Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/edc6c20f-1455-3e54-83dd-1c7f052d0279.roa
File:                     edc6c20f-1455-3e54-83dd-1c7f052d0279.roa (raw, json)
Hash identifier:          xz3Di6qQSMKm7GXKU7jvuV7S1umfsJTDhNMiBgiupHQ=
Subject key identifier:   D7:59:A9:FE:E9:FF:EB:6E:0D:4A:D5:5F:AA:49:9C:C8:B8:08:21:3A
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F374D4177990AA501E2BA9940
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/edc6c20f-1455-3e54-83dd-1c7f052d0279.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        172.111.68.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:41:77:99:0a:a5:01:e2:ba:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=9be0e98a-76c3-41db-940a-99c1c26fc731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:e2:53:fc:89:e4:3f:60:bc:7e:8b:93:4c:
                    d0:78:0f:e7:07:d7:05:63:2c:22:fc:f1:81:90:f6:
                    e3:99:f4:81:01:70:34:9c:25:a9:fa:80:17:e1:f7:
                    e6:48:59:f6:d8:a2:d5:39:72:f0:37:78:60:07:6a:
                    2b:1e:3f:ac:cb:8c:55:c0:85:eb:f0:c6:4e:84:eb:
                    f0:70:7b:4f:3a:bc:66:24:4e:65:af:bf:ad:ba:e3:
                    a8:c0:d6:85:fe:4c:ae:9a:1c:cd:5b:e0:0a:cc:64:
                    79:3b:bb:f9:0d:ab:33:67:79:b1:11:ab:39:3c:d8:
                    26:88:42:a3:b6:1e:62:ec:27:26:89:06:7a:87:99:
                    e7:54:ca:1c:a9:56:58:88:b7:42:8c:ce:2b:cf:6f:
                    87:9e:7e:2b:23:a8:c3:af:b7:a4:91:a4:8f:e8:98:
                    64:52:4b:f6:ff:1e:0a:f4:d5:04:f0:d3:17:ed:78:
                    63:40:30:a6:9e:53:1d:71:9a:92:ca:56:96:66:8e:
                    27:95:99:0b:a3:76:01:4f:87:d8:59:b6:6b:4c:10:
                    ff:09:81:b4:e5:9a:80:0b:8c:d0:6d:11:0a:3d:96:
                    64:ae:bc:15:75:44:e6:3d:f8:93:8b:9a:52:f1:f8:
                    90:a7:88:7a:e7:21:9a:47:2f:d0:de:ac:81:86:77:
                    62:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:59:A9:FE:E9:FF:EB:6E:0D:4A:D5:5F:AA:49:9C:C8:B8:08:21:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/edc6c20f-1455-3e54-83dd-1c7f052d0279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.68.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:73:d8:fe:a8:e1:27:af:c6:e6:7e:14:b0:5a:62:e6:16:7a:
         7f:ed:62:7e:63:14:67:fc:3a:06:73:61:74:b3:99:b2:5d:a8:
         47:d9:94:63:d9:4b:00:dc:1e:ff:2e:43:16:15:6a:78:1d:64:
         fe:f8:c4:99:95:63:0a:8e:c7:f0:63:f0:89:cc:e0:bb:d5:df:
         8c:01:31:37:91:46:97:45:e5:88:f1:51:0e:7c:03:11:62:4e:
         e0:bd:bd:34:6d:77:fd:7f:b5:9d:32:5d:b1:fd:70:8f:c8:9f:
         e4:b2:05:67:c2:bd:b7:ef:48:b3:81:3f:e3:39:93:97:8a:5f:
         39:66:7f:5c:72:7a:fd:1e:90:db:16:3f:88:08:06:62:6d:e1:
         d4:28:55:df:74:d5:04:7d:5b:6b:62:18:c9:9e:16:af:71:ed:
         8d:8a:f9:af:00:d8:5b:40:a0:aa:d4:ed:2f:eb:26:fe:95:50:
         9d:57:c9:a7:47:e8:6a:2e:c7:34:5b:05:43:79:41:e9:5e:c4:
         13:3f:22:82:a1:c5:49:b8:0f:dc:2a:96:f7:96:43:83:db:f0:
         b2:cf:03:a1:67:72:bf:67:80:f1:1b:fc:33:b2:12:f2:4c:b6:
         cc:1c:63:58:7c:ac:72:06:de:6a:78:de:55:41:81:bb:6e:04:
         7a:ed:cd:2e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE83TUF3mQqlAeK6mUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
OWJlMGU5OGEtNzZjMy00MWRiLTk0MGEtOTljMWMyNmZjNzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB3iU/yJ5D9gvH6Lk0zQeA/nB9cFYywi/PGB
kPbjmfSBAXA0nCWp+oAX4ffmSFn22KLVOXLwN3hgB2orHj+sy4xVwIXr8MZOhOvw
cHtPOrxmJE5lr7+tuuOowNaF/kyumhzNW+AKzGR5O7v5DaszZ3mxEas5PNgmiEKj
th5i7CcmiQZ6h5nnVMocqVZYiLdCjM4rz2+Hnn4rI6jDr7ekkaSP6JhkUkv2/x4K
9NUE8NMX7XhjQDCmnlMdcZqSylaWZo4nlZkLo3YBT4fYWbZrTBD/CYG05ZqAC4zQ
bREKPZZkrrwVdUTmPfiTi5pS8fiQp4h65yGaRy/Q3qyBhndihQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNdZqf7p/+tuDUrVX6pJnMi4CCE6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZWRjNmMyMGYtMTQ1NS0z
ZTU0LTgzZGQtMWM3ZjA1MmQwMjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9EgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBQc9j+qOEnr8bmfhSwWmLmFnp/7WJ+YxRn/DoGc2F0s5myXahH2ZRj
2UsA3B7/LkMWFWp4HWT++MSZlWMKjsfwY/CJzOC71d+MATE3kUaXReWI8VEOfAMR
Yk7gvb00bXf9f7WdMl2x/XCPyJ/ksgVnwr2370izgT/jOZOXil85Zn9ccnr9HpDb
Fj+ICAZibeHUKFXfdNUEfVtrYhjJnhavce2NivmvANhbQKCq1O0v6yb+lVCdV8mn
R+hqLsc0WwVDeUHpXsQTPyKCocVJuA/cKpb3lkOD2/CyzwOhZ3K/Z4DxG/wzshLy
TLbMHGNYfKxyBt5qeN5VQYG7bgR67c0u
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:50:06 2026 by rpki-client