Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4f526326-2369-3e03-abc3-630ef22c39fa.roa
File:                     4f526326-2369-3e03-abc3-630ef22c39fa.roa (raw, json)
Hash identifier:          ybNGsWvJXHL8DhDS7W5DH9Ho15BiCd/NyrJj/AdIme8=
Subject key identifier:   A3:1F:7F:9D:4C:90:4D:83:6E:35:59:E0:6E:4A:AB:37:02:AA:D7:FE
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584D500720BCEC77AFB0E9C95E80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4f526326-2369-3e03-abc3-630ef22c39fa.roa
Signing time:             Sat 28 Mar 2026 00:00:36 +0000
ROA not before:           Sat 28 Mar 2026 00:00:36 +0000
ROA not after:            Fri 26 Jun 2026 00:00:36 +0000
asID:                     54113
IP address blocks:        172.111.127.64/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:07:20:bc:ec:77:af:b0:e9:c9:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 28 00:00:36 2026 GMT
            Not After : Jun 26 00:00:36 2026 GMT
        Subject: CN=dbec5a78-f83f-4ca1-bd4d-2c48d16eabb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2b:eb:8a:03:23:2d:79:23:78:40:b1:03:b1:
                    85:99:50:29:ce:15:27:5b:52:3d:cf:86:bc:c9:df:
                    92:4d:07:fc:bc:8b:cf:41:06:26:da:9b:d6:75:83:
                    d1:f5:1e:a3:7f:f5:37:f4:e1:18:f9:29:06:3a:d0:
                    eb:fe:d3:fb:9a:2f:63:21:4c:aa:a5:7c:97:21:d0:
                    02:30:c3:47:dc:2e:11:07:33:39:f2:66:11:26:a7:
                    b4:70:be:16:cd:81:40:2a:9b:dc:32:45:0e:8b:2e:
                    33:fc:2f:4f:32:85:92:78:6b:6a:a6:78:44:e9:40:
                    ba:9c:cb:a4:99:4b:d7:25:9a:5e:23:dc:82:1c:59:
                    06:fa:44:af:98:1d:0e:b9:af:22:81:f6:f2:48:19:
                    0a:fd:cb:fd:c4:f9:6d:43:f7:38:56:3c:7c:98:84:
                    53:65:04:ad:32:93:b7:06:07:35:96:7e:b3:19:98:
                    dd:6c:6d:2f:06:1b:2d:26:7f:2f:33:8c:21:cd:20:
                    7e:f6:ed:a5:25:46:a5:d9:d7:63:b6:d6:55:89:ee:
                    fe:59:2f:99:db:5f:d4:91:07:3c:3c:0d:6d:ba:cc:
                    cb:2a:7c:e0:22:48:83:20:da:01:ea:55:cd:cc:66:
                    ec:46:af:65:b3:05:b3:67:61:a1:94:a3:d0:8b:aa:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1F:7F:9D:4C:90:4D:83:6E:35:59:E0:6E:4A:AB:37:02:AA:D7:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4f526326-2369-3e03-abc3-630ef22c39fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.127.64/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:04:4d:fc:ca:75:90:f0:df:86:88:0e:f8:3b:03:e3:b1:20:
         7c:e7:2b:92:d5:35:8d:99:d2:40:42:73:92:ee:b8:01:be:7f:
         7e:fc:bf:35:b3:65:9b:97:cf:de:37:82:04:d5:a2:3e:08:b0:
         e2:5a:a2:9a:27:e2:61:04:a4:38:71:6a:f9:af:32:5e:03:8f:
         a3:fc:78:18:d2:f8:88:3a:c1:03:77:30:c6:eb:5a:16:82:33:
         15:3f:9e:cc:69:d0:46:09:dd:ca:81:48:dc:bf:10:b4:50:91:
         5b:34:a8:90:71:2b:81:1a:18:2b:25:c6:f5:c8:02:07:0d:e1:
         fa:f4:a6:0e:b5:fd:52:d9:dc:52:a5:bf:99:e4:8b:2f:97:fc:
         a4:05:5d:af:b8:7a:71:b9:b8:16:10:e8:59:84:dd:25:22:44:
         5b:00:19:e8:6a:b5:3b:79:b3:80:dc:dc:93:d1:1c:ed:68:52:
         1b:e4:67:57:e3:75:bc:1f:9f:85:f6:cf:ee:2a:e9:8c:7f:9f:
         2f:74:88:87:82:bb:fb:bf:0a:52:01:4d:5a:3b:d2:c6:19:b5:
         19:31:a8:7b:c9:7b:50:fd:79:fd:b1:14:a6:37:1b:7b:36:29:
         a3:74:f2:40:e0:b0:29:ba:48:f9:a6:d8:36:9b:fe:f8:fc:26:
         63:c7:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:11 2026 by rpki-client