Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9c2704b-e044-383e-b1fb-2cf640b1d6c6.roa
File:                     a9c2704b-e044-383e-b1fb-2cf640b1d6c6.roa (raw, json)
Hash identifier:          GWyXhbzod+tm576nej2cRwK8zU9e6AEuXC/0wSolPg4=
Subject key identifier:   B2:85:1C:43:EA:08:1E:63:09:00:B0:20:13:24:92:0D:1C:61:3B:67
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6DCA3DB9FCA776842D1C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9c2704b-e044-383e-b1fb-2cf640b1d6c6.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        172.111.122.16/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:dc:a3:db:9f:ca:77:68:42:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=d2f6196f-9d71-43c7-82c2-08c74a295da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:56:a0:4c:e7:0e:7c:d7:93:f0:de:2f:41:
                    72:6e:9e:c2:35:f8:e4:d4:2b:c5:9b:1a:c5:4e:de:
                    1e:3d:c3:72:05:6a:55:13:8b:ae:5c:7e:19:70:41:
                    b8:81:f6:20:27:8e:51:93:d1:1d:fe:a4:a9:ec:22:
                    e3:46:35:51:41:7b:04:e4:33:b5:ee:ff:0a:06:cd:
                    7d:14:e4:2f:3a:66:1a:32:2a:56:b6:af:9c:f8:61:
                    e9:78:6f:98:5d:81:1e:ee:16:99:a9:0d:43:2f:c3:
                    7d:eb:81:4a:92:57:72:a8:90:4d:1b:ee:08:0f:d8:
                    37:90:2d:94:de:55:9f:03:75:1b:c2:f3:5c:bd:e3:
                    41:09:94:7e:d6:bc:85:56:fc:0a:0a:79:74:35:b7:
                    37:06:af:45:c8:52:99:c5:cc:47:1b:14:b0:11:e9:
                    5f:15:49:60:78:40:81:e0:7c:3f:b9:6d:e1:55:b9:
                    5f:f9:da:bf:cf:0e:2f:ca:5b:5f:58:bd:a7:b4:e3:
                    ff:4c:c2:b0:a8:ed:f5:f0:41:03:2e:ef:23:55:26:
                    13:e7:41:fe:3d:9d:b8:14:00:17:f6:c8:30:05:57:
                    b8:00:80:d6:04:1a:52:03:01:80:55:5e:78:14:47:
                    5d:ee:dc:04:c2:74:27:f2:f1:0c:f4:97:45:5e:f4:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:85:1C:43:EA:08:1E:63:09:00:B0:20:13:24:92:0D:1C:61:3B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9c2704b-e044-383e-b1fb-2cf640b1d6c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.122.16/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:98:9f:ee:74:62:72:38:40:6b:f3:fd:cc:13:3f:bb:dd:fa:
         b8:ec:41:aa:b0:a8:1f:74:f9:33:f1:8a:ce:9e:4c:0a:f2:f4:
         7c:f9:36:4a:89:93:f5:a7:e9:e5:12:9e:90:53:c8:53:71:f9:
         52:97:ba:e0:ec:7a:11:d7:1c:f1:6d:2b:a8:36:bd:db:e8:aa:
         aa:90:fe:2f:9d:3b:4b:54:48:6b:04:e5:bc:e4:c6:c2:09:66:
         5b:43:d0:47:32:a2:ec:38:0f:c8:c8:f6:0d:a3:df:8c:90:67:
         40:bf:92:1e:8a:a7:61:5e:42:cb:c1:95:6e:b2:23:e0:dc:6f:
         a3:46:2f:c6:45:c4:b0:fa:57:5b:da:7f:09:e2:e1:37:6e:da:
         21:1f:4c:cd:1b:05:cd:f0:ff:f6:5f:c0:2f:8a:36:01:67:1f:
         bc:d1:99:db:92:bf:89:9e:95:32:d0:21:26:e7:45:ed:ed:41:
         51:f6:c0:77:6d:d4:f4:79:f8:ce:fc:b8:f4:42:7d:02:6b:72:
         8d:ba:a0:3b:46:29:2c:4c:2b:44:61:91:dd:71:4f:f6:9f:c0:
         bd:49:e4:1c:4f:40:00:54:a5:b9:54:cf:94:e1:45:16:c5:96:
         58:fa:3f:ef:09:7a:94:ed:ac:36:bf:80:6d:2c:e1:ca:41:0c:
         93:27:94:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:44:23 2025 by rpki-client