Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/34d4b1da-be17-3ee1-887a-bbacb4e35968.roa
File:                     34d4b1da-be17-3ee1-887a-bbacb4e35968.roa (raw, json)
Hash identifier:          Pp4t9mt2yBtLAex0wFKRq2BG0odpUdXPJudFyvTvcEY=
Subject key identifier:   1B:34:2E:63:B3:AF:6C:B3:1C:7E:C4:7A:51:A0:DF:15:11:1B:D3:B2
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CA491A9653171753326ADBF00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/34d4b1da-be17-3ee1-887a-bbacb4e35968.roa
Signing time:             Sun 25 Jan 2026 14:00:40 +0000
ROA not before:           Sun 25 Jan 2026 14:00:40 +0000
ROA not after:            Sat 25 Apr 2026 13:00:40 +0000
asID:                     54113
IP address blocks:        172.111.84.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a4:91:a9:65:31:71:75:33:26:ad:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jan 25 14:00:40 2026 GMT
            Not After : Apr 25 13:00:40 2026 GMT
        Subject: CN=58c36951-07e9-4e92-b723-c6ed79b12930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:c9:84:4f:f2:2c:db:fd:68:b6:da:b3:84:
                    50:f1:b0:7f:70:a9:74:96:b4:31:3a:51:af:38:9d:
                    9a:a4:53:21:1e:8b:24:26:48:a7:c5:70:33:c1:a4:
                    37:57:b4:44:74:a4:d0:7b:9d:f2:68:2d:f9:e5:3b:
                    ba:d8:bf:d0:af:e8:be:32:4b:70:06:54:1e:11:bb:
                    56:77:e2:e1:12:5c:b5:85:49:5b:46:b4:08:ba:41:
                    39:8a:e0:9f:37:f5:d0:4a:1e:53:15:8d:b7:20:64:
                    69:b4:31:39:a8:43:a6:71:8a:50:da:32:9f:92:44:
                    ad:32:b0:14:6d:08:3f:07:23:13:91:20:82:8d:a5:
                    2c:5c:8d:6e:6b:bc:1b:b4:03:e4:25:da:f7:b3:99:
                    1a:6f:cd:b1:91:cc:59:0f:06:b1:8c:77:f4:05:01:
                    b5:6a:da:41:c7:d8:d8:0b:8b:e5:83:99:1d:83:b9:
                    77:d4:37:10:11:d5:b4:34:7b:ad:c4:25:62:db:0e:
                    4d:c2:86:b6:8e:84:90:63:e1:ff:b3:4c:06:72:1e:
                    89:95:63:e1:7e:c7:b8:5d:2e:71:18:e9:66:a3:97:
                    0c:64:bd:21:35:01:b5:7e:9f:ab:ce:42:87:a8:b8:
                    c2:7e:ea:16:99:a9:d2:27:1d:98:b7:d2:22:1e:22:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:34:2E:63:B3:AF:6C:B3:1C:7E:C4:7A:51:A0:DF:15:11:1B:D3:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/34d4b1da-be17-3ee1-887a-bbacb4e35968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.84.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:df:72:06:32:54:a2:7f:56:f8:57:cb:09:e6:ef:d2:57:82:
         b2:fe:cf:5d:2b:8e:f4:2b:0d:50:74:d7:3b:89:12:02:20:60:
         69:6a:cd:f0:8e:f8:c5:c7:e2:2e:e9:c7:f0:f4:2c:84:b2:2b:
         b5:74:4e:8a:0a:c4:72:de:de:c0:95:68:e6:34:cb:f4:da:76:
         12:df:28:ab:15:46:4e:39:b5:48:8f:90:60:c7:c2:32:34:4a:
         dc:9b:5e:98:f3:6a:3e:97:46:69:fd:d6:05:3f:4f:30:a8:ec:
         67:b2:f9:6a:70:3d:de:4c:ac:1f:25:e7:0f:8f:60:62:e2:60:
         bd:03:7c:5f:56:e2:65:4a:24:ec:8d:0d:b9:62:95:6d:ae:06:
         99:5e:eb:56:27:40:ee:9e:c1:aa:0e:c2:58:98:23:f2:7f:df:
         8d:71:11:2d:d6:1a:78:1a:f1:83:c6:02:2e:e0:71:b4:a2:31:
         ab:4f:3e:27:fe:d0:b3:88:9f:7b:56:3b:03:27:86:d3:78:b7:
         de:e6:29:72:c6:da:ba:fb:25:ff:49:ed:25:70:27:26:80:2d:
         61:8b:21:e8:e5:20:73:5d:c3:e8:6e:2d:ba:38:72:b5:0f:9c:
         02:33:2a:a4:8d:c9:48:32:9a:65:d7:d3:91:fe:ec:a8:39:ca:
         90:a0:52:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:28 2026 by rpki-client