Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b9493756-067f-3e66-9abd-07e9944fa439.roa
File:                     b9493756-067f-3e66-9abd-07e9944fa439.roa (raw, json)
Hash identifier:          qKvVjUX3KMbtwDZPu1GEXx/RfzlV2VQm0LDHQa3ds0M=
Subject key identifier:   45:50:5E:89:25:DC:B7:4D:99:F4:44:55:7E:D2:BE:1F:7B:B8:D9:22
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6DBFA31D5E84ECC974500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b9493756-067f-3e66-9abd-07e9944fa439.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        172.111.115.48/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:db:fa:31:d5:e8:4e:cc:97:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=1cf28335-343c-454d-a55f-f3fb51711a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:2b:60:3b:43:7c:4c:33:07:5d:c4:8f:91:
                    69:45:17:b8:77:61:ce:e0:ed:a8:c6:62:0e:dc:dc:
                    63:9b:c1:cb:8d:e7:6e:17:f1:ac:6c:4e:9c:f2:3f:
                    2a:40:b6:ad:a5:f6:35:64:a2:16:e9:4a:dc:27:b3:
                    99:22:47:4e:01:54:80:4c:af:a3:c1:9f:4d:e7:fc:
                    6a:2d:bb:c3:b2:5b:b4:6b:c9:46:4a:8e:a2:d2:b6:
                    10:78:d2:f1:80:37:81:7b:4c:a5:6f:af:cb:49:0f:
                    d6:3c:36:04:4c:f6:12:74:d5:77:9f:70:77:a9:86:
                    de:5e:69:4d:44:77:9a:22:f1:6c:93:a8:6c:be:94:
                    cb:b7:24:bc:5e:3b:9c:7d:7e:e2:e1:28:20:b8:a6:
                    42:2f:df:a4:ee:30:e2:8a:2d:a7:07:15:e2:df:45:
                    7f:92:06:c6:7d:55:88:70:d7:52:6e:7e:b9:53:06:
                    89:56:93:c5:6c:e3:14:cf:ec:2d:b7:f4:9f:29:b7:
                    1e:cc:83:c0:f8:6e:6a:16:de:3c:ab:2f:c0:23:b4:
                    c7:4a:cc:36:04:40:88:27:7d:82:b9:9a:5a:45:3a:
                    66:62:98:8e:2b:6e:00:06:a8:8d:65:c6:eb:5a:6d:
                    45:32:35:fb:0b:71:9a:b3:ab:c9:8c:6c:8a:2c:c8:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:50:5E:89:25:DC:B7:4D:99:F4:44:55:7E:D2:BE:1F:7B:B8:D9:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b9493756-067f-3e66-9abd-07e9944fa439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.115.48/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b2:1a:67:a4:25:36:e0:cd:64:6f:22:12:f1:86:5c:92:a5:
         40:2a:2c:23:3d:21:25:a2:50:b4:61:48:45:ea:3e:71:b2:89:
         48:bd:f8:1c:e7:7a:ce:6e:f1:c2:79:07:e2:6c:33:d3:31:4a:
         62:3b:b3:b4:6f:ec:2d:28:ba:49:45:ed:d2:1f:12:a6:b7:3c:
         c0:4b:84:e8:25:47:24:25:62:17:c9:bd:c3:48:6a:6d:c7:f2:
         34:ae:7e:97:9b:a5:ff:6f:31:7f:aa:34:63:91:bb:f0:bb:3c:
         51:e3:db:90:64:90:55:7f:52:58:d2:fe:fa:83:e5:d3:d5:87:
         a0:67:1d:6d:06:80:1c:87:81:2d:93:a6:dd:2e:8f:fb:05:8e:
         42:86:58:48:0d:7e:4a:50:68:04:f5:2f:14:2d:8d:bd:09:7c:
         ab:d1:84:58:07:18:9b:af:02:7e:2f:f9:e0:65:2a:89:54:26:
         ea:d4:f6:85:92:bf:ce:17:6c:13:6c:78:07:40:d1:1b:c8:c3:
         65:98:4b:78:46:30:d5:b9:2e:ff:62:4a:12:0f:cc:24:3d:3d:
         03:b6:15:d7:d9:2e:a5:2f:21:26:b2:14:c8:a9:a5:b2:7a:fb:
         b9:21:42:67:2c:6e:d2:82:89:fd:37:78:83:4f:f4:25:a1:bf:
         17:91:7a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:24 2025 by rpki-client