Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/27696e81-5b54-32f4-b2f8-7949a99a2057.roa
File:                     27696e81-5b54-32f4-b2f8-7949a99a2057.roa (raw, json)
Hash identifier:          4d4I7COGifezjVW0fv3ZnfSiVFO2LKWHJSQyRoSuKIU=
Subject key identifier:   05:AF:56:02:F2:5F:79:AA:E6:3E:88:70:90:46:42:38:61:B8:6A:5E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F374D3B5EE5E5E0E3124BBA00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/27696e81-5b54-32f4-b2f8-7949a99a2057.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        172.111.120.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:3b:5e:e5:e5:e0:e3:12:4b:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=f63e9617-e221-4455-803b-3cef612ff7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:d8:cb:8d:ed:01:6b:f6:86:f8:0d:ae:54:
                    55:b5:90:b4:82:79:28:51:63:35:de:0e:64:eb:f0:
                    51:3b:14:cc:6c:df:c7:a7:b2:a7:72:af:13:18:22:
                    ee:a0:f8:66:c7:ce:da:ad:d5:3f:96:fa:11:df:e2:
                    17:94:f3:99:47:26:d8:f4:9c:2e:70:1d:b5:3b:69:
                    c2:f7:ac:2a:6c:5a:6f:7b:fa:db:5c:24:3b:f9:04:
                    47:54:39:44:80:2a:21:76:b5:ed:1d:6b:29:f8:fb:
                    bf:e9:15:40:e4:5b:15:88:00:f7:e4:57:fe:ce:4f:
                    23:78:7a:d7:63:9f:ba:ac:b7:df:3a:7d:a7:b3:10:
                    c5:0d:e4:dd:cc:13:b8:f2:60:60:86:42:11:fc:02:
                    ae:9f:89:7a:2a:b0:c1:80:9b:60:c6:7c:80:8d:4a:
                    cb:86:9c:4e:99:95:c2:c3:fa:f6:5d:16:ff:01:31:
                    7f:fa:c2:0c:0a:71:e2:e7:b5:e2:52:d8:45:66:65:
                    a8:bd:56:48:f6:a6:89:62:60:c1:cb:ee:a7:58:37:
                    ad:a8:f1:e2:71:7b:cc:43:37:fc:da:63:b4:71:c0:
                    09:e7:b4:71:14:95:42:e9:ae:99:ec:cd:1f:89:d9:
                    11:ce:69:a9:ad:ee:32:51:7d:ce:c7:b5:b4:37:7a:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AF:56:02:F2:5F:79:AA:E6:3E:88:70:90:46:42:38:61:B8:6A:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/27696e81-5b54-32f4-b2f8-7949a99a2057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.120.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ed:08:23:d5:0d:f5:0d:f5:5d:77:d6:ee:90:4b:d0:75:9a:
         76:10:29:ae:9a:9e:c9:7c:44:c0:d7:f1:7c:a7:bd:7c:e6:77:
         4e:ca:cc:4e:27:4a:29:d2:e2:b0:3d:a6:a7:66:25:c4:ed:3d:
         59:25:19:57:97:69:e5:37:2d:91:ab:cc:7e:8b:f9:4d:aa:e1:
         e1:25:22:b2:5e:32:86:b4:b4:7d:d1:1d:58:4d:8b:71:f4:a7:
         bb:9f:15:78:c0:2d:c2:5d:04:96:55:35:7b:99:6f:b4:9b:c3:
         47:88:4e:f1:d9:54:78:12:5e:61:64:e9:61:31:24:af:65:f6:
         da:7f:a2:cb:60:f2:0b:9e:f1:a3:a4:5b:4c:98:3d:13:ac:d4:
         a8:d3:0a:cb:6f:ce:b0:91:f4:c0:8b:40:49:14:12:7c:4d:ef:
         39:9f:04:01:13:8d:24:2e:fd:2f:b4:f0:76:a6:8b:92:e6:a9:
         99:9c:15:82:64:a4:ac:5a:63:3f:e9:52:02:a5:54:4f:6e:e5:
         63:15:1b:1b:f9:80:4b:77:3d:49:97:60:a8:0c:74:cf:60:8c:
         f0:2a:5c:62:ea:8b:4f:e4:3a:14:e4:90:34:a3:1c:f2:2d:ff:
         e6:eb:23:7e:b7:53:6b:35:98:2e:ea:f5:37:0e:4a:8f:08:bf:
         09:92:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:59:00 2026 by rpki-client