Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/40a3b739-12b9-3759-8a51-492cfe0300ae.roa
File:                     40a3b739-12b9-3759-8a51-492cfe0300ae.roa (raw, json)
Hash identifier:          dU1HI9vjWsH1Jo/gfCGydg1DCwLv//xZ2Vrrq5TjKO8=
Subject key identifier:   12:CD:2B:BE:20:3A:42:C8:6E:7D:50:38:91:80:B0:A3:4B:8B:52:C0
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F3FAD276BE7865BF5D0243300
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/40a3b739-12b9-3759-8a51-492cfe0300ae.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        172.111.97.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:27:6b:e7:86:5b:f5:d0:24:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=a18c8fcf-f557-46cf-984d-bba50e04ed30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0f:64:cb:61:ca:a6:7b:8a:51:18:81:1d:e1:
                    85:b8:7b:60:ba:ca:3c:f0:8c:4f:2b:ff:2a:2d:6e:
                    79:d5:ce:24:db:f7:14:95:5e:a6:7f:eb:12:ad:de:
                    6e:ab:1a:ab:26:ec:1e:79:22:3b:f7:1c:86:27:fe:
                    12:6a:d0:3a:1f:ff:04:1d:1f:0a:4e:53:4f:47:41:
                    69:a9:bd:03:91:70:25:3f:0b:b2:99:81:d9:56:3c:
                    e7:ff:67:a3:2b:6c:e6:e4:7d:82:34:02:c9:e3:e7:
                    91:fb:6c:80:df:6e:d2:f7:83:59:5c:ac:91:53:89:
                    5d:2f:00:b4:5f:f3:17:3e:55:dc:47:b0:2f:8c:f2:
                    9f:d6:bb:79:4e:a1:ad:05:6d:91:bf:1e:7c:76:5d:
                    71:86:83:67:bd:5d:7f:f6:74:94:a3:92:04:35:72:
                    a1:73:53:06:52:a0:9f:80:c5:ea:c2:93:9d:30:08:
                    38:80:f0:2e:77:3c:30:3c:9b:0e:1e:06:dd:0c:a3:
                    f4:9a:44:a0:aa:f8:a9:14:81:f0:b9:a8:d9:a8:47:
                    83:3e:b9:d6:3b:88:b8:e0:b9:73:f6:89:88:f0:8c:
                    30:9f:36:72:bb:71:6d:8f:0b:30:94:e3:6f:98:93:
                    95:2f:97:4c:f3:07:4e:49:ba:38:ef:fb:21:db:f8:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CD:2B:BE:20:3A:42:C8:6E:7D:50:38:91:80:B0:A3:4B:8B:52:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/40a3b739-12b9-3759-8a51-492cfe0300ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.97.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:61:d3:0c:56:88:71:bd:d9:bc:3c:88:35:06:07:1f:05:52:
         ca:19:24:48:fd:8d:6a:c0:76:63:f8:28:5b:27:a6:d0:6c:2f:
         e6:ce:ad:6d:11:52:98:0a:64:e0:77:2f:20:aa:4c:41:0e:31:
         a7:ae:36:6f:03:d3:36:8e:d9:58:69:cc:c6:41:42:29:0b:9e:
         eb:79:98:09:a5:28:43:bc:28:e1:3f:b0:05:f6:03:5b:dd:11:
         d5:64:2b:b6:b1:c7:ad:9b:bc:31:8d:79:fd:b0:fc:55:fd:b1:
         a7:d9:d9:aa:35:ff:68:c1:1a:e9:84:db:d2:61:8c:7a:69:38:
         a1:91:ef:72:66:8d:f3:7e:9e:46:6b:11:45:e1:72:13:51:38:
         dc:db:23:ee:50:19:0b:b3:c9:43:e1:23:eb:38:8d:22:f9:a3:
         03:b5:d0:55:06:0a:d9:9b:e5:37:7c:46:b0:d4:80:c2:ca:6a:
         fa:1a:51:b6:f1:34:13:1a:20:88:b3:a9:0e:cc:3b:f0:22:ab:
         af:0a:23:45:66:1c:06:10:5f:91:df:65:f3:9a:a2:05:a2:4c:
         87:8a:f5:0b:f0:d8:21:29:9f:f5:a5:43:24:33:ce:4b:ef:88:
         ef:eb:86:c3:29:7e:fb:6c:35:50:e7:37:75:49:da:42:49:61:
         6e:d3:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:32:58 2026 by rpki-client