Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3523baea-e454-3068-b7aa-2b5588e904f2.roa
File:                     3523baea-e454-3068-b7aa-2b5588e904f2.roa (raw, json)
Hash identifier:          7QYnRCclfZqKefyhMTXijc4oJhdn+VcAj3mTyJQKb7w=
Subject key identifier:   D0:7C:30:52:FB:CC:B6:95:4E:80:18:16:87:04:9C:39:0B:E4:C7:DE
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD40788C3826A6C4761DAC680
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3523baea-e454-3068-b7aa-2b5588e904f2.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        172.111.124.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:88:c3:82:6a:6c:47:61:da:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=8c6e2669-f591-4c60-bfa2-398c0e9fdc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:81:d4:8f:c0:49:1e:61:13:63:4f:e7:ef:
                    92:e1:8a:ea:57:fa:c4:ab:a6:7c:c5:f4:56:ce:f7:
                    d6:f3:34:59:da:1f:9a:28:54:c0:cd:6c:b7:2b:ea:
                    b2:ef:30:c9:ff:c6:7e:74:f3:a3:d8:97:e7:a5:70:
                    97:5e:c6:05:3f:c6:8c:3e:cd:50:65:09:9b:2f:cb:
                    6e:75:2a:dd:6d:a8:61:91:ff:a6:45:8e:20:58:5a:
                    89:3f:c7:0f:9a:f0:76:71:53:52:32:50:80:76:21:
                    d0:fc:b2:1c:14:55:97:6e:a1:05:0d:74:0f:71:c9:
                    98:5c:cd:91:79:32:51:9a:a7:80:2b:12:4e:51:aa:
                    1a:90:41:89:b2:cf:5b:08:3c:24:34:e8:c7:97:e1:
                    c5:9d:35:a0:9b:28:1e:14:36:57:98:2f:d8:d5:d2:
                    aa:04:a7:78:84:c5:4b:62:14:25:af:bc:00:22:d2:
                    14:ca:45:72:1f:78:ca:89:97:86:55:6f:20:9d:33:
                    96:b5:77:00:8e:22:15:63:1e:fa:09:08:66:86:6a:
                    e3:70:de:82:6b:8b:77:05:e6:70:53:08:c4:64:1c:
                    7a:e3:9d:81:0a:49:d9:26:f3:ed:28:72:27:51:9d:
                    66:58:24:6c:ab:87:d6:c6:12:92:4a:79:48:e8:c9:
                    42:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7C:30:52:FB:CC:B6:95:4E:80:18:16:87:04:9C:39:0B:E4:C7:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3523baea-e454-3068-b7aa-2b5588e904f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.124.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:34:e4:34:04:cd:04:2d:1f:b2:27:18:aa:f8:1d:a0:54:db:
         e5:96:38:fd:4a:2c:08:b9:17:3b:b3:35:7b:50:6c:86:ee:4d:
         f5:ac:58:7a:76:bf:1a:da:76:2b:c6:9d:17:f0:e5:65:46:fb:
         c5:2f:a0:7a:f2:33:c0:bb:de:5f:82:a4:60:d2:31:8d:50:ce:
         e3:cf:8b:3d:eb:24:98:e3:33:f8:53:27:e5:85:bf:e7:47:a4:
         7a:78:b1:44:d2:06:f2:85:bb:9b:68:8c:c4:8b:2c:22:1e:ef:
         ef:26:62:66:7b:a9:20:37:80:7d:94:6c:9c:c3:54:d3:5c:84:
         f1:10:f8:42:1f:2d:aa:4a:93:67:ef:5a:0d:0c:5a:3a:1b:e2:
         e2:cc:98:f8:3f:69:06:0b:bc:7f:b8:1e:8b:c4:42:8e:bb:bc:
         fa:01:65:53:cd:e4:42:ec:17:49:7e:95:55:27:cd:7a:fe:e4:
         ca:e9:b0:42:26:ad:62:cd:40:fe:0c:df:9b:fa:bf:0f:59:ff:
         bd:7a:c4:22:8e:ff:d2:b1:65:fc:f5:5f:99:5a:62:82:ec:1d:
         7a:aa:52:6d:df:16:62:ae:af:45:8f:b7:63:d4:db:ce:6f:1a:
         1a:b2:cd:31:0b:c4:b5:2c:33:51:2f:43:ad:a9:88:76:0d:f9:
         56:48:72:8a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzUB4jDgmpsR2HaxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
OGM2ZTI2NjktZjU5MS00YzYwLWJmYTItMzk4YzBlOWZkYzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6aB1I/ASR5hE2NP5++S4YrqV/rEq6Z8xfRW
zvfW8zRZ2h+aKFTAzWy3K+qy7zDJ/8Z+dPOj2JfnpXCXXsYFP8aMPs1QZQmbL8tu
dSrdbahhkf+mRY4gWFqJP8cPmvB2cVNSMlCAdiHQ/LIcFFWXbqEFDXQPccmYXM2R
eTJRmqeAKxJOUaoakEGJss9bCDwkNOjHl+HFnTWgmygeFDZXmC/Y1dKqBKd4hMVL
YhQlr7wAItIUykVyH3jKiZeGVW8gnTOWtXcAjiIVYx76CQhmhmrjcN6Ca4t3BeZw
UwjEZBx6452BCknZJvPtKHInUZ1mWCRsq4fWxhKSSnlI6MlChQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNB8MFL7zLaVToAYFocEnDkL5MfeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMzUyM2JhZWEtZTQ1NC0z
MDY4LWI3YWEtMmI1NTg4ZTkwNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGrG98QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAVNOQ0BM0ELR+yJxiq+B2gVNvlljj9SiwIuRc7szV7UGyG7k31rFh6
dr8a2nYrxp0X8OVlRvvFL6B68jPAu95fgqRg0jGNUM7jz4s96ySY4zP4Uyflhb/n
R6R6eLFE0gbyhbubaIzEiywiHu/vJmJme6kgN4B9lGycw1TTXITxEPhCHy2qSpNn
71oNDFo6G+LizJj4P2kGC7x/uB6LxEKOu7z6AWVTzeRC7BdJfpVVJ816/uTK6bBC
Jq1izUD+DN+b+r8PWf+9esQijv/SsWX89V+ZWmKC7B16qlJt3xZirq9Fj7dj1NvO
bxoass0xC8S1LDNRL0OtqYh2DflWSHKK
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:23 2026 by rpki-client