Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa9a3668-1cbe-346b-a1ce-c0ab35348c20.roa
File:                     aa9a3668-1cbe-346b-a1ce-c0ab35348c20.roa (raw, json)
Hash identifier:          tD9APiZKj65E5pYR+J9jHN0ZG7LuU6BM+Dj21MXDc3k=
Subject key identifier:   AB:07:83:CD:74:FC:88:14:62:BE:20:35:11:DC:24:06:17:F8:1F:C5
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6E1B378BEB8378735BFC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa9a3668-1cbe-346b-a1ce-c0ab35348c20.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        172.111.74.192/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:e1:b3:78:be:b8:37:87:35:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=d1e6c1f7-b5e8-4f6d-bc32-38d0892964fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:57:23:ba:69:b2:db:67:d7:c1:ea:43:97:e0:
                    29:60:67:4b:27:8b:dc:c2:f1:04:79:ce:ab:02:78:
                    9f:14:4c:36:61:84:86:a3:8c:e5:fe:35:b8:39:a0:
                    62:39:3f:6b:51:f3:28:3b:55:f2:65:b8:86:b9:98:
                    27:4c:cb:a4:57:77:f9:37:56:d9:16:e1:07:2d:c9:
                    7a:67:3d:60:f1:4b:0d:d9:eb:3a:02:15:1b:fa:36:
                    0e:71:bb:0a:29:f7:b9:89:ba:c5:f2:f4:ea:81:c5:
                    68:ae:e0:22:94:f8:02:2a:89:26:59:28:82:33:51:
                    51:6c:20:91:8d:fa:56:c2:8c:59:65:c7:88:89:d0:
                    73:38:f8:c2:92:4f:c3:ae:82:85:72:08:1f:94:41:
                    68:20:1f:20:e6:0a:a5:b7:80:56:ae:3f:dc:9a:ad:
                    15:31:b0:3d:92:05:33:a8:4c:a1:ad:e0:9b:c5:66:
                    c5:fb:ca:40:0f:db:56:0d:ce:40:e6:52:43:d4:4c:
                    55:a4:a9:13:73:7c:5e:c4:66:a7:a6:ee:b6:e6:01:
                    5f:fc:cd:d7:ab:85:39:ee:0a:d7:c1:fa:eb:bd:14:
                    84:46:c6:17:95:94:d6:cb:f5:7f:2f:fa:1f:b6:7a:
                    f0:a3:41:68:d8:8e:70:0d:e6:df:b9:4c:b7:90:44:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:07:83:CD:74:FC:88:14:62:BE:20:35:11:DC:24:06:17:F8:1F:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa9a3668-1cbe-346b-a1ce-c0ab35348c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.74.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:2d:d8:27:79:9d:17:e6:01:a2:84:32:bf:71:f2:37:f0:49:
         7f:14:0d:ab:58:cc:12:37:21:ae:14:35:b2:b4:c9:f3:74:68:
         92:7c:6f:72:fc:32:c2:7f:aa:29:e9:0a:df:e0:29:39:f2:a8:
         e4:b9:57:39:db:da:08:26:0f:76:3f:1d:07:12:89:97:e6:b6:
         0c:f9:90:04:cf:35:82:f8:e3:a9:de:97:50:d3:10:c6:00:76:
         6a:45:0f:80:8b:4b:30:df:f4:56:10:f3:5a:07:f5:5d:42:ee:
         bf:0d:3c:a3:31:f4:4d:9e:dc:c0:9f:3b:45:64:44:7d:df:7d:
         de:6c:0b:7f:cc:71:80:60:ff:a5:b4:db:b2:16:57:4d:cb:de:
         e6:8a:d4:8e:a3:50:dc:cb:26:96:40:45:50:88:46:48:7a:7e:
         ae:19:72:59:fd:d6:3b:44:e7:08:5c:71:dc:c5:fb:65:97:7f:
         f0:99:da:da:f1:17:a4:94:11:d3:09:af:43:43:b8:22:fe:b2:
         d9:54:36:da:47:43:55:f8:fc:f0:4b:7e:28:c1:5f:70:34:a9:
         89:7e:d2:4f:58:8f:30:53:53:54:19:4d:0f:28:0d:06:84:d7:
         33:06:dd:46:f6:e4:68:03:b1:ce:59:eb:66:82:c7:9f:2f:14:
         fb:66:0c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:44:27 2025 by rpki-client