Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/448969d5-fea2-3432-b3d8-a5a83cb93361.roa
File:                     448969d5-fea2-3432-b3d8-a5a83cb93361.roa (raw, json)
Hash identifier:          InmHTFGinXQQBBs2TF1zhLLmSzCVail7V+pauy4+0jI=
Subject key identifier:   CD:C2:8F:BE:9B:86:5E:8C:DC:73:42:C7:22:4B:ED:AF:09:B2:D6:35
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F497F20F5EE157E4536330800
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/448969d5-fea2-3432-b3d8-a5a83cb93361.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54113
IP address blocks:        172.111.122.32/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:20:f5:ee:15:7e:45:36:33:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=963d3811-aef1-4aec-a06c-1eae944b89e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ea:3d:a1:b2:34:e8:be:0e:2a:fd:19:e0:54:
                    47:45:fd:60:98:aa:b3:a9:a0:7f:99:95:70:6d:02:
                    f6:be:bb:10:96:db:5f:47:7c:f1:21:fd:00:45:0a:
                    e1:f7:62:cf:6f:ef:50:d8:7e:8e:e2:b6:20:5f:e2:
                    25:9d:ae:22:f5:0c:6a:93:80:04:ee:9b:de:04:fb:
                    74:56:a8:2b:0d:96:4a:22:f0:18:a3:8e:f9:90:d4:
                    7d:d4:06:6b:de:e9:96:ec:8c:e9:fb:8f:fb:9b:fc:
                    18:8a:f2:c4:d7:2c:c9:3d:29:82:1f:61:f9:5a:97:
                    bd:bd:2d:bb:5e:e3:e6:85:fe:29:48:48:3d:de:cf:
                    fa:7c:dc:7a:6d:96:1a:71:28:a7:bd:de:72:2d:76:
                    d8:73:17:04:24:6c:6f:c2:0c:de:37:66:27:44:dc:
                    4d:fe:99:f6:d2:89:6b:52:1e:54:2d:ba:78:0b:45:
                    99:3b:0e:40:80:38:f0:f0:ae:f1:81:4e:c3:d7:ec:
                    a4:31:84:a1:96:2f:8d:06:10:8d:bc:27:47:99:e5:
                    90:03:3a:d7:52:c5:58:cc:a4:20:5c:73:d7:4a:0c:
                    47:c5:10:42:6e:68:a6:34:f1:83:aa:6b:dc:52:e0:
                    06:c3:b7:41:25:ff:7e:5c:ee:ee:92:87:33:ab:42:
                    c5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C2:8F:BE:9B:86:5E:8C:DC:73:42:C7:22:4B:ED:AF:09:B2:D6:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/448969d5-fea2-3432-b3d8-a5a83cb93361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.122.32/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:82:f4:4f:b6:95:2b:63:cd:67:ca:31:65:f6:91:ce:6f:c5:
         1f:1e:8d:66:53:18:fa:aa:f0:91:9a:41:8b:43:d3:a0:f8:29:
         cf:54:a2:f6:10:cf:64:48:0c:14:87:c6:a4:d7:e8:79:ad:7c:
         2b:21:82:21:68:05:ea:de:3c:d4:fe:ca:26:a7:f8:23:36:e5:
         f0:30:ca:50:86:25:f0:14:40:cf:65:9a:03:aa:af:b1:27:6a:
         9a:a2:01:4c:4b:fa:c1:39:b5:64:ef:73:c5:af:f9:30:3f:8c:
         be:1c:aa:e1:f5:89:6b:6b:f4:11:0c:00:24:77:95:a1:10:d3:
         fd:f0:46:cb:76:09:65:d1:89:47:ba:49:5c:60:9c:b9:cd:43:
         40:5b:64:c3:94:59:00:bb:32:aa:9f:11:a8:c1:42:fb:82:89:
         15:f3:73:b3:a7:6f:c5:91:5d:2c:a4:7c:40:97:0e:6f:03:50:
         3c:a4:b0:b7:fa:0e:60:68:c4:d4:60:74:ca:a6:c8:73:f7:eb:
         70:82:46:09:60:e1:39:36:98:b3:f9:49:20:1b:cd:bc:96:7c:
         5b:14:16:0d:97:4a:f6:f8:04:32:60:5d:2b:ac:30:38:e8:70:
         2f:98:d5:e2:fd:ca:08:33:00:01:b2:81:fa:70:5c:aa:7b:11:
         bf:4a:58:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:44:24 2026 by rpki-client