Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6eda57f5-d112-3e76-be94-fdec2cb29551.roa
File:                     6eda57f5-d112-3e76-be94-fdec2cb29551.roa (raw, json)
Hash identifier:          Lj6knygZLwcWVeZB/HpNzKxiVwYTjOEFhqeJQAW5tk0=
Subject key identifier:   77:AA:63:5A:3D:14:86:DB:AB:E8:0A:9B:99:5C:DA:AD:45:63:4B:E0
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584EA79A112A09FB13D57F6DAC70
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6eda57f5-d112-3e76-be94-fdec2cb29551.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54113
IP address blocks:        172.111.85.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:11:2a:09:fb:13:d5:7f:6d:ac:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3d311127-2b93-410d-a114-c208d1b4e218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:16:65:7f:83:22:70:23:29:47:4d:ce:00:
                    5a:21:bd:71:e5:cb:27:cb:32:c4:99:4e:7a:85:89:
                    3d:b3:d2:90:9c:bc:11:6a:6b:b0:39:94:e6:df:ed:
                    9d:48:87:f5:4b:06:a3:cf:ad:87:5f:0b:b6:a5:99:
                    02:0d:50:b4:e4:1c:04:b2:df:7f:78:ee:79:1d:df:
                    cb:cf:d5:40:eb:30:ef:e7:bc:64:f8:cd:68:d1:8d:
                    22:c6:3a:7a:58:e9:53:a4:7f:dd:80:14:8e:0f:d2:
                    b3:cb:ac:f0:62:e6:65:ff:07:c6:b3:9d:d0:74:61:
                    99:bc:f8:fc:29:f6:a7:e9:d8:5b:90:50:79:c1:4e:
                    47:6b:01:74:05:b5:15:35:9e:24:98:e5:ae:73:77:
                    9f:2e:c5:31:d0:46:70:06:42:31:52:2b:bb:73:d1:
                    ee:5c:0e:e0:47:78:70:82:da:9d:6c:0c:6d:dc:61:
                    b2:7f:31:1b:cf:c1:64:98:88:ce:4e:47:17:8d:2a:
                    84:2f:ff:3d:2c:b0:6c:53:41:bf:c4:21:fb:c7:70:
                    58:40:74:fe:2c:4d:6e:50:d6:7b:06:fa:ed:57:54:
                    4a:af:9b:75:7e:fe:ee:c2:78:6d:36:bb:89:c7:37:
                    47:4a:d8:e8:53:22:e3:4a:fe:13:5a:ad:bd:22:7b:
                    d4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AA:63:5A:3D:14:86:DB:AB:E8:0A:9B:99:5C:DA:AD:45:63:4B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6eda57f5-d112-3e76-be94-fdec2cb29551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.85.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:05:b2:d0:ff:de:91:11:9f:2f:3d:47:63:9c:1f:98:ef:8b:
         3d:bb:29:78:7e:17:59:a7:a7:f8:ef:db:68:90:1c:05:ab:1a:
         05:19:33:4c:d0:cb:4d:5f:c4:d0:f7:c5:16:a8:3b:7b:dd:48:
         c3:e8:6b:0e:7f:cc:d5:5c:ab:7b:39:21:bf:e0:79:56:65:f3:
         5f:40:e0:00:b8:4e:66:58:78:35:d1:51:25:bc:95:a0:40:d8:
         72:87:42:55:2c:a5:fe:a2:eb:51:67:80:fd:67:39:63:46:78:
         28:eb:56:e7:84:28:7e:6c:18:26:b7:2e:42:d1:0e:96:e5:cc:
         9a:01:8d:98:95:27:45:ae:39:db:c6:1f:5f:4e:27:5d:e1:71:
         bf:e7:92:7a:26:49:28:17:51:6d:c1:8a:56:37:ae:40:9c:44:
         7e:1f:57:6f:2f:ec:ee:90:f6:1f:15:85:fc:c7:b0:06:2e:78:
         fb:b4:9f:e0:ab:27:8e:7c:dd:bc:36:bc:04:d3:f8:bb:56:68:
         d1:4b:58:47:ef:34:be:a8:90:c6:cb:6f:98:ed:b8:9f:c9:ec:
         00:07:df:19:76:c7:10:ba:88:24:44:6d:c8:b9:af:d4:02:69:
         ec:bc:75:a6:d6:69:9a:a8:3f:82:d9:93:db:98:b2:1a:72:56:
         ab:33:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:53:19 2026 by rpki-client