Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9973c8b9-b490-3e1c-af87-1f5d4c1f7a46.roa
File:                     9973c8b9-b490-3e1c-af87-1f5d4c1f7a46.roa (raw, json)
Hash identifier:          IUND2QAZ8PtEH/4WoOCnpLuTcjf8e0yheKv2WYXcyls=
Subject key identifier:   26:3B:41:BB:EC:2A:77:1A:E5:F0:36:37:4F:FA:0D:0F:A5:35:E2:1C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6E5E111048E4C52AE2100
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9973c8b9-b490-3e1c-af87-1f5d4c1f7a46.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        172.111.75.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:e5:e1:11:04:8e:4c:52:ae:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=91839f7a-5c68-427c-8967-36ce548ca7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5b:1d:04:7a:5e:ad:a8:1e:7a:14:a9:d7:57:
                    8a:6b:8a:03:8d:fe:44:28:37:07:68:97:12:80:3d:
                    6f:ce:89:76:93:5a:8d:03:6e:1c:08:7c:2d:2b:52:
                    7b:81:62:8d:f3:46:40:b2:90:98:9c:45:d0:a4:83:
                    38:f6:97:1d:1c:52:7c:c4:10:12:e9:f5:bb:04:c9:
                    73:ab:98:15:8c:a6:c7:d6:d5:3e:eb:45:59:3a:ee:
                    62:ac:38:2b:be:2a:89:6d:72:07:8e:ab:cb:bc:bb:
                    f1:cd:a1:98:da:84:51:48:ba:39:7d:d1:61:43:f5:
                    bf:d8:5c:15:23:59:eb:da:55:73:8f:ef:3e:a3:9f:
                    ec:7d:40:83:3b:70:65:64:ea:b1:f2:f6:71:cf:9f:
                    f0:71:30:4e:88:ca:cb:8c:a8:e6:68:ac:6c:76:d6:
                    ef:eb:bc:0d:c1:5a:d7:d4:39:b1:f3:09:ca:d9:a2:
                    15:47:2c:16:e5:41:34:4e:10:0b:c5:4b:d8:02:1e:
                    5c:60:51:af:fd:cd:7a:93:08:20:eb:c9:93:05:60:
                    b5:04:8e:c8:e9:d7:8b:59:c2:2a:76:75:f1:a4:2c:
                    a6:8e:31:c8:42:ca:1f:2b:b6:37:a5:08:7e:b0:34:
                    21:f6:ec:a1:84:48:0d:5c:20:83:03:c9:e1:93:d7:
                    52:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3B:41:BB:EC:2A:77:1A:E5:F0:36:37:4F:FA:0D:0F:A5:35:E2:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9973c8b9-b490-3e1c-af87-1f5d4c1f7a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.75.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b3:be:bf:2b:af:46:ec:8c:37:e0:3c:61:92:64:c6:cf:32:
         10:d1:90:cb:66:15:be:aa:18:fe:91:65:4b:0d:9e:8e:80:10:
         ce:79:e7:03:42:ff:1d:22:9f:35:15:92:71:a5:1b:8d:74:2e:
         be:46:9d:a7:c3:50:19:96:25:50:23:35:a3:a1:aa:58:3e:bf:
         10:cb:25:ab:87:b3:97:1e:97:e6:63:da:66:58:9e:7c:5f:c0:
         df:16:15:13:72:d9:2d:43:61:cc:47:b1:6f:59:10:02:d8:9c:
         ea:c3:75:4e:4c:38:e2:4c:37:ac:30:be:0b:78:52:8f:69:96:
         e8:eb:77:35:83:34:98:8d:70:11:6a:3a:38:18:64:42:33:6e:
         a7:94:f9:29:bb:a1:48:02:2a:52:6c:5d:61:51:21:ed:03:48:
         c3:26:9d:56:9e:a2:c3:b6:bb:0d:a0:05:8c:13:7d:0b:98:63:
         a9:8e:a5:07:52:64:1d:62:5f:55:ad:bf:95:f6:e0:a5:b0:6c:
         99:96:11:92:91:99:79:24:67:99:c5:63:78:ad:37:32:c6:0d:
         ec:dd:87:cf:a0:48:b4:c8:28:40:15:e0:56:c6:4e:a7:4f:4c:
         45:96:13:b9:2f:89:24:c5:99:0e:f6:72:e4:98:71:ef:58:25:
         f8:2f:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:43:27 2025 by rpki-client