Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/543a399a-5087-3cd5-964f-19091aae8b0e.roa
File:                     543a399a-5087-3cd5-964f-19091aae8b0e.roa (raw, json)
Hash identifier:          Gl4E3kPo55Yz2Z9mJyMj6gkw/OKuKOVXq+GKgFVidqg=
Subject key identifier:   29:EF:A7:A5:5C:FD:AD:3A:A2:53:5D:5C:8C:4F:76:0F:07:24:06:09
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F374D4160CDAE4E7A5D405FD0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/543a399a-5087-3cd5-964f-19091aae8b0e.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        172.111.67.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:41:60:cd:ae:4e:7a:5d:40:5f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=53b39018-e04c-483e-a8c9-44c07017af15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:3b:3a:13:da:0c:ab:d5:a6:fc:b0:04:c0:
                    d0:85:cd:71:d9:72:32:4c:64:47:d7:79:20:46:14:
                    fb:b5:76:da:99:01:26:9d:df:b9:03:c4:1d:cd:b1:
                    86:63:bb:c7:84:3f:00:7e:64:a6:a8:72:e7:70:0d:
                    e2:c5:59:da:d9:2e:17:65:ce:5f:b6:8d:31:f0:83:
                    ce:5e:0f:5e:cd:f1:db:93:87:12:a4:a4:25:79:57:
                    65:fb:97:c9:b7:04:ea:45:fe:0b:91:78:5d:40:31:
                    23:d3:49:d9:c5:f5:38:cd:54:72:84:5d:be:42:0c:
                    ea:47:27:95:36:2e:bc:04:97:2f:03:fe:aa:81:ca:
                    da:7e:9c:ea:24:1a:b4:21:f3:52:d7:8b:4c:11:fa:
                    e0:02:f0:74:b9:29:88:67:77:29:48:82:79:f3:fe:
                    ea:4e:aa:42:d2:77:7e:b7:96:c8:54:35:5c:28:cf:
                    3a:d3:46:6c:ef:c6:86:e6:a0:57:7c:26:8d:48:73:
                    92:5f:c4:0a:4f:7f:fb:cc:91:3c:96:af:44:85:d1:
                    f3:57:e8:73:98:ed:ab:13:40:71:c6:e7:f6:6c:1f:
                    61:15:36:82:b5:79:29:8f:a3:0b:ed:ab:11:37:a5:
                    51:db:14:fe:af:88:62:9a:23:da:89:07:0d:45:9c:
                    68:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EF:A7:A5:5C:FD:AD:3A:A2:53:5D:5C:8C:4F:76:0F:07:24:06:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/543a399a-5087-3cd5-964f-19091aae8b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.67.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:3f:03:29:26:25:6b:27:83:a7:7c:0d:4f:c1:4e:90:78:eb:
         c9:69:0e:c6:22:5e:35:ac:66:4e:44:62:bb:10:26:57:83:85:
         35:24:ce:ae:ca:de:6f:5e:02:2a:e2:57:9a:29:88:c0:4a:52:
         52:08:51:c0:a4:a1:7c:08:54:ec:39:c1:af:5f:d9:6f:bf:4d:
         1f:f4:d0:90:bc:33:a8:d4:2f:fb:18:e1:55:85:f8:a8:96:43:
         89:78:a6:e3:17:a9:3b:3f:54:79:1d:33:0c:1a:b5:1b:b4:c9:
         c3:17:1c:4b:12:08:ab:3b:0e:f3:b3:a6:55:c6:b5:7e:6b:ba:
         d1:d6:69:bb:8b:14:28:64:67:1c:32:96:f0:08:4d:d4:6b:4e:
         9c:22:00:9f:26:16:ee:1c:c2:c1:35:b8:48:7d:31:49:14:74:
         d2:cc:4a:59:b4:26:39:73:09:4f:1d:d4:10:ca:1d:44:92:b9:
         c1:da:df:45:c8:cc:63:9e:fd:0a:96:c1:6a:6e:f3:bf:4c:ee:
         21:6b:07:2b:35:1a:78:b8:34:9d:95:4f:a7:d9:63:ef:34:01:
         b8:48:77:c5:c3:a2:9b:ff:f1:33:9a:b3:d0:7e:8f:ae:7b:3d:
         73:c0:58:1e:65:1d:17:13:59:45:0f:e9:57:26:5c:00:15:61:
         88:2e:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:22:28 2026 by rpki-client