Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/543a399a-5087-3cd5-964f-19091aae8b0e.roa
File:                     543a399a-5087-3cd5-964f-19091aae8b0e.roa (raw, json)
Hash identifier:          AgN1WVGKzBVKesbHn0J64dbdPe8R2NDG0BoVz/9VY4o=
Subject key identifier:   11:1A:C1:3D:FE:44:1F:8A:11:87:69:3D:63:C4:C9:F5:97:2B:E5:BE
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A59D700E0C53D873F8E1C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/543a399a-5087-3cd5-964f-19091aae8b0e.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        172.111.67.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:9d:70:0e:0c:53:d8:73:f8:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=63379177-34b5-4455-852a-c3962a31884a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6b:4d:17:df:3e:5c:49:0f:c6:7b:51:60:fc:
                    df:1f:f2:89:e2:78:9c:52:52:d5:fd:7d:61:aa:93:
                    33:6e:d5:5d:78:11:37:4b:b9:80:52:ce:98:dd:30:
                    50:27:73:3d:0d:d2:9d:73:16:05:d9:f2:2a:07:2c:
                    9b:97:6e:27:6c:9b:26:69:bd:cf:d2:9b:d4:1d:06:
                    46:9e:bb:a4:72:98:2d:57:65:fe:e8:8c:71:ac:00:
                    0b:2b:54:bf:a8:b9:8f:af:a2:e9:e0:12:c3:33:ad:
                    d3:2c:30:61:13:82:f1:0e:cb:23:19:91:37:6a:40:
                    c9:27:79:2e:51:bd:62:c1:43:2c:fe:0c:41:a2:65:
                    f9:51:0a:57:2c:bd:bb:3f:8f:3e:ce:9b:61:1e:0b:
                    7c:e9:48:f7:29:e0:ea:23:eb:ce:30:27:62:84:54:
                    58:65:f1:56:09:8b:b6:d5:ce:8c:a2:e7:50:a2:fc:
                    ae:55:f9:a8:e4:77:67:b7:a7:fb:d4:9f:df:48:52:
                    1d:44:55:27:b6:3f:2a:86:93:63:a7:43:88:3f:08:
                    18:b9:41:c0:9d:ac:be:fa:59:fd:b8:55:20:7b:60:
                    48:e2:c3:aa:e1:4a:ea:ad:c9:51:70:03:f4:0d:14:
                    e8:4a:bd:b5:c8:68:24:7f:9d:b4:55:de:be:90:52:
                    05:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1A:C1:3D:FE:44:1F:8A:11:87:69:3D:63:C4:C9:F5:97:2B:E5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/543a399a-5087-3cd5-964f-19091aae8b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.67.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ab:9b:e8:79:c5:5c:81:e4:09:c0:f5:05:f0:06:aa:22:78:
         21:a3:fe:f6:46:ab:40:4d:4c:25:d0:9e:f6:c6:75:42:da:c1:
         bd:2c:4f:24:89:84:d3:da:99:6a:99:2d:67:4e:ef:1e:6b:1d:
         b1:08:f9:5e:b2:94:43:86:f6:df:6c:01:7d:62:f7:7a:5a:14:
         58:20:26:21:68:52:51:56:29:f9:f8:f9:0e:11:e0:62:78:ff:
         6c:19:42:f2:46:8b:77:90:51:0a:27:71:73:dd:5e:e2:50:63:
         b9:5a:63:30:3a:99:b6:27:70:27:c3:bb:3d:92:98:86:27:de:
         e8:f8:02:56:d1:7b:fc:f1:2f:81:9d:ba:cc:19:61:bc:e6:f1:
         1c:fb:36:3a:ac:ca:2a:9d:be:a7:a1:f2:9e:82:aa:db:c7:cb:
         65:bc:29:5e:57:f6:0d:98:0c:79:a8:0e:32:45:25:d2:d1:79:
         54:35:94:af:3d:c9:71:a3:3f:73:79:98:fc:4e:99:e1:bd:d3:
         1e:d3:28:c8:27:d3:0c:d3:89:e6:8b:b6:9c:50:45:48:56:e5:
         0c:04:b9:57:9b:c2:a4:f6:10:f2:48:2e:5d:ee:aa:6f:e1:ab:
         b0:5b:88:95:77:7a:0f:ec:8f:89:69:7c:72:bd:07:bc:ae:88:
         a1:d8:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:55:40 2026 by rpki-client