Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fa4baba2-ad13-39ff-a4ba-82e0196bc80d.roa
File:                     fa4baba2-ad13-39ff-a4ba-82e0196bc80d.roa (raw, json)
Hash identifier:          j05DsPjSHVZIBzdlAjyu+LvvivoN2UHXkqB3syGv+yQ=
Subject key identifier:   22:DA:70:38:50:D3:5F:FA:7A:E0:59:DC:4C:28:97:7F:83:ED:E7:7C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A59DA1E898611C1DEF9148
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fa4baba2-ad13-39ff-a4ba-82e0196bc80d.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        172.111.71.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:9d:a1:e8:98:61:1c:1d:ef:91:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=413188b5-3d44-4f9d-9cbd-6afc8ac8eb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:36:82:db:90:3a:64:1e:a1:e4:10:01:83:
                    cf:b0:72:d2:e4:71:d8:d9:9e:78:ef:42:35:0b:43:
                    16:22:cc:e1:59:60:a6:8e:e7:a7:54:cf:a8:6f:b7:
                    92:da:0c:1a:12:72:60:91:49:40:b7:e7:45:85:82:
                    af:76:54:9f:15:46:5a:87:9e:c8:8e:c5:18:35:89:
                    ed:a3:1f:68:59:5e:af:3f:9a:dd:88:cf:5d:0e:be:
                    44:89:79:a2:ec:be:0d:89:2f:43:38:54:cc:cc:13:
                    fd:e9:b2:b2:18:17:de:d9:56:64:2c:fe:4d:35:70:
                    d4:c1:f4:24:5b:6e:4f:f3:72:79:36:74:b7:90:c2:
                    ce:ae:57:fc:d1:16:10:b5:c1:79:17:42:cb:78:9b:
                    e8:1f:03:62:d3:79:11:66:34:3e:7f:9d:87:fc:8e:
                    a4:5c:7f:9a:4c:ca:34:70:34:60:6a:4a:f7:15:62:
                    a1:7e:02:14:7c:f8:cd:e3:05:71:a0:bc:ba:6b:98:
                    18:0e:eb:29:33:39:89:9f:ce:f3:d1:bd:3c:66:4b:
                    b4:2a:11:e3:ad:e1:22:26:44:b2:d7:8a:e9:4f:c7:
                    72:2c:80:ee:8c:6c:f4:36:4e:b6:1d:e8:fd:e3:89:
                    db:26:88:09:64:40:36:f0:75:19:76:f1:35:25:e0:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DA:70:38:50:D3:5F:FA:7A:E0:59:DC:4C:28:97:7F:83:ED:E7:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fa4baba2-ad13-39ff-a4ba-82e0196bc80d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.71.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:83:75:af:b0:49:e9:13:d9:ad:40:35:db:39:2f:3f:5e:f4:
         31:bf:d3:ec:5d:c6:88:26:82:63:bd:71:b3:27:54:66:5c:78:
         7c:35:71:0b:9b:61:af:63:bd:c4:31:c4:ba:a6:52:ab:a1:8a:
         96:a8:c4:22:fc:9e:30:30:5d:aa:6b:5c:07:b1:ee:09:72:5f:
         4e:c6:20:90:29:af:2b:43:a6:7b:81:d8:8d:9e:67:8b:fd:d4:
         12:ec:7e:e9:f1:f4:b1:3a:e3:53:43:58:49:58:14:ad:a4:94:
         d5:2c:b4:33:65:53:43:29:2a:4b:e5:3a:bd:99:93:ae:ea:a8:
         0f:50:e1:87:55:b4:e6:e2:cf:1f:bb:e4:fc:64:5f:4e:73:67:
         84:8f:bb:d2:7c:45:08:7e:db:17:3e:ae:6e:93:e2:04:54:ff:
         06:6f:24:eb:1b:ea:f9:83:b9:a7:42:1a:6e:82:4b:9c:65:cd:
         83:58:e4:5a:6b:48:54:2c:e7:6e:2d:1e:c9:ef:2c:ad:be:8b:
         15:44:cf:a3:95:e0:6b:30:48:01:67:2b:a8:8c:44:27:95:51:
         d4:c0:2d:20:92:cf:69:37:93:7b:81:dc:85:f0:6e:c3:94:54:
         9f:b9:44:74:9c:41:45:a1:e1:93:63:1d:bc:9a:89:2f:a7:7c:
         12:81:2c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:53:29 2026 by rpki-client