Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b63c1484-5ba8-3f99-9b7b-2df1e735079e.roa
File:                     b63c1484-5ba8-3f99-9b7b-2df1e735079e.roa (raw, json)
Hash identifier:          bB/mqvYP1XBPqADTkSX0sPrIFuCHPs/7vM8M5AID4QE=
Subject key identifier:   5E:CD:EF:2F:1B:61:A0:A1:34:3E:5D:C8:E9:A0:37:79:18:7B:30:9D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B4E773B9D10AD4D531E645500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b63c1484-5ba8-3f99-9b7b-2df1e735079e.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        172.111.71.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:3b:9d:10:ad:4d:53:1e:64:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=81f8a4a2-81d9-4b0c-ae9f-ef701e67526c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:2f:34:e0:f4:d9:83:f4:95:3d:14:f9:b0:
                    c5:c4:3a:e4:4d:51:32:73:18:f4:56:ee:66:12:57:
                    33:1d:f5:af:f4:af:19:2b:d2:4d:08:88:91:20:6f:
                    6b:b5:12:15:5b:2e:93:68:ba:e8:75:79:56:f6:ba:
                    ad:29:f0:04:a6:d2:a9:79:9d:14:12:d7:c4:5b:d1:
                    6b:48:02:68:b2:f4:01:cd:65:1b:93:16:5c:55:74:
                    20:ae:51:09:24:c5:3a:a4:48:bc:b4:f5:a3:45:76:
                    8c:cd:0d:bb:a3:d0:a6:ac:50:97:f5:0d:18:14:16:
                    fb:03:76:b6:07:8b:28:32:93:c3:d9:6a:c5:17:7d:
                    ba:f1:26:bd:83:0f:ac:0a:7c:3a:e6:84:44:3e:82:
                    26:ec:a5:6a:18:8e:50:10:21:14:d0:17:e5:f7:9e:
                    9b:18:1b:1f:01:f5:8b:30:80:99:1e:a8:64:ed:43:
                    0e:14:29:5d:53:95:a0:14:26:f3:d2:f9:6e:c3:5c:
                    52:07:55:67:29:cb:44:9d:f8:bd:86:ad:d1:cc:b1:
                    bf:d5:f7:dc:34:ee:0e:8b:7d:66:ec:94:d5:29:ae:
                    4e:52:d0:62:09:70:69:c7:36:f4:84:07:75:6b:bc:
                    ea:f8:4f:2e:d2:5b:7a:cf:84:ce:bd:d8:ae:63:a7:
                    af:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CD:EF:2F:1B:61:A0:A1:34:3E:5D:C8:E9:A0:37:79:18:7B:30:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b63c1484-5ba8-3f99-9b7b-2df1e735079e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.71.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c4:72:d4:35:23:28:11:76:dc:4e:41:b1:15:4f:37:da:ac:
         5e:36:ac:b9:05:3a:8c:f3:6b:1b:14:a3:5d:f3:a9:ce:b2:36:
         35:44:8b:7f:04:21:9d:eb:6e:26:2e:dd:8f:a3:10:18:f1:3d:
         c9:50:79:ad:b7:29:37:8d:6b:40:c2:e6:76:b1:6f:31:90:70:
         42:08:ea:4b:8d:56:30:6c:fe:96:43:d8:63:ad:ce:52:1f:f9:
         9f:9f:e0:43:d0:94:87:74:ac:1c:d4:c2:f1:f7:f4:20:24:57:
         15:da:56:ff:b3:72:f3:33:3c:5f:38:c2:a1:88:53:c2:9d:0e:
         f6:48:b2:ed:bf:26:25:8d:84:fa:6a:7b:1b:14:3e:5e:4b:c5:
         43:fa:03:50:19:6a:b7:10:0c:e6:c8:a2:1b:3d:70:11:24:03:
         86:6e:03:7a:d3:24:10:ab:b5:8e:8d:b5:63:80:ee:ff:31:41:
         a9:27:aa:2d:fd:83:95:e1:fd:80:7d:9a:3a:df:ac:77:22:c7:
         d9:e3:4c:36:a5:ff:20:e1:51:ab:13:f2:e1:87:13:76:94:6a:
         e7:9d:c4:ab:81:b4:42:95:71:e5:29:f6:9d:45:6f:ba:db:ed:
         f2:95:c7:77:9f:99:7f:18:b0:99:8e:e1:8e:c1:71:79:c2:2f:
         7c:1d:bd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:43:26 2025 by rpki-client