d6:e3:b7:8c:cb:
                    92:9f:fe:e2:75:ab:15:45:fa:f0:08:d7:3a:0e:93:
                    49:42:13:58:6f:87:92:e8:15:cf:9a:13:2c:e0:df:
                    e3:d7:3d:18:d3:fb:27:32:4a:16:a2:09:5a:de:6f:
                    a9:0e:35:f6:d0:fb:5d:8a:0f:b9:04:ff:65:b5:83:
                    d9:03:ef:f3:ba:85:9e:42:5a:3a:fa:99:62:ac:5a:
                    35:55:d2:82:67:ab:6a:9b:ef:11:89:c1:ff:c8:e6:
                    c0:49:c3:93:5f:a4:3b:d4:5f:fa:e8:fb:42:33:5c:
                    5f:29:e5:0d:27:ea:15:4f:7d:2c:9d:46:42:4a:e1:
                    45:96:e1:f7:4b:14:d1:7b:13:c3:71:04:64:7f:26:
                    75:4b:99:33:77:54:8e:f4:9b:8d:fd:52:fe:0a:78:
                    b9:2c:78:51:12:45:8c:14:19:2a:41:34:68:70:82:
                    c6:fe:0e:e4:5f:b6:44:be:91:b6:9e:82:76:7e:c8:
                    13:7e:57:15:4e:b7:88:de:24:5c:ca:dc:06:90:54:
                    a4:8d:6b:c2:97:5d:00:1d:e4:a6:b0:d5:f8:2e:ad:
                    07:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7C:41:5F:D2:60:9C:01:28:B1:C9:5A:3D:06:99:B8:9F:20:2B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89707528-a4b0-3570-9d8a-88acb7809bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.66.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b1:21:2c:98:db:a9:5a:b0:ac:6a:58:23:2c:5c:a3:50:0d:
         e1:24:88:cf:27:6b:3b:38:bb:83:34:13:33:f4:87:fb:2e:48:
         b7:6c:0d:57:7c:45:2c:50:86:7b:1d:d7:60:35:6d:99:f6:24:
         c4:b0:3b:73:89:6b:50:a6:aa:82:49:63:54:3b:e6:d9:52:a7:
         9b:d0:a5:c3:47:72:16:0a:f6:2b:14:38:82:ae:07:e2:03:f7:
         c6:60:ae:63:5f:c6:82:ac:af:40:80:89:61:4c:71:a8:49:3e:
         8b:03:e9:7b:d6:7c:d8:d8:ee:e7:02:39:49:c6:9b:c7:dd:1a:
         2c:0b:d8:0b:58:1f:e8:4d:6d:dc:cb:4d:22:4e:8a:cf:98:05:
         e6:f5:18:4d:91:c6:cb:03:5a:19:ec:ea:9c:f1:3a:48:ac:de:
         35:3c:59:93:65:53:69:c7:58:38:1c:55:2e:db:01:b7:c2:8a:
         1a:8f:61:8f:4c:01:3c:61:e3:15:ad:67:b7:f4:6e:3d:fd:6d:
         58:59:f9:f8:58:b2:6c:92:5f:f3:ca:72:4b:16:9a:99:b2:4f:
         d3:f9:0c:fb:91:37:a1:8b:e7:1c:83:e3:ab:9b:e1:97:5b:7b:
         b8:27:91:3a:45:3c:d7:8d:3e:1d:f0:0a:eb:c2:00:4b:0d:81:
         23:0d:e7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:16 2025 by rpki-client