Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b63c1484-5ba8-3f99-9b7b-2df1e735079e.roa
File:                     b63c1484-5ba8-3f99-9b7b-2df1e735079e.roa (raw, json)
Hash identifier:          WcSn5rMZ4AbBV1jM++oM3PaqKwRsICAvmjDGF35oSQo=
Subject key identifier:   BD:C2:2F:2B:AA:72:72:F3:F2:04:98:00:49:B1:61:30:0B:3E:28:67
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A6DBB6852AD50A2200AD3FA80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b63c1484-5ba8-3f99-9b7b-2df1e735079e.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     54113
IP address blocks:        172.111.71.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:68:52:ad:50:a2:20:0a:d3:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=e04d92f4-5f16-49c9-b970-5b76666f9da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:34:97:96:8e:46:c4:38:82:6e:6c:6a:c7:
                    af:3c:9e:e1:64:a1:bf:31:56:19:48:3a:cd:42:fe:
                    b6:35:47:fb:a1:08:64:a7:0f:76:ca:16:0f:71:48:
                    6e:83:e6:72:f1:c3:76:54:18:b5:e5:bf:7f:f0:11:
                    ef:d6:25:2b:0c:db:07:40:8a:1a:1f:8b:b9:f0:2b:
                    07:1a:74:9f:71:be:51:47:8e:97:aa:22:51:57:4c:
                    de:d3:7f:a4:5a:17:0e:94:a3:4c:1f:7b:6f:17:b9:
                    8f:fe:b4:e4:c3:11:e7:67:63:f2:dc:8f:79:f3:60:
                    7c:f6:97:35:ba:00:88:00:65:88:c2:d1:f1:68:3c:
                    ab:e3:b7:b9:7d:f0:7c:9e:c8:27:c9:3f:2f:1f:2e:
                    8e:c4:6e:d4:5d:dc:93:99:b8:25:3f:92:68:29:e9:
                    24:83:d5:92:86:81:fb:2f:bd:88:e9:75:a6:77:45:
                    3e:5d:5c:b1:5e:84:dd:85:83:07:70:c1:a5:e3:ae:
                    2a:31:76:a0:37:ef:cf:b9:20:2b:d9:db:08:fe:3f:
                    b8:fb:14:7c:63:9d:7f:8c:76:e4:df:e6:b8:13:34:
                    b4:36:7d:00:39:4a:e1:b9:76:b3:84:bf:a2:f2:3e:
                    52:07:83:d5:04:d8:e5:81:c4:28:73:dc:77:e4:0e:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C2:2F:2B:AA:72:72:F3:F2:04:98:00:49:B1:61:30:0B:3E:28:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b63c1484-5ba8-3f99-9b7b-2df1e735079e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.71.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:af:fb:c4:e4:93:39:07:66:f1:b5:51:ac:2c:8c:c8:8f:eb:
         06:66:4c:79:f6:da:e8:b6:d0:a5:ed:4c:69:23:e6:7e:f8:c3:
         9f:f6:f2:29:83:5a:ac:a1:5a:2f:c8:17:d0:44:89:35:22:04:
         e5:74:89:82:5c:ca:09:03:81:50:c8:3c:bd:a1:bb:4a:a7:03:
         49:ee:85:5c:6c:12:26:08:85:13:8e:95:20:57:72:3e:6f:d5:
         b9:c5:2f:fa:8a:21:5c:c8:f3:e3:84:7c:2a:16:d0:19:a4:46:
         42:65:f1:1f:66:c8:ff:c0:cd:ea:9a:a9:65:88:a6:97:56:b4:
         3c:74:8c:21:63:60:dc:bc:dc:bc:eb:41:d4:0a:d1:0e:2f:ed:
         63:e9:75:31:ca:c9:88:f1:cb:d9:03:e9:fa:35:d1:c3:da:c3:
         c9:7b:85:30:55:eb:73:e9:16:4b:8b:df:60:e7:f8:4c:a0:92:
         f1:9a:7b:ee:86:08:11:b3:77:e4:a5:9c:7f:2e:b8:df:8a:ab:
         2d:fa:48:58:ac:60:b2:59:4f:ac:53:02:b1:2d:0a:77:54:20:
         d2:02:50:a4:0f:c6:25:1e:80:30:98:4f:19:b2:bf:fb:eb:ec:
         c5:37:38:c9:2a:4c:27:54:6a:25:38:45:c3:b2:44:69:3b:08:
         00:65:4b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:54:58 2025 by rpki-client